Sr Elastic Engineer

ECS; Fort Meade (MD); Hybrid; USD 170,000 - 190,000; Full time

Job summary

ECS Federal LLC, based at Fort Meade, is seeking a Senior Elastic Engineer to design, deploy, and optimize Elastic Stack and Cribl deployments. You will build data pipelines, create dashboards, and implement ML-based monitoring for security and logging use-cases in a hybrid environment.

Candidate must have 6+ years of hands-on Elastic experience, DoD 8140/8570 IAT Level II, and either a certified Elastic Engineer or plan to gain certification within 180 days.

Qualifications

• 6+ years hands-on experience with Elastic Stack for security/logging use-cases.
• DoD 8140/8570 IAT Level II certification required prior to start date.
• Certified Elastic Engineer or willingness to gain certification within 180 days of hire.
• Top-Secret clearance required or ability to obtain; start with Secret if needed.

Responsibilities

• Design, deploy, configure, and maintain Elastic stack and Cribl deployments.
• Manage, patch, and upgrade Elasticsearch, Cribl, and related systems.
• Tune and optimize Elastic stack deployments to meet app/customer needs.
• Design ETL data pipelines for logs, metrics, and threat events.
• Create Kibana visualizations and dashboards; configure ILM policies.
• Develop Elastic alerting using Watcher/Kibana and connectors to IT systems.
• Develop ML jobs to monitor metrics, KPIs, and anomalies.
• Follow ITIL processes to move changes from Dev to Production.

Skills

Elastic Stack

Security logging

Python

Bash

PowerShell

Kibana

ILM

Ansible

Red Hat Linux

Scripting

Tools

Elasticsearch

Cribl

Kibana

Ansible

Linux

Job description

ECS is seeking a

Fort Meade, MD/Hybrid.

ECS is seeking a Sr Elastic Engineer to work in Fort Meade, MD/Hybrid. As a leading provider of managed cybersecurity services, ECS provides a highly tailored and customized offering to each customer. Our team is responsible for protecting both our customers and corporate environment at ECS. Our mission is very broad, and our team is agile. We will look toward your unique skills to approach and solve problems in your own way. Whether engineering a system to address a technical hurdle, protecting customers data or consulting on a wide range of security topics. You are empowered to engage and lead across multiple groups.

Responsibilities

• Design, deploy, configure, and maintain Elastic stack and Cribl Kafka deployments.
• Manage, patch, and upgrade Elasticsearch, Cribl and other related systems.
• Tune and optimize Elastic stack deployments based on application/customer needs.
• Design and configure ETL data pipelines to ingest customer defined data sets such as application logs, metrics, and or threat events.
• Create custom visualizations and dashboards using Kibana.
• Configure and maintain index templates and information lifecycle management (ILM) policies.
• Develop Elastic alerting solutions using Watcher and/or Kibana Rules and Connectors with integrations to ticketing systems, email, and messaging apps as required.
• Develop Machine Learning (ML) jobs to dynamically monitor and alert on identified metrics, KPIs, and/or data anomalies.
• Follow ITIL based change management processes to move solutions from Dev to Test and into Production

Salary Range: $170,000 - $190,000

Required Skills

• Minimum Top-Secret clearance is required, can start with Secret.
• Compliance with DoD 8140 / 8570 IAT Level II certification prior to start date.
• Certified Elastic Engineer or willingness to gain certification within 180 days of hire.
• At least 6 years’ hands‑on experience in deployment, configuration, and solution development using the Elastic Stack for security and logging use‑cases. Specific experience with Elastic

Desired Skills

• Experience integrating Elasticsearch with external systems (e.g. SOAR tools, Threat Intel Platforms)
• Experience with data management: hot/warm/cold architectures, shard allocation/re-allocation, snapshots & restoration
• Strong experience with evaluating existing Elastic clusters, configuration parameters, indexing, search and query performance tuning, security, and cluster administration.
• Experience integrating Elasticsearch with alternate authentication mechanisms such as SAML, LDAP, and PKI.
• Experience with supporting the Elastic Stack in on-prem and SaaS environments including system monitoring and tuning.
• Experience securing the Elastic stack and hardening hosting environments.
• Experience with developing in multiple languages (Python, Bash, PowerShell, Painless, etc.).
• Experience with the design and implement of highly scalable solutions using the Elastic Stack.
• Experience in developing data structures, data mapping from various sources to achieve data normalization using Elastic Common Schema.
• Experience developing Logstash and/or Elastic Ingest Pipelines.
• Experience with developing custom visualizations and dashboards using Kibana.
• Developing custom reporting solutions using APIs that leverage Elasticsearch and Kibana
• Experience in end-to-end Low-level design, development, administration, and delivery of Elasticsearch based reporting solutions.
• Strong technical foundation in building reliable, scalable, and supportable systems.
• Experienced in Red Hat Enterprise Linux deployment and administration.
• Experience using and developing Ansible playbooks for automation of system deployment and/or configuration.

#EverforthECS1

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We Value

• Attracting and developing top talent and high-performing teams
• Fostering a culture that is engaging, accountable, and mission-driven

Meet the challenge. Make a difference with Everforth ECS!