Elastic Administrator / Operator

DeWinter Group; Sunnyvale (CA); On-site; USD 140,000 - 200,000; Full time

Job summary

DeWinter Group is seeking an Elastic Administrator/Operator for on-premises deployments in Sunnyvale or NYC. The role focuses on operating Elastic clusters on Kubernetes, ensuring reliability, security, and performance in a security-conscious enterprise environment.

Responsibilities include day-to-day operations, backups, DR planning, monitoring, on-call rotation, and documentation. Candidates should have deep Elastic Stack experience and strong Linux/Kubernetes fundamentals to support critical

Qualifications

• Extensive hands-on experience with Elastic Stack components (Elasticsearch, Kibana, Fleet Server, Elastic Agent, and related pipelines).
• Production support and Day 2 operations experience.
• Strong background managing on-premise Kubernetes infrastructure.
• Solid understanding of Linux, networking, and storage fundamentals.
• Experience with monitoring/alerting tools such as Loki, Grafana, Prometheus, and VictoriaMetrics.
• Automation scripting skills using Python, Bash, or similar.

Responsibilities

• Administer and operate Elastic clusters on Kubernetes leveraging ECK and data streams, including deployment, scaling, and upgrades.
• Manage Day 2 operations such as monitoring, incident response, troubleshooting, and performance tuning.
• Implement and maintain backup/restore, high availability, and disaster recovery strategies.
• Optimize index performance, ES|QL queries, and overall cluster health.
• Support security configurations including RBAC, access control, and audit logging.
• Maintain comprehensive runbooks and operational documentation.
• Participate in on-call rotation to ensure system reliability.

Skills

Elastic Stack

Kubernetes

Linux

Networking

Storage

Monitoring tools

Scripting

Education

Bachelor's degree in CS/Engineering

Tools

Kafka

Job description

Elastic Administrator / Operator - On-Premises (Sunnyvale or NYC)

Join a dynamic environment as an Elastic SME dedicated to elevating our on-premise Elasticsearch platform within a security-centric organization. This pivotal role combines technical expertise and operational excellence to ensure our elastic infrastructure is robust, scalable, and secure, supporting critical enterprise needs.

Key Responsibilities:

• Administer and operate Elastic clusters on Kubernetes leveraging ECK and data streams, including deployment, scaling, and upgrades
• Manage Day 2 operations such as monitoring, incident response, troubleshooting, and performance tuning
• Implement and maintain backup/restore, high availability, and disaster recovery strategies
• Optimize index performance, ES|QL queries, and overall cluster health
• Support security configurations including RBAC, access control, and audit logging
• Maintain comprehensive runbooks and operational documentation
• Participate in on-call rotation to ensure system reliability

Required Skills:

• Extensive hands-on experience with Elastic Stack (Elasticsearch, Kibana, Fleet Server, Elastic Agent, Search Ingest Pipeline)
• Proven expertise in production support and Day 2 operations
• Strong background managing on-premise Kubernetes infrastructure
• Solid understanding of Linux systems, networking, and storage solutions
• Experience with monitoring and alerting tools such as Loki, Grafana, Prometheus, and VictoriaMetrics
• Automation scripting skills using Python, Bash, or similar

Nice to Have Skills:

• Experience working within security environments or SIEM use cases
• Knowledge of Kafka at high scale as part of log ingestion pipelines

Preferred Education & Experience:

• Bachelor's degree in Computer Science, Engineering, or related field
• Several years of relevant experience in SRE, Production Engineering, or DevOps roles with a focus on Elastic and Kubernetes environments

Other Requirements:

• Location: Sunnyvale or NYC (In-office attendance required-3 days onsite)
• Security-conscious environment experience preferred
• Ability to work in a fast-paced, security-focused setting with agility and precision

This role offers an exciting opportunity to shape and maintain a critical component of enterprise security infrastructure. The ideal candidate is a proactive problem solver with a passion for operational excellence and security.