Elastic Agent Engineer

Leidos • Adelphi, MD

2d • Hybrid

About The Position

Leidos is seeking an experienced Elastic Agent Engineer to support enterprise cybersecurity visibility, endpoint protection, and centralized logging for the U.S. Army C5ISR Cyber Security Service Provider (CSSP). The role involves hands-on design, deployment, automation, and optimization of Elastic Agent, Fleet, and Elastic Defend across large-scale enterprise environments. The engineer will create standardized deployment solutions, streamline subscriber onboarding, and improve endpoint security operations across Windows, Linux, cloud, and virtualized platforms. The work supports the security and resilience of mission-critical Department of War systems.

The position is based in Adelphi, Maryland, with a hybrid arrangement requiring onsite presence at least three days per week. Remote work may be considered for highly qualified candidates based on technical expertise, experience, and program requirements. An active Secret clearance is required to start; TS/SCI clearance is required for the position, subject to program access and eligibility requirements.

Requirements

• Bachelor's degree and 4+ years of relevant experience, or a master's degree and 2+ years of relevant experience; additional relevant experience may be considered in lieu of a degree.
• Hands-on experience engineering, deploying, and managing Elastic Agent, Elastic Fleet, Fleet Server, and centralized logging integrations in production environments.
• Experience deploying, configuring, and troubleshooting Elastic Agent across enterprise Windows and Linux systems.
• Working knowledge of Elastic Defend, endpoint security policies, endpoint enrollment, and operational troubleshooting.
• Strong understanding of networking and security fundamentals, including TLS, PKI, certificates, DNS, proxies, firewalls, and agent communication protocols.
• Experience developing automation scripts using Python, PowerShell, Bash, Ansible, or similar technologies.
• Experience implementing standardized deployment, configuration management, and lifecycle processes for large-scale endpoint environments.
• Strong analytical, troubleshooting, technical documentation, and communication skills.
• Ability to meet applicable DoD 8140 qualification requirements at the start and obtain required CSSP and Computing Environment certifications within 90 days of starting, as applicable to the assigned work role.
• U.S. citizenship, an active Secret security clearance to start, and ability to obtain TS/SCI clearance.

Nice To Haves

• Experience with Elastic Security, Elastic Defend, Endpoint Detection and Response (EDR), or Extended Detection and Response (XDR) technologies.
• Experience supporting cybersecurity operations within DoD, federal government, or other regulated environments.
• Experience with enterprise software deployment tools, configuration management, golden images, cloud-init, or CI/CD pipelines.
• Familiarity with cloud and container technologies, including AWS, Microsoft Azure, Google Cloud Platform (GCP), Oracle Cloud, Kubernetes, or Amazon EKS.
• Experience supporting virtual desktop environments, including AWS WorkSpaces or other non-persistent and ephemeral workloads.
• Experience optimizing Elastic Fleet at scale, including policy segmentation, automated agent cleanup, version management, and high-availability Fleet Server configurations.
• Elastic certifications or DoD 8140-aligned cybersecurity certifications.

Responsibilities

• Design, deploy, configure, and maintain enterprise Elastic Agent, Fleet, and Fleet Server architectures for centralized logging, endpoint protection, and security integrations.
• Develop standardized agent policies, enrollment methods, deployment packages, and lifecycle management processes across Windows, Linux, and cloud environments.
• Automate Elastic Agent installation, upgrades, policy assignments, health checks, and troubleshooting using Python, PowerShell, Bash, Ansible, or similar tools.
• Engineer scalable deployment solutions for cloud servers, traditional endpoints, virtual desktops, containerized workloads, and distributed subscriber environments.
• Troubleshoot agent enrollment, Fleet connectivity, TLS certificates, proxies, integrations, upgrades, and Elastic Defend configurations.
• Develop monitoring and alerting solutions for agent health, policy compliance, ingestion failures, deployment status, and platform performance.
• Collaborate with cybersecurity, cloud, logging, and subscriber teams to integrate Elastic Defend and onboard application logging across enterprise environments.
• Create deployment standards, automation scripts, implementation guides, troubleshooting procedures, and operational runbooks.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level