Elastic Stack Engineer - On-Site Ingestion Specialist

Zachary Piper Solutions; Colorado; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical benefits

Dental

Vision

401K

PTO

Holidays

On-site facility

Job summary

Zachary Piper Solutions seeks an Elastic Engineer to support a mission-critical federal program at Schriever Space Force Base. The role is on-site and focuses on designing, implementing, and maintaining large-scale log ingestion architectures using the Elastic Stack.

The ideal candidate has 3+ years of Elastic Stack experience, expert Logstash pipeline skills, and strong ECS knowledge. Linux admin skills and experience in air-gapped or restricted networks are a plus.

Qualifications

• 3+ years hands-on Elastic Stack experience.
• Advanced Logstash pipeline engineering.
• Strong knowledge of Elastic Common Schema (ECS).
• Linux administration experience.
• Proven ability to troubleshoot high-volume ingestion.

Responsibilities

• Design and deploy ingestion pipelines for Endpoint security telemetry, network devices and firewalls, cloud security platforms, Linux audit logs, Windows Event Logs, Kubernetes/OpenShift logs, and custom application logs.
• Normalize incoming data into ECS-compliant formats.
• Implement parsing using Grok, Dissect, KV, JSON decoding, and Translate filters.
• Design and manage multi-pipeline Logstash architectures with routing and output isolator patterns.
• Tune Logstash JVM performance and troubleshoot ingestion bottlenecks.
• Deploy and manage Elastic Agents using Fleet Server and centralized policy management.
• Support air-gapped artifact and package repositories and ensure ingestion resiliency and failover.

Skills

Logstash pipeline engineering

Elastic Stack expertise

Linux administration

High-volume ingestion troubleshooting

Tools

Elastic Stack

Kibana

Elasticsearch

Fleet Server

Ansible

Python

Bash

Job description

Zachary Piper Solutions seeks an Elastic Engineer to support a mission-critical federal program at Schriever Space Force Base. The role is on-site and focuses on designing, implementing, and maintaining large-scale log ingestion architectures using the Elastic Stack.

The ideal candidate has 3+ years of Elastic Stack experience, expert Logstash pipeline skills, and strong ECS knowledge. Linux admin skills and experience in air-gapped or restricted networks are a plus.