Elastic SME

Sopra Steria; Hemel Hempstead; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

£5400 Car Allowance

25 days annual leave

Private health care

Life assurance

Pension

Generous flexible benefits fund

Job summary

Sopra Steria is seeking an Elastic Subject Matter Expert to lead the design, implementation and evolution of a critical Elastic Stack environment supporting enterprise observability and security analytics.

The role requires active DV clearance and a hybrid work model with four days on-site in Hemel Hempstead and one day home-based. You will influence architecture, automation and operational excellence across a complex enterprise estate.

Qualifications

• Experience administering enterprise Elastic Stack environments.
• Deep expertise across Elasticsearch, Kibana, Logstash, Beats, Elastic Agent & Fleet, Elastic Security and Elastic Observability.
• Strong Linux and Windows Server administration skills.
• PowerShell, REST APIs, JSON and YAML expertise.
• Knowledge of Active Directory, LDAP, PKI and TLS.

Responsibilities

• Take ownership of the Elastic ecosystem, delivering scalable, secure and highly available solutions for operational monitoring, observability and security operations.
• Design and architect enterprise-scale Elastic Stack solutions.
• Build and optimise high-volume Elasticsearch clusters.
• Deliver SIEM capabilities, threat detection and security analytics.
• Develop advanced ingestion pipelines using Logstash, Beats and Elastic Agent.
• Create impactful Kibana dashboards, visualisations and reporting solutions.
• Implement observability across Windows, Linux, VMware, databases, networks and applications.
• Automate deployments, administration and operational processes.
• Drive platform performance, resilience, security and compliance.
• Provide expert 3rd/4th line support and technical leadership.
• Produce high-quality design, operational and disaster recovery documentation.

Skills

Elasticsearch

Kibana

Logstash

Beats

Elastic Agent

Elastic Fleet

Elastic Security

Elastic Observability

Windows Server

Linux

PowerShell

REST APIs

JSON

YAML

Active Directory

LDAP

PKI

TLS

Tools

Windows/Linux administration

Job description

Shape the Future of Enterprise Observability & Security.

Are you an Elastic expert who thrives on designing, building and optimising large-scale platforms?

We're looking for an experienced Elastic Subject Matter Expert (SME) to lead the design, implementation and evolution of a critical Elastic Stack environment supporting enterprise-wide monitoring, security analytics, threat detection and operational insight.

This is a unique opportunity to become the go-to technical authority for a sophisticated on-premises Elastic platform, influencing architecture, security, automation and operational excellence across a complex enterprise estate.

You do need to hold active DV Clearance.

Hybrid: 4 days on site in Hemel Hempstead 1 day home based.

What you will be doing:

• As the Elastic SME, you'll take ownership of the entire Elastic ecosystem, delivering scalable, secure and highly available solutions that power operational monitoring, observability and security operations.
• Designing and architecting enterprise-scale Elastic Stack solutions.
• Building and optimising high-volume Elasticsearch clusters.
• Delivering SIEM capabilities, threat detection and security analytics.
• Developing advanced ingestion pipelines using Logstash, Beats and Elastic Agent.
• Creating impactful Kibana dashboards, visualisations and reporting solutions.
• Implementing observability across Windows, Linux, VMware, databases, networks and applications.
• Automating deployments, administration and operational processes.
• Driving platform performance, resilience, security and compliance.
• Providing expert 3rd/4th line support, troubleshooting and technical leadership.
• Producing high-quality design, operational and disaster recovery documentation.

What you will bring:

• Experience administering enterprise Elastic Stack environments.
• Deep expertise across:
  • Elasticsearch.
  • Kibana.
  • Logstash.
  • Beats.
  • Elastic Agent & Fleet.
  • Elastic Security (SIEM).
  • Elastic Observability.
• Strong experience supporting large-scale Elasticsearch clusters.
• Proven track record designing resilient, highly available platforms
• Experience delivering security monitoring and observability solutions.
• Strong Linux and Windows Server administration skills.
• PowerShell, REST APIs, JSON and YAML expertise.
• Knowledge of Active Directory, LDAP, PKI and TLS.

Employment Type: Full Time, Permanent

Location: Hybrid: 4 days on site in Hemel Hempstead 1 day home based.

Security Clearance Level: You do need to hold active DV Clearance.

Salary: Competitive, depending on experience

Benefits:

• £5400 Car Allowance
• 25 days annual leave with the option to buy additional days
• private health care
• life assurance
• pension
• generous flexible benefits fund

About us

Sopra Steria's Aerospace, Defence and Security business designs, develops and deploys digital solutions to Central Government clients. The work we do makes a real difference to the client's goal of National Security, and we operate in a unique and privileged environment. We are given time for professional development activities, and we coach and mentor our colleagues, sharing knowledge and learning from each other. We foster a culture in which employees feel valued and supported and have pride in their work for the customer, delivering outstanding rates of customer satisfaction in the UK's most complex safety- and security-critical markets.