Elastic Search Engineer

Quess IT Solutions; Chennai District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Quess IT Solutions is seeking a Senior Elasticsearch Platform Administrator to own the end-to-end management of large-scale Elasticsearch clusters in Chennai. You will monitor health, perform ILM, snapshots, upgrades, and capacity planning while managing Kibana, Fleet Server, Logstash, and Elastic Agent infrastructure.

You'll drive data integration from Windows/Linux, cloud platforms, security tools, and logs into Elastic, develop Logstash pipelines, and implement observability with ES|QL,

Qualifications

• Experience administering large Elasticsearch clusters.
• Proficiency with ILM, snapshots, and retention policies.
• Strong knowledge of Kibana, Logstash, and Elastic Agent infrastructures.
• RBAC and SSO/SAML integrations experience.

Responsibilities

• Administer and maintain large-scale Elasticsearch clusters.
• Monitor cluster health, performance, and storage utilization.
• Configure ILM, snapshots, backups, and retention policies.
• Perform Elasticsearch upgrades, patching, and capacity planning.
• Manage Kibana, Fleet Server, Logstash, and Elastic Agent infrastructure.
• Develop Logstash pipelines and ECS-based data normalization.
• Create dashboards, alerts, and visualizations in Kibana.
• Design observability solutions using logs, metrics, and traces.
• Implement automation with Python, Ansible, and Terraform.
• Support security analytics, RBAC, and SSO/SAML integrations.

Skills

Elasticsearch expertise

Observability

Education

Elastic Certified Engineer (ECE)

Elastic Certified Analyst

Elastic Observability Certification

Tools

Elasticsearch

Kibana

Logstash

Elastic Agent

Fleet Server

Python

Ansible

Terraform

Job description

Key Responsibilities

Platform Administration

• Administer and maintain large-scale Elasticsearch clusters.
• Monitor cluster health, performance, storage utilization, and node availability.
• Configure and manage Index Lifecycle Management (ILM), snapshots, backups, and retention policies.
• Perform Elasticsearch upgrades, patching, and capacity planning.
• Manage Kibana, Fleet Server, Logstash, and Elastic Agent infrastructure.

Data Integration & Onboarding

• Integrate new data sources into Elastic from:
  • Windows & Linux systems
  • Cloud platforms (Azure, AWS, GCP)
  • Security tools (SentinelOne, Proofpoint, Zscaler, Vectra, CrowdStrike, etc.)
  • Network and application logs
  • Databases and custom APIs
• Develop and maintain Logstash pipelines and ingest pipelines.
• Normalize data using ECS (Elastic Common Schema).

Search & Analytics Development

• Develop advanced Elasticsearch queries and aggregations.
• Create dashboards, reports, alerts, and visualizations in Kibana.
• Build security and operational monitoring use cases.
• Design and implement observability solutions using logs, metrics, and traces.
• Utilize ES|QL and Kibana Lens for analytics and reporting.

Performance Optimization

• Tune cluster performance for indexing and search workloads.
• Optimize shard allocation, index templates, and mappings.
• Troubleshoot ingestion bottlenecks and search latency issues.
• Analyze JVM, heap memory, and storage utilization.

Security & Access Management

• Implement RBAC and Kibana role management.
• Configure SSO/SAML integrations
• Manage user onboarding, access reviews, and governance.
• Support security analytics and SIEM use cases.

Automation & DevOps

• Automate deployment and management tasks using:
  • Python
  • Shell scripting
  • Ansible
  • Terraform
• Support Infrastructure-as-Code and CI/CD practices.
• Develop reusable operational and monitoring scripts.

Support & Troubleshooting

• Resolve platform incidents and service requests.
• Participate in root cause analysis (RCA) activities.
• Collaborate with vendors and support teams for escalations.
• Maintain operational runbooks and technical documentation.

Preferred Qualifications

• Elastic Certified Engineer (ECE)
• Elastic Certified Analyst
• Elastic Observability Certification