Senior Elastic Stack Engineer - Remote Federal Observability

ECS Corporate Services; Fairfax (VA); On-site; USD 140,000 - 180,000; Full time

Job summary

Everforth ECS Federal is seeking a Senior Elastic Engineer to work remotely, supporting enterprise observability modernization for VA networks and cybersecurity operations. The role requires 7+ years in logging/observability or cybersecurity, and 5+ years with Elastic Stack including Logstash and Beats.

Responsibilities include designing, implementing, and optimizing Elastic solutions, ensuring security features, and providing Tier 3 mentorship while aligning with VA standards and RMF/ATO

Qualifications

• Must be a US citizen with ability to obtain and maintain a Tier 5 background investigation (Public Trust Level 5)
• Minimum 7 years of experience supporting enterprise logging, SIEM, observability, or cybersecurity engineering platforms
• Minimum 5 years of hands-on Elastic Stack engineering experience
• Develop and maintain Logstash pipelines and Beats configurations to efficiently route and process high-volume data
• Monitor cluster health and optimize indices, shards, and queries for performance and cost-effectiveness
• Architect, engineer, and deploy highly available and scalable Elasticsearch clusters across VA enclaves and cloud environments.

Responsibilities

• Design, implement, and optimize the Elastic Stack for VA enterprise networks and cybersecurity operations
• Support VA observability modernization and migration initiatives in a federal healthcare environment
• Provide Tier 3 troubleshooting and mentorship for junior engineers
• Develop technical documentation, operational procedures, and knowledge transfer materials
• Assist with Authority to Operate (ATO), RMF, and compliance validation activities
• Ensure Elastic Security features (RBAC, TLS) and privacy requirements are met

Skills

Elastic Stack engineering

Logstash

Kibana

Beats

Cybersecurity

Observability

SIEM

Cloud environments

Education

Bachelor's degree in Cybersecurity, Engineering or Computer Science

Tools

Elasticsearch

Logstash

Kibana

Beats

Job description

Everforth ECS Federal is seeking a Senior Elastic Engineer to work remotely, supporting enterprise observability modernization for VA networks and cybersecurity operations. The role requires 7+ years in logging/observability or cybersecurity, and 5+ years with Elastic Stack including Logstash and Beats.

Responsibilities include designing, implementing, and optimizing Elastic solutions, ensuring security features, and providing Tier 3 mentorship while aligning with VA standards and RMF/ATO