CDS Service Intelligence Specialist (Secret Clearance Required)

Date Posted:

Country:

United States of America

Location:

US-MA-TEWKSBURY-TB2 50 Apple Hill Dr SUDBURY BLDG Tewksbury Tb2 200 Sudbury

Position Role Type:

Onsite

U.S. Citizen U.S. Person or Immigration Status Requirements:

Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required as only U.S. citizens are eligible for a security clearance

Security Clearance Type:

DoD Clearance: Secret

Security Clearance Status:

Ability to obtain INTERIM U.S. government issued security clearance is required prior to start date

RTX Corporation is an Aerospace and Defense company that provides advanced systems and services for commercial military and government customers worldwide. It comprises three industry-leading businesses Collins Aerospace Systems Pratt & Whitney and Raytheon. Its 185000 employees enable the company to operate at the edge of known science as they imagine and deliver solutions that push the boundaries in quantum physics electric propulsion directed energy hypersonics avionics and cybersecurity. The company formed in 2020 through the combination of Raytheon Company and the United Technologies Corporation aerospace businesses is headquartered in Arlington VA.

The following position is to join our RTX Enterprise Services team:

Role Overview:

RTX Classified Digital Services (CDS) is seeking a a motivated and hands-on Splunk ITSI Administrator to own the day-to-day configuration health and output of our Service Intelligence platform. You wont just be building dashboards; you will be responsible for mapping our technical infrastructure to meaningful business services tuning KPIs to eliminate alert fatigue and ensuring our operations teams have a clear line of sight into system health. The ideal candidate will play a critical role in delivering actionable insights ensuring robust service monitoring and enabling proactive alerting across our IT infrastructure. This individual will work closely with cross-functional teams to ensure the health and performance of our services while driving continuous improvement in our monitoring and alerting capabilities.

This is a practitioner rolewe need someone who can dive into SPL configure complex Aggregation Policies and ensure our ITSI environment is performant and accurate.

This role will be onsite in either our Tewksbury MA or Richardson TX locations. It required an active Secret Clearance in order to be considered

What You Will Do:

• Service & KPI Construction: Build and maintain Services within ITSI. Define and tune KPIs using Base Searches to ensure high-performance data retrieval.
• Threshold Management: Implement and manage Adaptive Thresholding to account for data trends (e.g. peak vs. off-peak traffic) and reduce false positives.
• Episode Management: Design and refine Aggregation Policies to group related notable events into actionable Episodes significantly reducing the noise sent to on-call engineers.
• Entity Mapping: Manage Entity Discovery and ensure infrastructure components (servers containers cloud instances) are correctly associated with their respective services.
• Glass Table Development: Create and update functional Glass Tables for both technical deep-dives and executive-level status views.
• Troubleshooting & Maintenance: Monitor the health of the ITSI environment itself ensuring search head performance isnt degraded by inefficient KPI searches.
• Bidirectional JSM Integration: Configure and maintain the Splunk ITSI Module for JSM. Ensure that ITSI Episodes automatically create update and close Jira tickets based on service health status.
• Incident Workflow Automation: Map ITSI Severity and Priority levels to JSM Incident fields to ensure the right on-call teams are notified via the correct queues.
• Alert-to-Ticket Optimization: Refine Aggregation Policies to ensure JSM isnt flooded with duplicate tickets; implement flapping logic to prevent tickets from reopening unnecessarily.
• Service Mapping Alignment: Synchronize the ITSI Service Tree with the JSM Service Registry to ensure consistent reporting across the ITIL lifecycle.

Qualifications You Must Have:

• Typically requires a University Degree or equivalent experience and a minimum 5 years of experience or an Advanced Degree and a minimum 3 years experience.
• 2 years of Splunk Administration with at least 1 year focused specifically on ITSI.
• SPL Proficiency: Ability to write complex searches use eval stats and join efficiently and optimize searches for performance.
• ITSI Modules: Experience with the Service Analyzer Notable Event Review and Deep Dives.
• CIM Knowledge: Experience mapping data to the Common Information Model (CIM) to ensure seamless ITSI integration.
• Data Onboarding: Experience configuring forwarders and technical add-ons (TAs) to bring data into Splunk for ITSI consumption.
• Jira Integration Experience: Experience using the Splunk Add-on for Jira or the ITSI Action Center to push data to JSM.
• API & Webhooks: Comfortable working with REST APIs and Webhooks to troubleshoot communication issues between Splunk and the Atlassian Data Center on-prem environment.
• ITSM Process Knowledge: Basic understanding of ITIL frameworks (Incident Problem and Change Management) to ensure technical alerts follow business governance.
• Solid understanding of IT infrastructure components (servers networks databases cloud platforms etc.) and their interdependencies.
• Proficiency in scripting languages such as Python or PowerShell for automation and customization.
• Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required as only U.S. citizens are eligible for a security clearance.

Qualifications We Prefer

• Splunk certifications such as Splunk Enterprise Certified Admin or Splunk IT Service Intelligence Certified Admin
• Experience with ITIL concepts and practices.
• Knowledge of additional monitoring tools and platforms.
• Experience working in large-scale IT environments or industries such as aerospace defense or manufacturing.

Candidate Profile: What Good Looks Like

• Practical & Methodical: You dont just turn on an alert; you watch it for a week to make sure it isnt flapping.
• A fix-it Mentality: You enjoy cleaning up messy metadata fixing broken entity aliases and keeping the Service Tree organized.
• Performance-Minded: You understand that a poorly written Base Search can tank a Search Head and you proactively optimize your queries.
• Requires advanced knowledge of work area typically obtained through advanced education combined with experience. May have practical knowledge of project
• management. Practical to substantial knowledge of RTX projects programs or systems with the ability to make enhancements and leverage in daily work.

What We Offer: Whether youre just starting out on your career journey or are an experienced professional we offer a robust total rewards package with compensation; healthcare wellness retirement and work/life benefits; career development and recognition programs. Some of the benefits we offer include parental (including paternal) leave flexible work schedules achievement awards educational assistance and child/adult backup care.

Learn More & Apply Now

Work Location: Onsite - Tewksbury MA or Richardson TX

Please consider the following role type definition as you apply for this role:

Onsite: Employees who are working in Onsite roles will work primarily onsite. This includes all production and maintenance employees as they are essential to the development of our products

As part of our commitment to maintaining a secure hiring process candidates may be asked to attendselect steps of the interview process in-person at one of our office locations regardless of whether the role is designated as on-site hybrid or remote.

The salary range for this role is 86800 USD - 165200 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer including but not limited to the role function and associated responsibilities a candidates work experience location education/training and key skills.

Hired applicants may be eligible for benefits including but not limited to medical dental vision life insurance short-term disability long-term disability 401(k) match flexible spending accounts flexible work schedules employee assistance program Employee Scholar Program parental leave paid time off and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.

Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including but not limited to individual performance business unit performance and/or the companys performance.

This role is a U.S.-based role. If the successful candidate resides in a U.S. territory the appropriate pay structure and benefits will apply.

RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.

RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race color religion sex sexual orientation gender identity national origin age disability or veteran status or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans Readjustment Assistance Act.

Privacy Policy and Terms:

Click on this link to read the Policy and Terms