Senior Elastic Stack Data Ingestion Architect

Amentum company; Colorado Springs (CO); On-site; USD 140,000 - 160,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Paid time off and holidays

401(k) retirement matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking a Senior Elastic Stack Data Integration Engineer to design, build, and maintain Logstash pipelines for secure data ingestion at DoD-operated bases in CO/AL. The role emphasizes ECS alignment, data enrichment, and resilient, scalable architectures.

You will collaborate with SIEM and infrastructure teams, lead pipeline design decisions, and mentor junior engineers while ensuring compliance with security and audit requirements.

Qualifications

• 4+ years of general (full-time) work experience
• 3+ years in log ingestion, data engineering, or SIEM pipeline development
• 2+ years in a leadership or management role
• Strong Elastic Stack background (Elasticsearch, Kibana, Beats, Elastic Agent)
• Hands-on experience ingesting, processing, and normalizing diverse log types
• Proficiency with Linux administration and CLI
• DoD 8570.01-M IAT Level II certification with CE
• Active DoW Secret Clearance and ability to obtain Top Secret clearance
• Experience with data enrichment, ECS mapping, and pipeline design
• Ability to mentor junior engineers and work with multiple teams

Responsibilities

• Architect, build, and maintain Logstash pipelines for diverse logs
• Implement parsing, grok, JSON transforms, and ECS mapping
• Optimize pipeline performance, resiliency, and scalability
• Ensure data aligns to ECS or internal schemas
• Implement enrichment workflows (GeoIP, threat intel)
• Validate data completeness and fidelity across ingestion flows
• Maintain Logstash clusters and high-availability configurations
• Manage integrations with Beats, Elastic Agent, Kafka, and syslog endpoints
• Monitor throughput, latency, and errors; develop alerts and runbooks
• Create technical docs, diagrams, and runbooks
• Establish enterprise standards for parsing and normalization
• Support audits by documenting data handling and pipeline logic
• Collaborate with SIEM analytics teams and infrastructure teams

Skills

Elastic Stack

Logstash pipelines

SIEM ingestion

HA ingestion workflows

Troubleshooting

Documentation

Leadership

Education

DoD 8570.01-M IAT Level II CE

Active DoW Secret Clearance

Tools

Elasticsearch

Kibana

Beats

Elastic Agent

Kafka

Syslog

Job description

Amentum is seeking a Senior Elastic Stack Data Integration Engineer to design, build, and maintain Logstash pipelines for secure data ingestion at DoD-operated bases in CO/AL. The role emphasizes ECS alignment, data enrichment, and resilient, scalable architectures.

You will collaborate with SIEM and infrastructure teams, lead pipeline design decisions, and mentor junior engineers while ensuring compliance with security and audit requirements.