On-Site Elastic Stack Engineer for High-Volume Ingestion

Piper Companies; Schriever Space Force Base (CO); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical benefits

PTO

Holidays

Job summary

Zachary Piper Solutions is seeking an Elastic Engineer to support a mission-critical federal program at Schriever Space Force Base. This on-site role designs and maintains large-scale log ingestion architectures using the Elastic Stack, with emphasis on Logstash, ECS normalization, and high-volume ingestion across restricted environments.

The ideal candidate will have deep expertise in Logstash, ECS, and tuning for performance in air-gapped, secured networks while collaborating with

Qualifications

• 3+ years of hands-on Elastic Stack experience.
• Advanced Logstash pipeline engineering.
• Strong knowledge of ECS (Elastic Common Schema).
• Linux administration experience.
• Proven experience troubleshooting high-volume ingestion and pipeline performance.

Responsibilities

• Design and deploy ingestion pipelines for endpoint security telemetry, network devices, cloud security logs, Linux/Windows logs, and container logs.
• Normalize incoming data into ECS-compatible formats.
• Implement parsing using Grok, Dissect, KV, JSON decoding, and Translate filters.
• Design and manage multi-pipeline Logstash architectures and routing patterns.
• Tune Logstash JVM performance and troubleshoot ingestion bottlenecks.
• Deploy Elastic Agents using Fleet Server and centralized policy management.
• Support air-gapped artifact repositories and restricted networks.

Skills

Elastic Stack

Logstash

ECS (Elastic Common Schema)

Linux admin

High-volume ingestion

Tools

Grok

Dissect

KV filter

JSON decoding

Translate filter

Kubernetes

OpenShift logs

Job description

Zachary Piper Solutions is seeking an Elastic Engineer to support a mission-critical federal program at Schriever Space Force Base. This on-site role designs and maintains large-scale log ingestion architectures using the Elastic Stack, with emphasis on Logstash, ECS normalization, and high-volume ingestion across restricted environments.

The ideal candidate will have deep expertise in Logstash, ECS, and tuning for performance in air-gapped, secured networks while collaborating with