On-Site Elastic Stack Engineer | Logstash & ECS Expert

Zachary Piper Solutions; Colorado; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401K

PTO

Holidays

Job summary

Zachary Piper Solutions is seeking an Elastic Engineer to support a mission-critical federal program at Schriever Space Force Base. The role is on-site and focuses on designing, implementing, and maintaining large-scale log ingestion architectures using the Elastic Stack.

The ideal candidate brings deep expertise in Logstash pipeline engineering, ECS normalization, and high-volume ingestion across heterogeneous data sources, including restricted environments.

Qualifications

• 3+ years of hands-on Elastic Stack experience.
• Advanced Logstash pipeline engineering expertise.
• Strong knowledge of Elastic Common Schema (ECS).
• Linux administration experience.
• Proven experience troubleshooting high-volume ingestion and pipeline performance issues.

Responsibilities

• Design and deploy ingestion pipelines for endpoint security telemetry, network devices and firewalls, cloud security platforms, Linux audit logs, Windows Event Logs, Kubernetes/OpenShift logs, and custom application logs.
• Normalize incoming data into ECS compliant formats.
• Implement parsing using Grok, Dissect, KV, JSON decoding, and Translate filters.
• Design and manage multi-pipeline Logstash architectures, including pipeline-to-pipeline routing and output isolator patterns.
• Tune Logstash JVM performance and troubleshoot ingestion bottlenecks.
• Deploy and manage Elastic Agents using Fleet Server and centralized policy management.
• Support air-gapped artifact and package repositories; ensure ingestion resiliency and failover strategies.

Skills

Elastic Stack

Logstash

Elastic Common Schema (ECS)

Linux

High-volume ingestion

Tools

Grok

Dissect

KV

JSON decoding

Translate

Job description

Zachary Piper Solutions is seeking an Elastic Engineer to support a mission-critical federal program at Schriever Space Force Base. The role is on-site and focuses on designing, implementing, and maintaining large-scale log ingestion architectures using the Elastic Stack.

The ideal candidate brings deep expertise in Logstash pipeline engineering, ECS normalization, and high-volume ingestion across heterogeneous data sources, including restricted environments.