Data Engineer (DV Security Clearance)

CGI; Chippenham; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading technology firm in Chippenham is seeking an experienced Data Engineer to design and operate data pipelines for a security insight platform. Responsibilities include building on-premise data ingestion solutions and collaborating with security teams to enhance data operations. The ideal candidate should have over 3 years’ experience, particularly with Elastic SIEM, diverse log formats, and strong Python skills. This full-time role requires on-site work and offers a competitive salary, excellent pension, and private healthcare benefits.

Benefits

Competitive salary

Excellent pension

Private healthcare

Share scheme

Qualifications

• 3+ years of experience in data engineering or a related development role.
• Hands-on experience with Elastic SIEM (Elasticsearch, Logstash, Kibana).
• Strong experience with diverse log formats.

Responsibilities

• Design and build on-premise data ingestion and processing pipelines.
• Ensure critical log sources are reliably parsed and enriched.
• Collaborate with teams to onboard new data sources.

Skills

Data ingestion

Data processing

Analytics

Log formats (JSON, CEF, Syslog, Avro)

Python

Elastic SIEM

Apache NiFi

Kubernetes

Job description

Position Description:

At CGI, you’ll help protect critical systems by designing and operating data pipelines that enable real‑time security insight across complex defence environments. Working on a secure programme, you’ll take ownership of on‑premise data ingestion and processing solutions that underpin a SIEM platform built on the Elastic Stack. You’ll collaborate closely with security and infrastructure specialists, apply creative problem‑solving to diverse log sources, and continuously improve how data is captured, enriched and analysed. Supported by experienced colleagues and trusted to make meaningful technical decisions, you’ll deliver resilient, high‑impact solutions that directly contribute to national security outcomes.

CGI was recognised in the Sunday Times Best Places to Work List and has been named a UK “Best Employer” by the Financial Times. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you’ll be part of an open, friendly community of experts. We’ll train and support you in taking your career wherever you want it to go.

Due to the secure nature of the programme, you will need to hold UK Security Clearance or be eligible to go through this clearance. This position requires 5 days on site working in Chippenham.

Your future duties and responsibilities:

In this role, you will design, build and maintain on‑premise data ingestion and processing pipelines that feed a SIEM platform used for real‑time security monitoring and analytics. You’ll take responsibility for ensuring critical log sources are reliably parsed, normalised and enriched, enabling high‑quality data to support operational and security decision‑making. Working alongside security, operations and infrastructure teams, you’ll onboard new data sources, improve existing pipelines and help shape standards across the platform.

You will also contribute to the long‑term robustness and performance of the data platform by documenting designs, improving data flows and supporting operational teams through clear runbooks and shared knowledge.

Key responsibilities include:

• Design & build Logstash pipelines for ingesting data into Elasticsearch
• Develop & manage Apache NiFi flows for routing, transformation and enrichment
• Parse & transform diverse log formats including JSON, CEF, Syslog and Avro
• Develop & optimise Python scripts for enrichment, automation and alerting
• Collaborate & support security and IT teams to onboard new log sources
• Document & maintain pipeline designs, data standards and operational runbooks

Required qualifications to be successful in this role:

You will be an experienced data engineer with a strong background in log ingestion, data processing and analytics within secure or enterprise environments. You should be comfortable taking ownership of complex data flows, communicating clearly with stakeholders, and continuously improving how data platforms operate.

Essential qualifications and experience:

• 3+ years’ experience in data engineering or a related development role
• Proven hands‑on experience with Elastic SIEM (Elasticsearch, Logstash, Kibana)
• Strong experience working with log formats such as JSON, CEF, Syslog and Avro
• Proficiency in designing and optimising data flows in large‑scale environments
• Strong Python skills for data processing, enrichment and automation
• Ability to prioritise work independently and contribute proactively
• Willingness to obtain, or hold, MOD high‑level security clearance

Desirable experience:

• Experience with Apache NiFi data flow design and management
• Knowledge of containerisation tools such as Kubernetes
• Experience scaling and tuning Elasticsearch clusters
• Familiarity with Windows event logging and syslog collectors
• Good understanding of Linux system administration and network protocols

Skills:

• Kibana
• Kubernetes
• LinuxPython