Senior Elastic Engineer

Zachary Piper; Colorado Springs (CO); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401K

PTO

Sick Leave

Holidays

Job summary

Zachary Piper is seeking an Elasticsearch & Observability Engineer to support a federal cybersecurity program in Colorado Springs. This on-site role involves designing, implementing, and managing Elasticsearch environments and building observability tools across critical systems. The ideal candidate will have at least 3 years of relevant experience, an active TS/SCI clearance, and proficiency in various scripting and SIEM technologies. The position offers a competitive salary range of $140,000 – $200,000 with benefits including medical and 401K.

Qualifications

• 3+ years of experience in Elasticsearch engineering and observability tooling.
• Proficient in designing, implementing, and optimizing complex SIEM or logging solutions.
• Strong communication skills and ability to travel as needed.

Responsibilities

• Design, deploy, and manage Elasticsearch clusters.
• Optimize search performance and indexing strategies.
• Develop observability frameworks using Kibana and Grafana.

Skills

Elasticsearch engineering

Observability tooling

SIEM concepts

Linux/Unix systems

Scripting languages (Python, PowerShell, Bash)

Cybersecurity fundamentals

Education

Active TS/SCI clearance

Possession of a Passport

Tools

Splunk

QRadar

LogRhythm

Kibana

Grafana

Job description

Overview

Zachary Piper Solutions is seeking an Elasticsearch & Observability Engineer to support a high-visibility federal cybersecurity program within a leading Managed Security Service Provider (MSSP) in an on-site environment in Colorado Springs, CO. This role focuses on designing, implementing, and managing Elasticsearch environments while building robust observability and monitoring capabilities across mission-critical systems. The ideal candidate brings deep expertise in search technologies, logging pipelines, metrics, tracing, and real-time monitoring within secure, high-performance environments. The position is contingent upon additional funding.

Responsibilities

• Design, deploy, and manage Elasticsearch clusters across distributed environments
• Optimize search performance, indexing strategies, mappings, and query execution
• Ensure data integrity, availability, and security within Elastic deployments
• Monitor cluster health and performance, proactively identifying and resolving issues
• Develop and maintain observability frameworks using Kibana, Grafana, or similar tools
• Implement logging, metrics, and tracing systems for real‑time application monitoring
• Analyze and visualize complex datasets to identify trends, anomalies, and performance gaps
• Collaborate with cross‑functional teams to define search and observability requirements
• Provide technical guidance, documentation, and mentorship to team members
• Stay current with emerging technologies in search, observability, and monitoring
• Document architectures, procedures, and operational processes
• Prepare reports on system performance, incidents, and resolutions

Qualifications

• Active TS/SCI clearance
• Possession of a . Passport
• Outstanding written and verbal communication skills
• Ability to support short, planned domestic or international travel
• At least 3 years of experience demonstrating proficiency in: Elasticsearch engineering and observability tooling; SIEM concepts and platforms (Elastic, Splunk, QRadar, LogRhythm); Designing, implementing, and optimizing complex SIEM or logging solutions; Linux/Unix systems, networking fundamentals, and cloud services; Scripting languages such as Python, PowerShell, or Bash; Cybersecurity fundamentals, threat landscapes, and attack methodologies

Preferred Qualifications

• Experience with other search technologies (Solr, Lucene)
• Elastic certifications (Elastic Certified Engineer, Elastic Observability Engineer)
• Experience in DevOps or Site Reliability Engineering (SRE) roles
• Background supporting large‑scale, distributed, or mission‑critical environments

Position Details

• Location: Colorado Springs, CO
• Schedule: On‑site, 4–5 days per week
• Short‑duration domestic or international travel as needed
• Collaboration with engineering, security, operations, and MSSP teams

Compensation

• Salary Range: $140,000 – $200,000
• Benefits: Medical, Dental, Vision, 401K, PTO, Sick Leave (as required), Holidays

Keywords: #LI-RE1 #LI-Onsite elasticsearch engineer, observability engineer, elastic stack, ELK, kibana, grafana, logstash, beats, elastic agent, search engineering, distributed systems, cluster management, indexing strategies, query optimization, log analytics, metrics, tracing, monitoring, observability frameworks, SIEM, elastic SIEM, splunk, qradar, logrhythm, log ingestion, data pipelines, linux, unix, networking, cloud services, aws, azure, gcp, cloud monitoring, cloud logging, devops, sre, automation, python, bash, powershell, scripting, dashboards, visualizations, anomaly detection, data analysis, threat detection, cybersecurity, federal security, top secret clearance, cleared engineer, mission‑critical systems, high‑performance systems, on‑prem, cloud environments, distributed logging, real‑time monitoring, search technologies, lucene, solr, elastic certified engineer, elastic observability engineer, cluster scaling, performance tuning, index lifecycle management, ILM, data retention, security monitoring, mssp, federal programs, colorado springs, onsite role, technical documentation, system performance reporting, cross‑functional collaboration, secure environments, high‑visibility program.