Data Platform Engineer - Cybersecurity and IT Consulting

Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal agencies and Fortune 100 enterprises. Headquartered in Washington, DC, Dragonfli supports clients in securing mission-critical systems across on-site, hybrid, and fully remote environments.

This contract Data Platform Engineer role supports a large federal agency in protecting security data platforms within a large-scale IT environment. The engineer will manage security data platforms such as Splunk and data lakes, ensuring effective data flows, integrations, and platform support. Key technologies include Splunk (ES, UBA, CORE), Cribl, Red Hat OS, and VMware (vSphere/ESXi). The role requires seasoned IT security expertise, hands-on technical skills, and strong communication and planning abilities. It's a high-impact opportunity to shape security analytics capabilities within a major federal agency.

This is a multi-year contract position involving a large US federal agency. Candidates with previous federal contracting experience are preferred. U.S. Citizenship or Permanent Residency required. If hired, all work related to this role must be performed within the continental U.S.

Responsibilities:

• Manage security data platforms, such as Splunk and data lakes.
• Ensure effective data flows, integrations, and platform support.
• Support event ingestion, platform maintenance, and technical add-ons.
• Troubleshoot to support operational and compliance reporting.
• Optimize data use for security monitoring, incident response, and threat analysis.
• Collaborate across teams to enhance security analytics capabilities.
• Configure and maintain various event ingestion methods.
• Create and maintain custom TAs for data parsing into Splunk CIM format.
• Monitor and perform routine maintenance of data systems.
• Drive process improvements and attention to detail.

• Four (4)+ years of experience supporting enterprise data platforms.
• BS/BA in a cyber-related field or equivalent experience/certifications.
• Experience with installing, updating, and maintaining ELM and SIEM.
• Proficiency with Splunk (ES, UBA, CORE), Cribl, Red Hat OS, and VMware OS.
• Experience configuring and maintaining event ingestion methods.
• Ability to create and maintain custom TAs for Splunk.
• Experience in troubleshooting, monitoring, and maintaining data systems.
• Familiarity with enterprise security operations.
• Strong cross-functional communication skills.

• Hands-on management of security data platforms.

• Expertise in data flows and platform integrations.

• Proficiency in Splunk and related technologies.

• Strong troubleshooting and problem-solving skills.

• Ability to optimize security monitoring and incident response.

• Excellent cross-functional communication abilities.

• Attention to detail and process improvement mindset.

• Ability to work collaboratively across teams.

• Strong planning and organizational skills.

• Insurance – health, dental, and vision

• Paid Time Off (PTO) and 11 Federal Holidays

• 401(k) employer match