Senior Elastic Engineer

Incedo; Gurugram District; On-site; INR 1,500,000 - 3,000,000; Full time

Job summary

Incedo is seeking an experienced Elastic Stack engineer to design, deploy, and optimize the full Elastic Stack (Elasticsearch, Logstash, Kibana, Beats, Elastic Agent, Fleet). You will build robust log ingestion pipelines from diverse sources, develop pipelines and parsing rules, and ensure security, monitoring, and DR readiness.

The role requires hands-on expertise in Elasticsearch architecture, query DSL, and observability tools, with strong collaboration across DevOps and security teams.

Qualifications

• 5–8 years of hands-on experience with Elasticsearch, Kibana, Logstash, Beats, Elastic Agent, and Fleet.
• Strong understanding of Elasticsearch architecture, indexing, mappings, shards, replicas, cluster management, and query optimization.
• Experience with Kibana Query Language (KQL) and Elasticsearch Query DSL.
• Experience developing Logstash pipelines using Grok, Dissect, Mutate, and other filter plugins.
• Knowledge of Elastic Observability, Watcher, Kibana Alerting, and SIEM concepts.

Responsibilities

• Design, deploy, and maintain the Elastic Stack components (Elasticsearch, Logstash, Kibana, Beats, Elastic Agent, Fleet).
• Build and optimize log ingestion pipelines from multiple sources (apps, infra, cloud, security).
• Develop Logstash pipelines and data parsing rules (Grok, Dissect, Mutate).
• Configure ILM, backups, restore, and DR processes for reliability.
• Create dashboards, visualizations, alerts, and reports for monitoring and business needs.

Skills

Elasticsearch architecture

Query optimization

Kibana/Observe dashboards

KQL

REST APIs

Python or Bash scripting

Docker

Kubernetes

Terraform/Ansible

Git/CI-CD

Education

Bachelor's degree in CS/IT/Engineering

Elastic Certified Engineer (Preferred)

Tools

Elastic Cloud

Logstash

Beats

Fleet

Job description

Role & responsibilities

• Design, deploy, configure, and maintain the Elastic Stack, including Elasticsearch, Logstash, Kibana, Beats, Elastic Agent, and Fleet.
• Build, develop, and optimize log ingestion pipelines from multiple applications, infrastructure, cloud, and security data sources.
• Develop and maintain Logstash pipelines, ingest pipelines, and data parsing rules using Grok, Dissect, and Mutate filters.
• Design Elasticsearch index mappings, templates, analyzers, and ingest pipelines to optimize indexing and search performance.
• Develop and maintain Kibana dashboards, visualizations, Lens reports, and alerts to support monitoring and business requirements.
• Administer Elasticsearch clusters to ensure high availability, scalability, performance, and reliability.
• Configure and manage Index Lifecycle Management (ILM), snapshots, backup, restore, and disaster recovery processes.
• Monitor cluster health, troubleshoot indexing and search performance issues, and perform capacity planning.
• Integrate applications with Elasticsearch using REST APIs and automate data ingestion processes.
• Implement monitoring, alerting, and anomaly detection using Elastic Observability, Watcher, and Kibana Alerting.
• Configure security features including Role-Based Access Control (RBAC), TLS/SSL, authentication, and authorization.
• Automate deployments and platform administration using scripting languages and Infrastructure as Code
• Perform Elastic Stack upgrades, patching, and routine maintenance activities.
• Collaborate with DevOps, Infrastructure, Security, and Application teams to onboard new data sources and resolve platform issues.
• Create and maintain technical documentation, SOPs, knowledge articles, and operational runbooks.
• Provide L2/L3 production support and participate in on-call rotations to ensure platform availability and SLA compliance.

Preferred candidate profile

• Hands-on experience (5 to 8 years) with Elasticsearch, Kibana, Logstash, Beats, Elastic Agent, and Fleet.
• Strong understanding of Elasticsearch architecture, indexing, mappings, shards, replicas, cluster management, and query optimization.
• Experience with Kibana Query Language (KQL) and Elasticsearch Query DSL.
• Experience developing Logstash pipelines using Grok, Dissect, Mutate, and other filter plugins.
• Strong understanding of Elasticsearch mappings, analyzers, index templates, and ingest pipelines.
• Experience developing Kibana dashboards, Lens visualizations, Canvas, and custom reporting solutions.
• Experience with Elasticsearch REST APIs, JSON, and scripting using Python or Bash.
• Knowledge of Elastic Observability, Watcher, Kibana Alerting, and SIEM concepts.
• Experience with Docker, Kubernetes, and Elastic Cloud is preferred.
• Experience with Infrastructure as Code tools such as Terraform or Ansible.
• Familiarity with Git, CI/CD pipelines, and DevOps practices.
• Strong troubleshooting, analytical, and performance tuning skills.
• Excellent communication and stakeholder management skills.

Educational/Professional Qualification Required

• Bachelors degree in computer science, Information Technology, Engineering, or equivalent.
• Elastic Certified Engineer (Preferred)

Soft Skills/Competencies

• Strong analytical and problem-solving skills.
• Excellent verbal and written communication.
• Customer and stakeholder management.
• Ability to prioritize multiple tasks.
• Team collaboration and knowledge sharing.
• Adaptability and continuous learning.

Immediate joiners only.