Senior Elastic Engineer (Scott AFB) - 168867

ZP Group; Illinois; On-site; USD 190,000 - 230,000; Full time

Benefits offered by this job

Relocation assistance

Job summary

Zachary Piper Solutions seeking an experienced Senior Elastic Engineer to support a federal modernization effort migrating enterprise security logging and observability from Splunk to Elastic at Scott Air Force Base, IL. Lead Elastic architecture, Kubernetes deployments, and data ingestion solutions in a secure DoD environment.

The ideal candidate has deep Elastic Stack expertise, strong Kubernetes/ECK skills, and a track record delivering production-grade, scalable logging platforms with SIEM

Qualifications

• 7+ years of experience supporting Elastic engineering, platform engineering, Site Reliability Engineering (SRE), or infrastructure engineering.
• Hands-on experience designing and administering enterprise Elastic Stack environments.
• Experience building custom data ingestion pipelines and managing large-scale logging platforms.
• Advanced Kubernetes experience with Elastic Cloud on Kubernetes (ECK) deployments preferred.
• Active Secret Clearance required.

Responsibilities

• Design, deploy, and maintain enterprise Elastic Stack environments supporting security logging, search, and observability.
• Lead migration efforts from Splunk to Elastic while ensuring minimal operational disruption.
• Build and implement custom data ingestion pipelines for enterprise security and operational data.
• Configure and manage ILM policies and data retention strategies.
• Deploy and administer Elastic Cloud on Kubernetes (ECK) environments using Kubernetes operators.
• Optimize Elastic cluster performance, scalability, reliability, and availability across production environments.
• Troubleshoot complex Elastic infrastructure, Kubernetes, and distributed system issues.
• Support security-focused logging, SIEM integrations, and enterprise observability initiatives.
• Develop automation and operational best practices for Elastic platform administration.
• Maintain technical documentation, deployment standards, and operational procedures.

Skills

Elastic Stack

SRE

Platform engineering

Data ingestion

Kubernetes

Tools

ECK (Elastic Cloud on Kubernetes)

Kubernetes

ILM (Index Lifecycle Management)

Job description

Zachary Piper Solutions is seeking an experienced Senior Elastic Engineer to support a high-visibility federal modernization effort focused on migrating enterprise security logging and observability platforms from Splunk to Elastic. This position will support mission-critical infrastructure at Scott Air Force Base, IL, where the selected engineer will lead Elastic architecture, Kubernetes deployments, and custom data ingestion solutions within a secure DoD environment. The ideal candidate will have deep expertise with the Elastic Stack, Kubernetes/ECK deployments, and designing scalable, production-grade logging and security platforms.

SECRET CLEARANCE REQUIRED

Key Responsibilities

• Design, deploy, and maintain enterprise Elastic Stack environments supporting security logging, search, and observability.
• Lead migration efforts from Splunk to Elastic while ensuring minimal operational disruption.
• Build and implement custom data ingestion pipelines for enterprise security and operational data.
• Configure and manage Index Lifecycle Management (ILM) policies and data retention strategies.
• Deploy and administer Elastic Cloud on Kubernetes (ECK) environments using Kubernetes operators.
• Optimize Elastic cluster performance, scalability, reliability, and availability across production environments.
• Troubleshoot complex Elastic infrastructure, Kubernetes, and distributed system issues.
• Support security-focused logging, SIEM integrations, and enterprise observability initiatives.
• Develop automation and operational best practices for Elastic platform administration.
• Maintain technical documentation, deployment standards, and operational procedures.

Qualifications

• 7+ years of experience supporting Elastic engineering, platform engineering, Site Reliability Engineering (SRE), or infrastructure engineering.
• Strong hands-on experience designing and administering enterprise Elastic Stack environments.
• Experience building custom data ingestion pipelines and managing large-scale logging platforms.
• Advanced Kubernetes experience with Elastic Cloud on Kubernetes (ECK) deployments preferred.
• Experience troubleshooting complex Elastic architectures and distributed environments.Ability to work onsite at Scott Air Force Base, IL.
• Active Secret Clearance required (Interim Secret or Interim Top Secret may be considered).

Nice-to-Haves

• Experience leading Splunk-to-Elastic migration projects.
• Experience supporting SIEM, security logging, and enterprise observability platforms.
• Familiarity with Kubernetes operators and containerized infrastructure.
• Experience supporting DoD, federal, or classified environments.
• Elastic certifications (Engineer, Security, or Observability).

Soft Skills

• Strong analytical and problem-solving abilities.
• Ability to independently design and implement complex Elastic solutions.
• Comfortable working in fast-paced, mission-critical environments.
• Excellent communication and collaboration skills across engineering and government stakeholders.
• Self-motivated with the ability to work independently while supporting a highly technical team.

Compensation & Benefits

• Compensation: $190,000-$230,000 annually.
• Fully funded, long-term federal engagement supporting a major enterprise modernization initiative.
• Opportunity to lead a high-impact Splunk-to-Elastic migration for a mission-critical DoD customer.
• Relocation assistance available (approximately $5,000+)

Keywords

elastic engineer, senior elastic engineer, elastic stack, elasticsearch, kibana, logstash, beats, observability, security logging, enterprise logging, distributed systems, elastic cloud on kubernetes, eck, kubernetes, kubernetes operator, platform engineering, site reliability engineer, sre, devops, infrastructure engineering, splunk migration, splunk, elastic migration, index lifecycle management, ilm, data ingestion, custom ingestion pipelines, telemetry, monitoring, logging infrastructure, siem, security operations, distributed architecture, linux, cloud infrastructure, production engineering, federal infrastructure, dod, mission systems, scott air force base, secret clearance, classified environments, elastic observability, elastic security, enterprise infrastructure, platform reliability, automation, kubernetes engineer, elastic architect, security engineer, production support

#LI-RE1