Senior Elastic Stack Data Ingestion Engineer

PAE Government Services Inc.; Colorado; On-site; USD 140,000 - 160,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401(k) matching

Paid time off

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

PAE Government Services Inc. seeks a Senior Elastic Stack Data Integration Engineer to design, build, and maintain data ingestion pipelines supporting Elastic SIEM at DoD environments.

You will architect Logstash pipelines ingesting logs from diverse sources and ensure ECS alignment, with a focus on performance, reliability, and scalable architectures. This role requires 4+ years in data ingestion or SIEM pipeline development, DoD clearance readiness, strong Linux skills, and experience with

Qualifications

• Must have 4 or more years of general (full-time) work experience.
• Must have 3 or more years of directly related experience in log ingestion or SIEM pipeline development.
• Must have 2 or more years in a management or leadership role.
• Strong background in Elastic Stack components (Elasticsearch, Kibana, Beats, Elastic Agent).
• Hands-on experience ingesting and normalizing diverse log types (Windows events, syslog, firewall logs, cloud telemetry).
• Proficient with Linux administration, system-level debugging, and CLI operations.
• Active DoD 8570.01-M IAT LevelII certification with CE and DoD Secret clearance.
• Ability to obtain and maintain a DoD Top Secret clearance.

Responsibilities

• Architect, build, and maintain Logstash pipelines to ingest and transform logs from diverse systems.
• Implement parsing, grok patterns, JSON transformations, routing, and ECS mapping.
• Optimize pipeline performance, resiliency, and scalability with features like persistent queues.
• Ensure ingested data aligns to ECS or internal schema requirements.
• Develop data enrichment workflows (GeoIP, threat intel lookups, metadata injection).
• Validate data completeness, integrity, and fidelity across ingestion flows.
• Maintain and optimize Logstash clusters, including version management and high availability.
• Manage integrations with Beats, Elastic Agent, Kafka, syslog endpoints, and custom collectors.
• Monitor throughput, latency, and error rates; implement proactive alerting and troubleshooting.
• Create technical documentation, runbooks, and data-flow diagrams.

Skills

Elastic Stack

Logstash pipelines

Data ingestion

ECS alignment

Linux administration

Troubleshooting

Documentation

Collaboration

Pipeline scalability

Tools

Beats

Elastic Agent

Kafka

GitOps

Job description

PAE Government Services Inc. seeks a Senior Elastic Stack Data Integration Engineer to design, build, and maintain data ingestion pipelines supporting Elastic SIEM at DoD environments.

You will architect Logstash pipelines ingesting logs from diverse sources and ensure ECS alignment, with a focus on performance, reliability, and scalable architectures. This role requires 4+ years in data ingestion or SIEM pipeline development, DoD clearance readiness, strong Linux skills, and experience with