Description

Key Responsibilities:

• Design, deploy, and maintain Elastic Stack environments, including Elasticsearch, Kibana, Logstash, Beats, and Fleet.
• Build and optimize ingestion pipelines, index strategies, search queries, dashboards, and automation workflows.
• Write scripts, automation, and integrations (Python, PowerShell, Bash, etc.) to streamline operations, data processing, and monitoring.
• Deploy Elastic across platforms, including on-premises, public cloud (AWS, Azure, Google Cloud Platform), GovCloud, and containerized environments (Kubernetes, Docker, OpenShift).
• Leverage automation and orchestration tools such as Terraform, Ansible, CI/CD pipelines, and Docker to manage deployments and operational tasks.
• Integrate Elastic with enterprise tools such as SIEMs, Splunk, CrowdStrike, and other telemetry sources.
• Monitor system health, troubleshoot performance issues, and optimize for reliability and scalability.
• Lead design reviews, provide guidance on Elastic best practices, and support knowledge sharing across teams.
• Maintain documentation for architectures, deployment patterns, runbooks, and operational best practices.
• Stay current with Elastic features, certifications, and emerging platform capabilities.

Required Skills

• Splunk migration.
• New install: cluster install, possibly using Cribl, ECK Deep, hands-on expertise with Elastic Stack (Elasticsearch, Kibana, Logstash, Beats, Fleet).
• Strong scripting and automation skills (Python, PowerShell, Bash, etc.).
• Solid understanding of observability, logging, metrics, and distributed systems.
• Experience designing, deploying, and optimizing production-scale Elastic environments.
• Strong Linux/Unix, networking, and cloud platform knowledge (AWS, Azure, Google Cloud Platform).
• Ability to mentor, guide, and influence engineering teams on Elastic best practices.
• Outstanding verbal and written communication skills.
• Willingness and ability to support domestic or international on-site engagements.
• U.S. Passport required.
• Must have a Secret Clearance, at minimum.

Desired Skills

• Familiarity with SIEM concepts, Elastic Security, or other SIEM/EDR platforms.
• Experience with containerization and orchestration (Kubernetes, Docker, OpenShift).
• Experience with automation/orchestration tools (Terraform, Ansible, CI/CD pipelines).
• Familiarity integrating Elastic with endpoint telemetry or cloud-native tools.
• Certifications (preferred): Elastic Certified Engineer, Elastic Security Engineer, Elastic Observability Engineer AWS Certified Solutions Architect or equivalent Docker Certified Associate (DCA) Certified Kubernetes Administrator (CKA) HashiCorp Certified: Terraform Associate Red Hat Certified Specialist in Ansible Automation Prior experience in DevOps, Site Reliability Engineering, or cloud platform roles is a plus.
• Experience designing dashboards, observability frameworks, and large-scale workflows.
• Experience with the below: Platforms: On-premises, Public Cloud (AWS, Azure, Google Cloud Platform), GovCloud, hybrid deployments Containerization: Kubernetes, Docker, OpenShift Automation: Terraform, Ansible, CI/CD pipelines, Docker Integrations: SIEMs (Splunk, Elastic Security), endpoint/security telemetry (CrowdStrike), cloud-native services Competing Technologies: Splunk, OpenSearch, Solr, Lucene, Graylog, Datadog, Elastic Cloud alternatives

Key Skills

Education

Any Graduate