Elastic Engineer

Piper Companies; Schriever Space Force Base (CO); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical benefits

401K

PTO

Holidays

Job summary

Zachary Piper Solutions seeks an Elastic Engineer to support a mission-critical federal program at Schriever Space Force Base. The role is on-site and focuses on designing, implementing, and maintaining large-scale log ingestion architectures using the Elastic Stack.

Ideal candidates will have deep expertise in Logstash, ECS normalization, and high-volume ingestion across restricted environments, with experience in air-gapped deployments and security-focused logging pipelines.

Qualifications

• 3+ years hands-on Elastic Stack experience.
• Advanced Logstash pipeline engineering expertise.
• Strong knowledge of ECS and data normalization.
• Linux administration experience.
• Proven experience troubleshooting high-volume ingestion and pipeline performance.

Responsibilities

• Design and deploy ingestion pipelines for security telemetry, network, cloud, and log sources.
• Normalize data into ECS formats.
• Implement parsing using Grok, Dissect, KV, JSON decoding, Translate filters.
• Design multi-pipeline Logstash architectures and routing.
• Tune Logstash JVM performance and troubleshoot bottlenecks.
• Deploy Elastic Agents via Fleet Server and centralized policy management.
• Support air-gapped artifacts and repositories.
• Ensure ingestion resiliency, redundancy, and failover.

Skills

Elastic Stack

Logstash pipeline engineering

Linux administration

High-volume ingestion

Grok/Dissect/Translate filters

Tools

Elastic Stack

Logstash

Kibana

Elastic Common Schema (ECS)

Fleet Server

Ansible

Python

Bash

Job description

Zachary Piper Solutions is seeking an Elastic Engineer to support a mission‑critical federal program at Schriever Space Force Base (SFB). This on‑site role focuses on designing, implementing, and maintaining large‑scale log ingestion architectures using the Elastic Stack. The ideal candidate brings deep expertise in Logstash pipeline engineering, ECS normalization, and high‑volume ingestion across heterogeneous data sources, including restricted and air‑gapped environments.

Responsibilities of the Elastic Engineer include:

• Design and deploy ingestion pipelines for:
  • Endpoint security telemetry
  • Network devices and firewalls
  • Cloud security platforms
  • Linux audit logs
  • Windows Event Logs
  • Kubernetes/OpenShift logs
  • Custom application logs
• Normalize incoming data into Elastic Common Schema (ECS) compliant formats
• Implement parsing using Grok, Dissect, KV, JSON decoding, and Translate filters
• Design and manage multi‑pipeline Logstash architectures, including pipeline‑to‑pipeline routing and output isolator patterns
• Tune Logstash JVM performance and troubleshoot ingestion bottlenecks
• Deploy and manage Elastic Agents using Fleet Server and centralized policy management
• Support air‑gapped artifact and package repositories
• Implement ingestion resiliency, redundancy, and failover strategies
• Validate ingestion correctness, ECS alignment, and lifecycle management compliance
• Support high‑availability production environments, including restricted and disconnected networks

Qualifications for the Elastic Engineer include:

• 3+ years of hands‑on Elastic Stack experience
• Advanced Logstash pipeline engineering expertise
• Strong knowledge of Elastic Common Schema (ECS)
• Linux administration experience
• Proven experience troubleshooting high‑volume ingestion and pipeline performance issues

Preferred Qualifications:

• Experience with air‑gapped Elastic deployments
• Kubernetes/OpenShift logging ingestion experience
• Elastic Defend and SIEM ingestion experience
• Automation experience with Ansible, Python, Bash, or similar scripting tools

Success Metrics:

• Improved ingestion reliability and resiliency
• Reduced dropped or malformed events
• Increased pipeline throughput and stability
• Consistent, standardized ECS mapping implementation

Position Details:

• Location: Schriever Space Force Base (SFB)
• Environment: On‑site, secure facility
• Collaboration with cybersecurity, platform engineering, and mission operations teams

Compensation for the Elastic Engineer includes:

• Salary Range: (depends on experience)
• Benefits: Medical, Dental, Vision, 401K, PTO, Sick Leave (as required), Holidays

Keywords:

#LI-RE1 #LI-Onsite elastic engineer, elastic stack, logstash, kibana, elasticsearch, elastic agent, fleet server, ingestion pipelines, ECS, elastic common schema, grok, dissect, kv filter, json filter, translate filter, multi‑pipeline logstash, pipeline‑to‑pipeline routing, output isolator, JVM tuning, ingestion performance, high‑volume logging, linux, air‑gapped environments, restricted networks, SIEM ingestion, elastic defend, kubernetes logging, openshift logging, ansible automation, scripting, python, bash, endpoint telemetry, cloud security logs, windows event logs, linux audit logs, network device logs, observability, data normalization, schriever SFB, cleared engineer, federal security, mission‑critical systems.