Sr. Elastic Engineer

ECS; Hampton (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

ECS, located in Hampton, VA, is seeking a Sr. Elastic Engineer to implement and optimize Elastic Stack environments. The role involves working with cloud and on-premises platforms, requiring strong scripting and automation skills.

The ideal candidate will have deep expertise in Elastic technologies, a background in Linux/Unix and cloud platforms, and will hold a Top Secret Clearance. Responsibilities include designing deployment strategies, monitoring systems, and leading design reviews.

Qualifications

• 5+ years of hands-on experience with Elastic Stack in production environments.
• Proficient in scripting and automation tools like Python and PowerShell.
• Knowledgeable in cloud platforms and security integration.

Responsibilities

• Design and maintain Elastic Stack environments for maximum efficiency.
• Automate workflows and integrations for operational tasks.
• Monitor system performance and reliability across platforms.

Skills

Deep expertise with Elastic Stack (Elasticsearch, Kibana, Logstash, Beats, Fleet)

Strong scripting and automation skills (Python, PowerShell, Bash)

Solid understanding of observability and distributed systems

Experience designing and optimizing production-scale Elastic environments

Strong Linux/Unix and cloud platform knowledge (AWS, Azure, GCP)

Education

Top Secret Clearance

Tools

Terraform

Ansible

Docker

Kubernetes

Job description

Everforth ECS is seeking a Sr. Elastic Engineer in Hampton, VA. The position is contingent upon contract award. The role involves implementing, optimizing, and maintaining Elastic Stack environments at scale while contributing to architecture, automation, and integrations that improve reliability, performance, and operational efficiency.

Key Responsibilities

• Design, deploy, and maintain Elastic Stack environments, including Elasticsearch, Kibana, Logstash, Beats, and Fleet.
• Build and optimize ingestion pipelines, index strategies, search queries, dashboards, and automation workflows.
• Write scripts, automation, and integrations (Python, PowerShell, Bash, etc.) to streamline operations, data processing, and monitoring.
• Deploy Elastic across platforms, including on-premises, public cloud (AWS, Azure, GCP), GovCloud, and containerized environments (Kubernetes, Docker, OpenShift).
• Leverage automation and orchestration tools such as Terraform, Ansible, CI/CD pipelines, and Docker to manage deployments and operational tasks.
• Integrate Elastic with enterprise tools such as SIEMs, Splunk, CrowdStrike, and other telemetry sources.
• Monitor system health, troubleshoot performance issues, and optimize for reliability and scalability.
• Lead design reviews, provide guidance on Elastic best practices, and support knowledge sharing across teams.
• Maintain documentation for architectures, deployment patterns, runbooks, and operational best practices.
• Stay current with Elastic features, certifications, and emerging platform capabilities.

Required Skills

• Deep, hands‑on expertise with Elastic Stack (Elasticsearch, Kibana, Logstash, Beats, Fleet).
• Strong scripting and automation skills (Python, PowerShell, Bash, etc.).
• Solid understanding of observability, logging, metrics, and distributed systems.
• Experience designing, deploying, and optimizing production‑scale Elastic environments.
• Strong Linux/Unix, networking, and cloud platform knowledge (AWS, Azure, GCP).
• Ability to mentor, guide, and influence engineering teams on Elastic best practices.
• Outstanding verbal and written communication skills.
• Willingness and ability to support domestic or international on‑site engagements.
• U.S. Passport required.
• Must have a Top Secret Clearance, at minimum.

Desired Skills

• Familiarity with SIEM concepts, Elastic Security, or other SIEM/EDR platforms.
• Experience with containerization and orchestration (Kubernetes, Docker, OpenShift).
• Experience with automation/orchestration tools (Terraform, Ansible, CI/CD pipelines).
• Familiarity integrating Elastic with endpoint telemetry or cloud‑native tools.
• Certifications (preferred):
  • Elastic Certified Engineer, Elastic Security Engineer, Elastic Observability Engineer
  • AWS Certified Solutions Architect or equivalent
  • Docker Certified Associate (DCA)
  • Certified Kubernetes Administrator (CKA)
  • HashiCorp Certified: Terraform Associate
  • Red Hat Certified Specialist in Ansible Automation
• Prior experience in DevOps, Site Reliability Engineering, or cloud platform roles is a plus.
• Experience designing dashboards, observability frameworks, and large‑scale workflows.
• Experience with the below:
  • Platforms: On‑premises, Public Cloud (AWS, Azure, GCP), GovCloud, hybrid deployments
  • Containerization: Kubernetes, Docker, OpenShift
  • Automation: Terraform, Ansible, CI/CD pipelines, Docker
  • Integrations: SIEMs (Splunk, Elastic Security), endpoint/security telemetry (CrowdStrike), cloud‑native services
  • Competing Technologies:
    • Splunk, OpenSearch, Solr, Lucene, Graylog, Datadog, Elastic Cloud alternatives

EEO Statement

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.