Senior Elastic Engineer - 160042

ZP Group; Colorado Springs (CO); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401K

PTO

Sick Leave

Holidays

Job summary

Zachary Piper Solutions is seeking an Elasticsearch & Observability Engineer to support a high-visibility federal cybersecurity program within an MSSP. This on-site role is based in Colorado Springs, CO and focuses on designing, implementing, and managing Elasticsearch environments while building robust observability across mission-critical systems.

The ideal candidate has deep expertise in search technologies, logging pipelines, metrics, tracing, and real-time monitoring in secure,

Qualifications

• 3+ years of experience in Elasticsearch engineering and observability tooling.
• Proficiency with SIEM concepts and platforms (Elastic, Splunk, QRadar, LogRhythm).
• Experience designing and optimizing complex logging and monitoring solutions.
• Strong Linux/Unix skills, networking basics, and cloud services.
• Scripting in Python, PowerShell, or Bash.
• Cybersecurity fundamentals and threat landscapes.

Responsibilities

• Design, deploy, and manage Elasticsearch clusters across distributed environments.
• Optimize search performance, indexing, mappings, and queries.
• Ensure data integrity, availability, and security within Elastic deployments.
• Monitor cluster health and performance, proactively resolving issues.
• Develop observability frameworks using Kibana and Grafana.
• Implement logging, metrics, and tracing for real-time monitoring.
• Collaborate with cross-functional teams to define requirements.
• Provide technical guidance and mentorship to team members.
• Document architectures, procedures, and operational processes.
• Prepare reports on system performance, incidents, and resolutions.

Skills

Elasticsearch

Observability tooling

SIEM concepts

Scripting languages

Linux/Unix

Tools

Kibana

Grafana

Elastic Stack

Splunk

QRadar

Job description

Zachary Piper Solutions is seeking an Elasticsearch & Observability Engineer to support a high‑visibility federal cybersecurity program within a leading Managed Security Service Provider (MSSP) in an on‑site environment in Colorado Springs, CO. This role focuses on designing, implementing, and managing Elasticsearch environments while building robust observability and monitoring capabilities across mission‑critical systems. The ideal candidate brings deep expertise in search technologies, logging pipelines, metrics, tracing, and real‑time monitoring within secure, high‑performance environments. The position is contingent upon additional funding.

Responsibilities of the Elasticsearch & Observability Engineer include:

• Design, deploy, and manage Elasticsearch clusters across distributed environments
• Optimize search performance, indexing strategies, mappings, and query execution
• Ensure data integrity, availability, and security within Elastic deployments
• Monitor cluster health and performance, proactively identifying and resolving issues
• Develop and maintain observability frameworks using Kibana, Grafana, or similar tools
• Implement logging, metrics, and tracing systems for real‑time application monitoring
• Analyze and visualize complex datasets to identify trends, anomalies, and performance gaps
• Collaborate with cross‑functional teams to define search and observability requirements
• Provide technical guidance, documentation, and mentorship to team members
• Stay current with emerging technologies in search, observability, and monitoring
• Document architectures, procedures, and operational processes
• Prepare reports on system performance, incidents, and resolutions

Qualifications for the Elasticsearch & Observability Engineer include:

• Active TS/SCI clearance
• Possession of a U.S. Passport
• Outstanding written and verbal communication skills
• Ability to support short, planned domestic or international travelAt least 3 years of experience demonstrating proficiency in:
  • Elasticsearch engineering and observability tooling
  • SIEM concepts and platforms (Elastic, Splunk, QRadar, LogRhythm)
  • Designing, implementing, and optimizing complex SIEM or logging solutions
  • Linux/Unix systems, networking fundamentals, and cloud services
  • Scripting languages such as Python, PowerShell, or Bash
  • Cybersecurity fundamentals, threat landscapes, and attack methodologies

Preferred Qualifications:

• Experience with other search technologies (Solr, Lucene)
• Elastic certifications (Elastic Certified Engineer, Elastic Observability Engineer)
• Experience in DevOps or Site Reliability Engineering (SRE) roles
• Background supporting large‑scale, distributed, or mission‑critical environments

Position Details:

• Location: Colorado Springs, CO
• Schedule: On‑site, 4–5 days per week
• Short‑duration domestic or international travel as needed
• Collaboration with engineering, security, operations, and MSSP teams

Compensation for the Elasticsearch & Observability Engineer includes:

• Salary Range: $140,000 – $200,000
• Benefits: Medical, Dental, Vision, 401K, PTO, Sick Leave (as required), Holidays

Keywords: #LI-RE1 #LI-Onsite elasticsearch engineer, observability engineer, elastic stack, ELK, kibana, grafana, logstash, beats, elastic agent, search engineering, distributed systems, cluster management, indexing strategies, query optimization, log analytics, metrics, tracing, monitoring, observability frameworks, SIEM, elastic SIEM, splunk, qradar, logrhythm, log ingestion, data pipelines, linux, unix, networking, cloud services, aws, azure, gcp, cloud monitoring, cloud logging, devops, sre, automation, python, bash, powershell, scripting, dashboards, visualizations, anomaly detection, data analysis, threat detection, cybersecurity, federal security, top secret clearance, cleared engineer, mission‑critical systems, high‑performance systems, on‑prem, cloud environments, distributed logging, real‑time monitoring, search technologies, lucene, solr, elastic certified engineer, elastic observability engineer, cluster scaling, performance tuning, index lifecycle management, ILM, data retention, security monitoring, mssp, federal programs, colorado springs, onsite role, technical documentation, system performance reporting, cross‑functional collaboration, secure environments, high‑visibility program.