AIOps Engineer SME NM

Cb•Albuquerque, NM

About The Position

SarelaTech is seeking a Senior AIOps Engineer to support critical mission operations in a secure environment and lead the transformation of its IT Service Management capabilities. The role designs, deploys, and manages AIOps solutions that improve the reliability and security of Department of War networks and systems. As the technical lead, the engineer coordinates integrations with Network Engineering, ServiceNow, and SolarWinds teams. The engineer uses Splunk and its Machine Learning Toolkit (MLTK) to deliver descriptive and predictive analytics and establish closed-loop automated incident response, helping ensure high availability of mission-essential infrastructure. The position supports Splunk AIOps across unclassified and classified environments, secure telemetry ingestion, incident correlation, cyber defense operations, and compliance with DoW security standards and protocols. Compensation is $190,000–$218,000 per year.

Requirements

Active TS/SCI security clearance at time of hire.
Active IAT Level II certification, such as Security+ CE, CySA+, GSEC, or SSCP.
United States citizenship.
At least 7 years of experience with Splunk Enterprise, including architectural design, cluster management, and advanced SPL.
At least 3 years of experience implementing AIOps workflows, including integration with enterprise ITSM solutions such as ServiceNow for automated root cause analysis and remediation.
Proven track record building, testing, and tuning supervised and unsupervised models in Splunk MLTK.
Advanced scripting skills for custom search commands, API integrations, and remediation automation, such as Python.
Experience leading technical working groups and directing adjacent infrastructure and development teams.
Prior experience in a DoW/DoD Operations Center (NOC/SOC) or supporting mission-critical systems and networks.
Ability to present designs, plans, and analyses of alternatives to technical leadership boards for approval.

Nice To Haves

Experience aggregating and correlating telemetry from SolarWinds, ServiceNow, and VMware vCenter.
Splunk Enterprise Certified Architect or Splunk ITSI Certified Admin certification.
Experience with CNCF observability tools in secure hybrid multi-cloud environments, including Azure or AWS.
Understanding of the Risk Management Framework (RMF) and the Authorization to Operate (ATO) process for AI/ML workloads.

Responsibilities

Lead the AIOps platform initiative and serve as the primary technical liaison to Network Engineering, ServiceNow, and SolarWinds teams to establish unified telemetry pipelines.
Architect closed-loop remediation workflows integrating Splunk ITSI alerts with ServiceNow Event Management and Incident Management.
Architect and maintain Splunk AIOps solutions across unclassified and classified enclaves for real-time situational awareness.
Normalize and correlate SolarWinds network performance and fault data with server and application logs.
Deploy custom machine learning models using Splunk MLTK to identify anomalous behavior, potential cyber threats, and infrastructure degradations.
Engineer secure telemetry ingestion pipelines for data from cross-domain solutions and tactical edge devices.
Use ITSI to correlate multi-source events, reduce alert noise, and prioritize high-impact mission alerts.
Collaborate with the Cyber Security Service Provider (CSSP) to integrate AIOps insights into defensive cyber operations.
Ensure observability tools comply with DoW STIGs and IL5/IL6 protocols, and maintain architectural documentation and compliance traceability.
Stay current on AIOps and related capabilities relevant to DoD, federal, and intelligence mission systems.
Lead technical working groups and direct the efforts of adjacent infrastructure and development teams.
Present designs, plans, and analyses of alternatives to technical leadership boards for approval.