Senior Elastic Platform Engineer; Secret Clearance

Overview

Zachary Piper Solutions is seeking a Senior Elastic Platform Engineer to support an Air Force project at Scott AFB, IL
. The team is seeking an experienced security engineer to lead the migration from Splunk to Elastic for the agency. Expertise across the Elastic Stack and automated deployments is needed to be successful. Details below:

Clearance: Secret clearance

Location: Scott AFB, IL (100% onsite)

This job opens for applications on 7/17/2026. Applications for this job will be accepted for at least 30 days from the posting date.

• Lead the design, deployment, configuration, and administration of enterprise-scale Elastic environments supporting security monitoring and log analytics requirements.
• Architect and implement the migration of security logging, monitoring, and SIEM capabilities from Splunk to Elastic, ensuring data integrity, performance, and operational continuity.
• Build, manage, and optimize Elastic clusters, including Elasticsearch, Kibana, and associated components in highly available and secure environments.
• Design, develop, and maintain custom data ingestion pipelines to collect, transform, enrich, and route security and operational log data from multiple sources into Elastic.
• Deploy, configure, and support Elastic Cloud on Kubernetes (ECK) environments, leveraging Kubernetes operators to automate cluster lifecycle management and scaling.
• Administer Kubernetes-based Elastic deployments, including cluster provisioning, upgrades, monitoring, troubleshooting, and performance tuning.
• Create custom dashboards, visualizations, alerts, and reporting capabilities to support operational monitoring and security investigations.
• Support testing, validation, and cutover activities associated with Splunk-to-Elastic migration efforts.
• Mentor junior engineers and contribute to engineering best practices, standards, and continuous improvement initiatives.

• Active Secret Clearance
• Bachelor’s degree from an accredited university and 5+ years of experience supporting cyber security tooling, specifically Elastic.
• Extensive hands-on experience with Elasticsearch, Kibana, Logstash, Beats, and Elastic Agent.
• Proven experience leading or supporting large-scale Splunk-to-Elastic migration projects.
• Strong expertise in Kubernetes administration and containerized application deployments.
• Experience deploying and supporting Elastic Cloud on Kubernetes (ECK) using Kubernetes Operators.
• Deep understanding of security logging, SIEM architectures, threat detection, and security operations workflows.
• Experience developing custom data ingestion, parsing, enrichment, and normalization solutions.
• Strong troubleshooting and problem-solving skills in complex distributed system environments.
• Experience supporting federal government, defense, or highly regulated environments is highly desirable.

• Total compensation based on experience level - $190,000-$230,000 + $5k relocation bonus based on experience level
• Full Benefits: PTO, Paid Holidays, Medical, Dental, and Vision, 401k