Operational Telemetry / Analytics Engineer

We are seeking an Operational Telemetry / Analytics Engineer. The successful candidate will design, build, and maintain the pipelines, dashboards, and analytics that turn logs, metrics, traces, and events from a client environment into actionable operational insight, driving faster incident detection, root cause analysis, capacity planning, and service-level reporting. This role will report to the [Program Manager / Operations Lead]. The ideal candidate will be motivated by the opportunity to support public agencies, nonprofit organizations, and private companies in transforming their data into actionable insights. Candidate must be a U.S. citizen or green card holder able to obtain and maintain DHS suitability and must be able to work a hybrid schedule in our DC office.What you will do:Design, build, and maintain telemetry pipelines that collect logs, metrics, traces, and events from applications, infrastructure, network devices, and cloud services.Instrument applications and services using OpenTelemetry or similar frameworks, and standardize data schemas, tagging, and naming conventions across sources.Ingest, parse, normalize, and enrich operational data in enterprise platforms (e.g., Splunk, Elastic, Datadog, Dynatrace, Azure Monitor, AWS CloudWatch).Develop dashboards, reports, and visualizations that give operations teams and government leadership real-time insight into system health, performance, and availability.Define and track service level indicators (SLIs), service level objectives (SLOs), and SLA metrics, and produce recurring availability, capacity, and performance reports.Build and tune alerting rules and thresholds to reduce noise and false positives, and correlate events to speed incident detection and root cause analysis.Apply statistical, trend, and anomaly detection analysis to identify emerging issues, capacity constraints, and opportunities for optimization.Partner with NOC, SOC, engineering, and application teams during major incidents and post-incident reviews, providing data-driven analysis of impact and root cause.Support FISMA, NIST SP 800-53, and DHS 4300A compliance, including audit logging and log retention requirements (e.g., OMB M-21-31), ATO evidence, and CDM reporting.Manage data volume, retention, and licensing costs through filtering, sampling, and tiered storage strategies.Automate data collection, report generation, and routine analysis with scripts, APIs, and infrastructure-as-code.Maintain documentation for data sources, pipelines, dashboards, runbooks, and SOPs.Other duties as assignedRequired Education:Bachelor's degree in computer science, data science, IT, engineering, statistics, or a related field; 9 + years of equivalent experience may be considered in lieu of a degreeRequired Experience:5 + years of experience in observability, monitoring, site reliability engineering, IT operations analytics, or data engineeringHands-on experience building queries, dashboards, and alerts in at least one enterprise observability or log analytics platform (e.g., Splunk, Elastic, Datadog, Dynatrace)Experience with ITSM tools (e.g., ServiceNow) and ITIL incident, problem, and change managementU.S. citizenship or lawful permanent residency (green card), and ability to obtain and maintain a DHS suitability determination (Background Investigation) for the life of the contract. No security clearance is requiredRequired Skills:Proficiency in query languages such as SPL, KQL, PromQL, or SQLScripting and data processing with Python (e.g., pandas) or similar, including working with REST APIs and JSONStrong understanding of logs, metrics, and traces, the OpenTelemetry standard, and collectors or agents such as Fluentd, Logstash, Telegraf, or CriblWorking knowledge of Linux and Windows systems, networking fundamentals (TCP/IP, DNS, SNMP, syslog), and cloud servicesStrong written and verbal communication for translating technical data into clear reports and briefings for non-technical stakeholdersActive CompTIA Security+ (or equivalent) certificationPreferred:Prior experience supporting DHS or another federal civilian agencyActive or recent DHS Background Investigation (suitability)Splunk Core Certified Power User or Admin, Elastic Certified Engineer, Datadog, or Dynatrace certificationExperience with Prometheus, Grafana, Kibana, Power BI, or TableauFamiliarity with AWS GovCloud or Azure Government monitoring services and FedRAMP-authorized toolsExperience with streaming and data pipeline technologies such as Kafka, Cribl Stream, or KinesisExperience applying machine learning or AIOps techniques to anomaly detection and event correlationKnowledge of CDM, TIC 3.0, zero trust architecture, and OMB M-21-31 logging maturity requirements