Arlington, VA

Salary
$150,000–$174,000
Posted
Jun 29, 2026
Location
Arlington, VA
Last confirmed open
Jul 21, 2026

What this job asks for AI summary

A technical lead role focused on building and operating AIOps capabilities for secure Department of Defense networks. Day-to-day work centers on architecting Splunk ITSI solutions, developing machine learning models via the Splunk MLTK, and integrating automated incident remediation workflows with ServiceNow and SolarWinds across both classified and unclassified environments. Suited to a seasoned Splunk engineer with a TS/SCI clearance and prior experience in DoD operations centers.

Senior level · 7+ years · National · TS/SCI clearance · Full-time

Pay in the description: $150,000–$174,000

Must have (6)
Splunk · 7+ yrsSPLSplunk MLTKSplunk ITSIServiceNow · 3+ yrsPython
Nice to have (4)
SolarWindsVMware vCenterAzure or AWSRMF

“or” means any one of them counts — you don't need all of them.

We read this from the posting text with AI. Skim the description below before ruling yourself out.

How this req sits in the market our data

What gives you an edge
ServiceNow5%Splunk6%

Rare in this occupation — lead with these, and say what you built with them.

What won't set you apart
Python51%

Most people in this occupation already list these. Still required — just not what gets you shortlisted.

What the occupation pays Median $116,580 (middle half $79,370–$157,500). This posting is about at that midpoint.

Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.

Why we read it this way (8)

Work location is not explicitly stated in the posting; the role supports DoD/DoW classified environments (including IL5/IL6 enclaves), which strongly implies an on-site or government-facility requirement. Remote is marked false accordingly.

The 7+ years figure is tied specifically to Splunk Enterprise experience; it is also the largest role-level experience gate in the posting and is used as the overall years minimum.

The 3+ years of AIOps/ITSM experience (with ServiceNow) is a separate, named-technology gate and is reflected on the ServiceNow skill's years demanded.

An active IAT Level II certification (Security+ CE, CySA+, GSEC, or SSCP) is explicitly required but is a professional certification, not a named technology tool, so it is captured in notes rather than the skills list.

US Citizenship is explicitly required in addition to the TS/SCI clearance.

SolarWinds, VMware vCenter, cloud observability (Azure/AWS), and RMF/ATO knowledge appear under the 'How you will wow us' (preferred/nice-to-have) section.

The SOC code 15-1299 (Computer Occupations, All Other) is used because AIOps Engineering — combining ML-driven observability, ITSM orchestration, and Splunk platform architecture — does not map cleanly to a single standard SOC; 15-1212 (Information Security Analysts) is the closest runner-up given the cyber defense and DoD security compliance emphasis.

Requires a TS/SCI clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.

Read the full posting

The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.

Apply

Apply on employer site ↗