Elasticsearch Engineer (Secret Clearance)

ShorePoint•Scott AFB, IL

21h•Onsite

About The Position

ShorePoint is a rapidly growing cybersecurity services firm that serves high-profile private and public-sector clients. We foster a "work hard, play hard" culture that values creativity, accountability, diversity, inclusion, and community involvement. We are seeking an Elasticsearch Engineer with a Secret Clearance to design, deploy, and optimize Elastic Stack solutions within federal environments. This role involves supporting Elastic-based solutions across various infrastructures to enhance security operations and achieve data-driven outcomes. The Elasticsearch Engineer will lead technical implementations, assist with migrations, contribute to scalable architectures, and interact directly with client stakeholders. This is a significant opportunity to influence the growth and development of a dynamic company in the cybersecurity sector.

Requirements

Deep understanding of Elastic Stack capabilities and use cases across deployment, security, and operations.
Knowledge of distributed cluster architecture at scale, including multi-tenant and CCS environments.
6+ years in systems engineering or infrastructure, including 2+ years of production Elastic Stack experience.
Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
Strong problem-solving skills and a self-starter mentality.
Solid written and verbal communication skills.
Linux Command-Line Interface (CLI) fundamentals and basic networking knowledge.
Hands-on experience with containerization and IaC tooling.
Proficiency with at least one major cloud provider.
Experience with federal security controls (TLS, SSO/SAML, PIV/CAC, STIG).
Proven track record leading engagements from scoping through delivery.
Deep knowledge of distributed cluster architecture at scale, including multi-tenant and CCS environments.
Ability to drive client relationships and identify expansion opportunities.
Must currently hold and maintain an active Secret clearance.

Nice To Haves

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field.
Elastic certifications (ECE or being on a defined certification track).
Elastic Security (SIEM, detection engineering, threat hunting, and legacy migration).
Detection translation experience (SPL → ES|QL or equivalent).
Scripting proficiency (Python, Bash, or PowerShell).
Exposure to AI-augmented search, RAG, or semantic search use cases.
Prior professional services or consulting experience.

Responsibilities

Architect, deploy, and tune Elastic Stack solutions (Elastic Cloud Enterprise (ECE), Elastic Cloud on Kubernetes (ECK), Elastic Cloud) across cloud, on-prem, and hybrid environments.
Execute legacy security platform migrations, including detection translation (e.g., Search Processing Language (SPL) to Elasticsearch Query Language (ES|QL)) and modernization of analyst workflows.
Design and implement data ingestion pipelines using Elastic Agent, Fleet, Logstash, and Beats.
Harden deployments for federal compliance, including Transport Layer Security (TLS), Personal Identity Verification/Common Access Card (PIV/CAC), Single Sign-On (SSO) / Security Assertion Markup Language (SSO/SAML), Security Technical Implementation Guide (STIG), and audit logging.
Build outcome-driven dashboards and advanced Kibana visualizations.
Develop automation using Infrastructure-as-Code (IaC) tools (Ansible, Terraform, or equivalent).
Communicate technical decisions and trade-offs directly to client stakeholders.
Contribute to internal intellectual property, including reusable templates, automation, and reference architectures.