CDS Service Intelligence Specialist; Secret Clearance Required

Position: CDS Service Intelligence Specialist (Secret Clearance Required)
** Date Posted:
**** Country:
** United States of America
*
* Location:

** US-MA-TEWKSBURY-TB2 ~ 50 Apple Hill Dr ~ SUDBURY BLDG, Tewksbury Tb2 200 Sudbury
** Position Role Type:
** Onsite
* * U.S. Citizen, U.S. Person, or Immigration Status Requirements:
** Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
** Security Clearance Type:
** DoD Clearance:
Secret
** Security Clearance Status:
** Ability to obtain INTERIM U.S. government issued security clearance is required prior to start date

RTX Corporation is an Aerospace and Defense company that provides advanced systems and services for commercial, military and government customers worldwide. It comprises three industry-leading businesses – Collins Aerospace Systems, Pratt & Whitney, and Raytheon. Its 185,000 employees enable the company to operate at the edge of known science as they imagine and deliver solutions that push the boundaries in quantum physics, electric propulsion, directed energy, hypersonics, avionics and cybersecurity.

The company, formed in 2020 through the combination of Raytheon Company and the United Technologies Corporation aerospace businesses, is headquartered in Arlington, VA.The following position is to join our RTX
** Enterprise Services
** team:
** Role Overview:
** RTX Classified Digital Services (CDS) is seeking a a motivated and hands-on Splunk ITSI Administrator to own the day-to-day configuration, health, and output of our Service Intelligence platform. You won't just be building dashboards; you will be responsible for mapping our technical infrastructure to meaningful business services, tuning KPIs to eliminate "alert fatigue," and ensuring our operations teams have a clear line of sight into system health.  

The ideal candidate will play a critical role in delivering actionable insights, ensuring robust service monitoring, and enabling proactive alerting across our IT infrastructure.  This individual will work closely with cross-functional teams to ensure the health and performance of our services while driving continuous improvement in our monitoring and alerting capabilities.

This is a practitioner role—we need someone who can dive into SPL, configure complex Aggregation Policies, and ensure our ITSI environment is performant and accurate.
** This role will be onsite in either our Tewksbury MA or Richardson TX locations. It required an active Secret Clearance in order to be considered
***
* What You Will Do:

*** Service & KPI Construction:
Build and maintain Services within ITSI. Define and tune KPIs using Base Searches to ensure high-performance data retrieval.
* Threshold Management:
Implement and manage Adaptive Thresholding to account for data trends (e.g., peak vs. off-peak traffic) and reduce false positives.
* Episode Management:
Design and refine Aggregation Policies to group related notable events into actionable Episodes, significantly reducing the "noise" sent to on-call engineers.
* Entity Mapping:
Manage Entity Discovery and ensure infrastructure components (servers, containers, cloud instances) are correctly associated with their respective services.
* Glass Table Development:
Create and update functional Glass Tables for both technical deep-dives and executive-level status views.
* Troubleshooting & Maintenance:
Monitor the health of the ITSI environment itself, ensuring search head performance isn't degraded by inefficient KPI searches.
* Bidirectional JSM Integration:
Configure and maintain the Splunk ITSI Module for JSM. Ensure that ITSI Episodes automatically create, update, and close Jira tickets based on service health status.
* Incident Workflow Automation:
Map ITSI "Severity" and "Priority" levels to JSM Incident fields to ensure the right on-call teams are notified via the correct queues.
* Alert-to-Ticket Optimization:
Refine Aggregation Policies to ensure JSM isn't flooded with duplicate tickets; implement "flapping" logic to prevent tickets from reopening unnecessarily.
* Service Mapping Alignment:
Synchronize the ITSI Service Tree with the JSM Service Registry to…