Elastic SME: Enterprise Observability & Security Lead

Sopra Steria Ltd; Hemel Hempstead; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Car allowance

Private health care

Life assurance

Pension

Generous flexible benefits fund

Job summary

Sopra Steria Ltd is seeking an Elastic SME to design, implement and evolve a critical Elastic Stack environment that supports enterprise-wide monitoring, security analytics, threat detection and operational insight.

You will be the technical authority for an on-premises Elastic platform, shaping architecture, security, automation and resilient operations across a large enterprise estate.

Qualifications

• Experience administering enterprise Elastic Stack environments.
• DV Clearance or ability to obtain security clearance is required.
• Hybrid working model: 4 days on site in Hemel Hempstead and 1 day home-based.

Responsibilities

• Designing and architecting enterprise-scale Elastic Stack solutions.
• Building and optimising high-volume Elasticsearch clusters.
• Delivering SIEM capabilities, threat detection and security analytics.
• Developing ingestion pipelines using Logstash, Beats and Elastic Agent.
• Creating Kibana dashboards, visualisations and reporting solutions.
• Implementing observability across Windows, Linux, VMware, databases, networks and applications.
• Automating deployments, administration and operational processes.
• Driving platform performance, resilience, security and compliance.
• Providing expert 3rd/4th line support, troubleshooting and technical leadership.
• Producing design, operational and disaster recovery documentation.

Skills

Elastic Stack

Elasticsearch

Kibana

Logstash

Beats

Elastic Agent & Fleet

Elastic Security (SIEM)

Elastic Observability

Windows Server administration

Linux administration

PowerShell

REST APIs

JSON

YAML

Active Directory

LDAP

PKI & TLS

Tools

Elastic Stack tooling

Job description

Sopra Steria Ltd is seeking an Elastic SME to design, implement and evolve a critical Elastic Stack environment that supports enterprise-wide monitoring, security analytics, threat detection and operational insight.

You will be the technical authority for an on-premises Elastic platform, shaping architecture, security, automation and resilient operations across a large enterprise estate.