Senior Elastic Stack Data Ingestion Architect

CB5 Solutions LLC.; Colorado Springs (CO); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Job summary

cb5 Solutions LLC is seeking a Senior Elastic Stack Data Integration Engineer to design and maintain scalable data ingestion pipelines for Elastic SIEM. You will focus on building Logstash pipelines, ECS-aligned transformations, and high-availability architectures.

The role requires strong Elastic Stack experience, Linux proficiency, and DoD 8570-M IAT Level II certification with CE, plus DoW/Top Secret eligibility. You will collaborate across teams to ensure data supports analytics and audits.

Qualifications

• 4+ years of general full-time work experience.
• 3+ years in log ingestion, data engineering, or SIEM pipeline development.
• 2+ years in a management or leadership role.
• Strong Elastic Stack background (Elasticsearch, Kibana, Beats, Elastic Agent).
• Experience with data ingestion, processing, and enrichment techniques.
• Proficient with Linux administration and CLI operations.
• Active DoD DoD 8570.01-M IAT Level II certs and CE; clearance eligibility.

Responsibilities

• Design, build, and maintain data ingestion pipelines for Elastic SIEM.
• Develop scalable Logstash architectures and ECS-aligned data models.
• Implement parsing, enrichment, normalization, and ECS mapping.
• Optimize pipeline performance, resiliency, and high availability.
• Coordinate with teams for SIEM analytics needs and audits.

Skills

Logstash expertise

Data ingestion

Team leadership

Linux administration

Security clearance

Education

DoD 8570.01-M IAT Level II certification with CE

CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP

Tools

Elasticsearch

Kibana

Beats

Elastic Agent

Kafka

Redis

Job description

cb5 Solutions LLC is seeking a Senior Elastic Stack Data Integration Engineer to design and maintain scalable data ingestion pipelines for Elastic SIEM. You will focus on building Logstash pipelines, ECS-aligned transformations, and high-availability architectures.

The role requires strong Elastic Stack experience, Linux proficiency, and DoD 8570-M IAT Level II certification with CE, plus DoW/Top Secret eligibility. You will collaborate across teams to ensure data supports analytics and audits.