Sr Elastic Engineer

ECS Tech Inc•Fort Meade, MD

2d•$170,000 - $190,000•Hybrid

About The Position

ECS is seeking a Senior Elastic Engineer to support its Army Endpoint Security Solution (AESS) program in Fort Meade, Maryland, in a hybrid work arrangement. ECS provides managed cybersecurity services, and its team protects customer and corporate environments. The role is hands-on and works within a multidisciplinary team to design, build, secure, maintain, optimize, and document multiple Elastic deployments operating globally in a Federal Department of Defense environment. These deployments use Elastic Stack capabilities including Elasticsearch, Logstash, Kibana, Beats, Machine Learning, SIEM, and Fleet, as well as third-party technologies such as Cribl Kafka. The engineer will provide continuous data-normalization support and contribute written technical deliverables, such as standard operating procedures and process workflows, to improve tool usage and support new capabilities. The position follows ITIL-based change-management processes to move solutions from development through test and into production. The listed salary range is $170,000–$190,000. ECS refers candidates to its general benefits information page.

Requirements

Minimum Top Secret clearance is required; candidates may start with Secret clearance.
Comply with DoD 8140 / 8570 IAT Level II certification requirements before the start date.
Hold a Certified Elastic Engineer certification or be willing to obtain it within 180 days of hire.
At least 6 years of hands-on experience deploying, configuring, and developing solutions using the Elastic Stack for security and logging use cases.

Responsibilities

Design, deploy, configure, and maintain Elastic Stack and Cribl Kafka deployments.
Manage, patch, and upgrade Elasticsearch, Cribl, and related systems.
Tune and optimize Elastic Stack deployments to meet application and customer needs.
Design and configure ETL data pipelines to ingest customer-defined datasets, including application logs, metrics, and threat events.
Create custom visualizations and dashboards using Kibana.
Configure and maintain index templates and information lifecycle management (ILM) policies.
Develop Elastic alerting solutions using Watcher and/or Kibana Rules and Connectors, integrating with ticketing systems, email, and messaging applications as required.
Develop Machine Learning jobs to monitor and alert dynamically on identified metrics, KPIs, and data anomalies.
Follow ITIL-based change-management processes to move solutions from development to test and production.
Provide continuous data-normalization support and produce technical deliverables such as SOPs and process workflows.