MetroStar is looking for a Platform Engineer to deliver Splunk data engineering and platform operations for continuous monitoring and analysis across the federal government. You will operate and evolve mission-critical SIEM and monitoring platforms to ensure reliable, secure, and scalable Splunk capabilities that directly support mission operations and decision-making.
What You'll Do
- Design and manage Splunk data ingestion pipelines and dashboards supporting mission-critical use cases.
- Operate and maintain Splunk Enterprise in a secure, high-availability environment.
- Support security monitoring, detection, and incident response operations.
- Participate actively in Agile execution and team delivery cadence.
- Optimize data pipelines, performance, and data quality across the platform.
- Communicate technical insights, risks, and issues clearly to both technical and non-technical stakeholders.
- Establish and maintain a high level of customer trust and confidence through technical excellence and reliable delivery.
- Apply creativity and sound engineering judgment to deliver innovative solutions aligned to customer needs.
What We're Looking For
- Active Top Secret security clearance with SCI eligibility required.
- Splunk Enterprise Certified Administrator or equivalent demonstrated administrative capability.
- Security+ certification.
- Possess DoD 8140 certification aligned to the 521 Cyber Defense Infrastructure Support Specialist work role (e.g., Security+, SSCP, CySA+, PenTest+, CASP+, GCIH, CISSP, or GSLC).
- 5+ years of experience in data management or systems administration.
- 3+ years of hands-on experience in an enterprise Splunk environment.
- Demonstrated experience designing, deploying, and managing on-prem enterprise Splunk services integrated with systems and networks.
- Hands-on experience performing data onboarding, including log ingestion, parsing, normalization, and index management.
- Proven ability to build and maintain Splunk dashboards, searches, and reports to support operational and security use cases.
- Operational experience managing Splunk infrastructure, including forwarders, indexers, search heads, and performance tuning.
- Ability to contribute immediately with minimal ramp-up in a mission-critical operational environment.
Nice to Have
- Bachelor’s degree in a technical field.
Technical Stack
- Splunk Enterprise
Benefits & Compensation
- Compensation: $170,000 - $239,000
- Health, dental, and vision insurance
- 401(k) retirement plan with company match
- Paid time off (PTO) and holidays
- Parental Leave and dependent care
- Flexible work arrangements
- Professional development opportunities
- Employee assistance and wellness programs
- Performance-based bonuses
- Company-paid training and/or certifications
- Referral bonuses
All qualified applicants will receive consideration for employment based on merit and without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.
