Data Platform Engineer

Dragonfli Group•Washington, DC

10d

About The Position

Dragonfli Group is a cybersecurity and IT consulting firm providing services to federal agencies and Fortune 100 enterprises. Headquartered in Washington, DC, Dragonfli supports clients in securing mission-critical systems across on-site, hybrid, and fully remote environments. This contract Data Platform Engineer role supports a large federal agency in protecting security data platforms within a large-scale IT environment. The engineer will manage security data platforms such as Splunk and data lakes, ensuring effective data flows, integrations, and platform support. Key technologies include Splunk (ES, UBA, CORE), Crib, Red Hat OS, and VMware OS. The role requires seasoned IT security expertise, hands-on technical skills, and strong communication and planning abilities. It's a high-impact opportunity to shape security analytics capabilities within a major federal agency. This is a multi-year contract position involving a large US federal agency. Candidates with previous federal contracting experience are preferred. U.S. Citizenship or Permanent Residency required. If hired, all work related to this role must be performed within the continental U.S.

Requirements

Four (4)+ years of experience supporting enterprise data platforms.
BS/BA in a cyber-related field or equivalent experience/certifications.
Experience with installing, updating, and maintaining ELM and SIEM.
Proficiency with Splunk (ES, UBA, CORE), Crib, Red Hat OS, and VMware OS.
Experience configuring and maintaining event ingestion methods.
Ability to create and maintain custom TAs for Splunk.
Experience in troubleshooting, monitoring, and maintaining data systems.
Familiarity with enterprise security operations.
Strong cross-functional communication skills.

Nice To Haves

Candidates with previous federal contracting experience are preferred.

Responsibilities

Manage security data platforms, such as Splunk and data lakes.
Ensure effective data flows, integrations, and platform support.
Support event ingestion, platform maintenance, and technical add-ons.
Troubleshoot to support operational and compliance reporting.
Optimize data use for security monitoring, incident response, and threat analysis.
Collaborate across teams to enhance security analytics capabilities.
Configure and maintain various event ingestion methods.
Create and maintain custom TAs for data parsing into Splunk CIM format.
Monitor and perform routine maintenance of data systems.
Drive process improvements and attention to detail.