Defense Engineering

Defense Engineering Inc. (DEi) is seeking a Senior AIOps Engineer to support our long-term contract located at the Defense Threat Reduction Agency (DTRA) at Fort Belvoir, VA.

In addition to the traditional full-time employee benefits package (health, dental, vision, 401K, life insurance, short-term and long-term disability plans, vacation time and holidays), DEi also offers Education and professional Certification Reimbursement, Gym Membership reimbursement, Mass Transit and Parking benefits.

Job Category: Information Technology – Intermediate AIOps Engineer

Salary: Negotiable

Location: Fort Belvoir, VA US

Clearance Level Must Currently Possess:

TS/SCI

US Citizenship

Certifications (Baseline)

• 8570 Baseline Active IAT Level II (Minimum of one)
  • Security+ CE
  • CySA+
  • GICSP
  • GSEC
  • SSCP

Education/Experience:

7+ years of experience with Splunk Enterprise, including architectural design, cluster management, and advanced Search Processing Language (SPL).

3+ years of experience specifically implementing AIOps workflows, including automated root cause analysis and predictive maintenance.

Schedule: Full-time

Potential for Teleworking: Situational

Travel: None

Shift: Day Job

Job Description

DEi has an opportunity for a skilled Senior AIOps Engineer to support critical mission operations within a secure environment and lead the transformation of our IT Service Management (ITSM) capabilities. This role is responsible for the design, deployment, and management of AIOps solutions that enhance the reliability and security of Department of War (DoW) networks and systems.

Acting as the technical lead for this initiative, you will orchestrate integrations across existing Network Engineering, ServiceNow, and SolarWinds teams. You will utilize Splunk and the Machine Learning Toolkit (MLTK) to provide predictive analytics and automated incident response, ensuring the high availability of mission-essential infrastructure.

Key Responsibilities

• Lead the AIOps platform initiative by being the primary technical liaison to existing Network Engineering, ServiceNow, and SolarWinds administration teams to establish unified telemetry pipelines.
• Architect closed-loop remediation workflows by deeply integrating Splunk ITSI alerts with ServiceNow Event Management and Incident Management modules.
• Architect and maintain Splunk AIOps solutions across unclassified and classified enclaves to provide real-time situational awareness.
• Normalize and correlate network performance and fault data from SolarWinds with server and application logs to provide a holistic view of enterprise health.
• Deploy custom machine learning models via Splunk MLTK to identify anomalous behavior, potential cyber threats, and infrastructure degradations.
• Engineer secure data ingestion pipelines for telemetry data from cross-domain solutions and tactical edge devices.
• Utilize ITSI to correlate multi-source events, reducing noise and prioritizing high-impact mission alerts.
• Collaborate with the Cyber Security Service Provider (CSSP) to integrate AIOps insights into defensive cyber operations (DCO).
• Ensure all observability tools comply with DoW STIGs and IL5/IL6 protocols; develop and maintain architectural documentation and compliance traceability.
• Stay current on AIOps and related capabilities relevant to DoD, federal, and intelligence mission systems.

Required Qualifications

• Active Top Secret / Sensitive Compartmented Information (TS/SCI) required at time of hire.
• Active IAT Level II certification (e.g., Security+ CE, CySA+, GSEC, or SSCP) required.
• United States Citizenship is required.
• 7+ years of experience with Splunk Enterprise, including architectural design, cluster management, and advanced Search Processing Language (SPL).
• 3+ years of experience specifically implementing AIOps workflows, including integration with enterprise ITSM solutions (ServiceNow) for automated root cause analysis and remediation.
• Proven track record of building, testing, and tuning supervised and unsupervised models within the Splunk MLTK.
• Advanced scripting skills for developing custom search commands and automating remediation tasks (e.g., Python).
• Prior experience working within a DoW/DoD Operations Center (NOC/SOC) or supporting mission-critical systems and networks.
• Must be able to work as part of a team to troubleshoot and resolve complex issues.
• Excellent written and verbal communication skills.
• Capability to draft SOPs and technical documentation and to communicate with senior program and customer leadership.
• Ability to present designs, plans, courses of action, and analyses of alternatives to technical leadership personnel and boards for approvals.

Desired Qualifications

• Experience aggregating and correlating telemetry from diverse IT operations and service management tools, specifically SolarWinds, ServiceNow, and VMware vCenter.
• Splunk Enterprise Certified Architect or Splunk ITSI Certified Admin.
• Experience with Cloud Native Computing Foundation (CNCF) observability tools in a secure Cloud environment.
• Understanding of the Risk Management Framework (RMF) and the Authorization to Operate (ATO) process for AI/ML workloads.
• Experience providing technical leadership and oversight of teams of junior, intermediate, and senior Engineers.
• Experience working in hybrid multi-cloud environments with on-premises, Azure, and AWS cloud services.