Sr. Elastic Engineer

ECS; Shiloh (IL); On-site; USD 100,000 - 130,000; Full time

Job summary

ECS is seeking a Sr. Elastic Engineer to work in our Scott AFB, IL office. This role focuses on implementing, optimizing, and maintaining Elastic Stack environments while contributing to architecture and automation efforts.

The ideal candidate will have deep expertise with Elastic technologies, strong scripting skills, and a solid understanding of distributed systems. You will lead design reviews and guide engineering teams on best practices while working in a dynamic environment.

Qualifications

• Deep, hands-on expertise with Elastic Stack (Elasticsearch, Kibana, Logstash, Beats, Fleet).
• Strong scripting and automation skills (Python, PowerShell, Bash, etc.).
• Solid understanding of observability, logging, metrics, and distributed systems.
• U.S. Passport required.
• Must have a Secret Clearance, at minimum.

Responsibilities

• Design, deploy, and maintain Elastic Stack environments.
• Build and optimize ingestion pipelines and index strategies.
• Write scripts for automation and monitoring.
• Integrate Elastic with enterprise tools.
• Monitor system health and troubleshoot performance issues.

Skills

Expertise with Elastic Stack

Scripting and automation (Python, PowerShell, Bash)

Understanding of observability and distributed systems

Production-scale Elastic environment design

Linux/Unix and cloud platform knowledge

Mentoring and guiding skills

Strong communication skills

Tools

Terraform

Ansible

Docker

Kubernetes

Job description

Job Description

ECS is seeking a Sr. Elastic Engineer to work in our Scott AFB, IL office. Are you passionate about building and scaling Elastic environments and eager to make an immediate technical impact? Join ECS, a leading provider of cloud, AI, data, and enterprise transformation solutions. In this role, you will implement, optimize, and maintain Elastic Stack environments at scale while contributing to architecture, automation, and integrations that improve reliability, performance, and operational efficiency.

Key Responsibilities

• Design, deploy, and maintain Elastic Stack environments, including Elasticsearch, Kibana, Logstash, Beats, and Fleet.
• Build and optimize ingestion pipelines, index strategies, search queries, dashboards, and automation workflows.
• Write scripts, automation, and integrations (Python, PowerShell, Bash, etc.) to streamline operations, data processing, and monitoring.
• Deploy Elastic across platforms, including on‑premises, public cloud (AWS, Azure, GCP), GovCloud, and containerized environments (Kubernetes, Docker, OpenShift).
• Leverage automation and orchestration tools such as Terraform, Ansible, CI/CD pipelines, and Docker to manage deployments and operational tasks.
• Integrate Elastic with enterprise tools such as SIEMs, Splunk, CrowdStrike, and other telemetry sources.
• Monitor system health, troubleshoot performance issues, and optimize for reliability and scalability.
• Lead design reviews, provide guidance on Elastic best practices, and support knowledge sharing across teams.
• Maintain documentation for architectures, deployment patterns, runbooks, and operational best practices.
• Stay current with Elastic features, certifications, and emerging platform capabilities.

Required Skills

• Deep, hands‑on expertise with Elastic Stack (Elasticsearch, Kibana, Logstash, Beats, Fleet).
• Strong scripting and automation skills (Python, PowerShell, Bash, etc.).
• Solid understanding of observability, logging, metrics, and distributed systems.
• Experience designing, deploying, and optimizing production‑scale Elastic environments.
• Strong Linux/Unix, networking, and cloud platform knowledge (AWS, Azure, GCP).
• Ability to mentor, guide, and influence engineering teams on Elastic best practices.
• Outstanding verbal and written communication skills.
• Willingness and ability to support domestic or international on‑site engagements.
• U.S. Passport required.
• Must have a Secret Clearance, at minimum.

Desired Skills

• Familiarity with SIEM concepts, Elastic Security, or other SIEM/EDR platforms.
• Experience with containerization and orchestration (Kubernetes, Docker, OpenShift).
• Experience with automation/orchestration tools (Terraform, Ansible, CI/CD pipelines).
• Familiarity integrating Elastic with endpoint telemetry or cloud‑native tools.
• Certifications (preferred): Elastic Certified Engineer, Elastic Security Engineer, Elastic Observability Engineer, AWS Certified Solutions Architect or equivalent, Docker Certified Associate (DCA), Certified Kubernetes Administrator (CKA), HashiCorp Certified: Terraform Associate, Red Hat Certified Specialist in Ansible Automation.
• Prior experience in DevOps, Site Reliability Engineering, or cloud platform roles is a plus.
• Experience designing dashboards, observability frameworks, and large‑scale workflows.
• Experience with the below:

Additional Experience

• Platforms: On‑premises, Public Cloud (AWS, Azure, GCP), GovCloud, hybrid deployments.
• Containerization: Kubernetes, Docker, OpenShift.
• Automation: Terraform, Ansible, CI/CD pipelines, Docker.
• Integrations: SIEMs (Splunk, Elastic Security), endpoint/security telemetry (CrowdStrike), cloud‑native services.
• Competing Technologies: Splunk, OpenSearch, Solr, Lucene, Graylog, Datadog, Elastic Cloud alternatives.

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.