Elasticsearch Engineer (TS/SCI Clearance)

ShorePoint, LLC; Herndon (VA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

144 hours PTO

11 holidays

Healthcare coverage

401(k)

Continuing education

Certification maintenance and Reimb.

And more.

Job summary

ShorePoint, LLC in Herndon, VA is seeking an Elasticsearch Engineer to design, deploy and optimize Elastic Stack solutions across cloud, on‑prem and hybrid environments for federal customers. You will lead implementations, migrations and architecture efforts while engaging client stakeholders to deliver secure, scalable outcomes.

The role requires 6+ years in systems engineering with at least 2 years of production Elastic Stack experience, strong Linux, and IaC skills, and an active TS/SCI

Qualifications

• 6+ years in systems engineering or infrastructure.
• 2+ years of production Elastic Stack experience.
• Able to translate complex requirements into tasks and processes.
• Strong problem-solving and communication skills.
• Hands-on with containerization and IaC tooling.
• Experience with federal security controls (TLS, SSO/SAML, PIV/CAC, STIG).
• Active TS/SCI clearance (Full Scope poly preferred).

Responsibilities

• Architect, deploy and tune Elastic Stack solutions across cloud, on‑prem and hybrid environments.
• Execute legacy security platform migrations and analyst workflow modernization.
• Design data ingestion pipelines using Elastic Agent, Fleet, Logstash and Beats.
• Harden deployments for federal compliance and audit logging.
• Build dashboards and Kibana visualizations.
• Develop automation using IaC tools (Ansible, Terraform).
• Communicate decisions to client stakeholders.
• Contribute to internal IP with templates and reference architectures.

Skills

Elastic Stack

Production Elastic Stack

Linux CLI

Containerization

IaC tooling

Cloud providers

Security controls

TS/SCI Clearance

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering or related field

Tools

Terraform

Ansible

Elastic Cloud Enterprise (ECE)

Kibana

Job description

Who We Are

ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a “work hard, play hard” mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community.

The Perks

• As recognized members of the Cyber Elite, we work together in partnership to defend our nation's critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual’s technical and professional growth.
• We are committed to the belief that our team members do their best work when they are happy and well cared for.
• In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers.
• Highlighted benefits include 144 hours of PTO
• 11 holidays
• 85% of insurance premiums covered
• a 401(k)
• continuing education
• certification maintenance and reimbursement
• and more.

Who We’re Looking For

We are seeking an Elasticsearch Engineer (TS/SCI Clearance) with expertise in designing, deploying and optimizing Elastic Stack solutions in federal environments. This role supports the delivery of Elastic-based solutions across cloud, on-prem and hybrid infrastructures to enable security operations and data-driven outcomes. The Elasticsearch Engineer will lead technical implementations, support migrations and contribute to scalable architectures while engaging directly with client stakeholders. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.

What You’ll Be Doing

• Architect, deploy and tune Elastic Stack solutions (Elastic Cloud Enterprise (ECE), Elastic Cloud on Kubernetes (ECK), Elastic Cloud) across cloud, on-prem and hybrid environments.
• Execute legacy security platform migrations, including detection translation (e.g., Search Processing Language (SPL) → (ES|QL) Elasticsearch Query Language) and analyst workflow modernization.
• Design and implement data ingestion pipelines using Elastic Agent, Fleet, Logstash and Beats.
• Harden deployments for federal compliance, including Transport Layer Security (TLS), Personal Identity Verification/Common Access Card (PIV/CAC), Single Sign-On (SSO) / Security Assertion Markup Language (SSO/SAML), Security Technical Implementation Guide (STIG) and audit logging.
• Build outcome-driven dashboards and advanced Kibana visualizations.
• Develop automation using Infrastructure-as-Code (IaC) tools (Ansible, Terraform or equivalent).
• Communicate technical decisions and trade-offs directly to client stakeholders.
• Contribute to internal IP, including reusable templates, automation and reference architectures.

What You Need To Know

• Deep understanding of Elastic Stack capabilities and use cases across deployment, security and operations.
• Knowledge of distributed cluster architecture at scale, including multi-tenant and CCS environments.

Must Have’s

• 6+ years in systems engineering or infrastructure, including 2+ years of production Elastic Stack experience.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Strong problem-solving skills and a self-starter mentality.
• Solid written and verbal communication skills.
• Linux Command-Line Interface (CLI) fundamentals and basic networking knowledge.
• Hands‑on experience with containerization and IaC tooling.
• Proficiency with at least one major cloud provider.
• Experience with federal security controls (TLS, SSO/SAML, PIV/CAC, STIG).
• Proven track record leading engagements from scoping through delivery.
• Deep knowledge of distributed cluster architecture at scale, including multi-tenant and CCS environments.
• Ability to drive client relationships and identify expansion opportunities.
• Applicants must currently hold and maintain an active TS/SCI Clearance (Full Scope polygraph preferred).

Beneficial To Have

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering or a related field.
• Elastic certifications (ECE or being on a defined certification track).
• Elastic Security (SIEM, detection engineering, threat hunting and legacy migration).
• Detection translation experience (SPL → ES|QL or equivalent).
• Scripting proficiency (Python, Bash or PowerShell).
• Exposure to AI‑augmented search, RAG or semantic search use cases.
• Prior professional services or consulting experience.

Where It’s Done

• Onsite (Herndon, VA).