Sr. Elastic Engineer; Secret Cleared

• Deep, hands-on expertise with Elastic Stack (Elasticsearch, Kibana, Logstash, Beats, Fleet)
• Strong scripting and automation skills (Python, Power Shell, Bash, etc.)
• Experience deploying and administering Elastic Cloud on Kubernetes (ECK) in production environments
• Strong Kubernetes experience, including managing complex multi-node environments
• Experience building, deploying, and scaling Elastic clusters in enterprise environments
• Understanding of ECK operators, Helm charts, and containerization technologies such as Docker
• Solid understanding of observability, logging, metrics, and distributed systems.
• Experience designing, deploying, and optimizing production-scale Elastic environments.
• Strong Linux/Unix, networking, and cloud platform knowledge (AWS, Azure, GCP).

• Familiarity with SIEM concepts, Elastic Security, or other SIEM/EDR platforms.
• Experience with containerization and orchestration (Kubernetes, Docker, Open Shift).
• Experience with automation/orchestration tools (Terraform, Ansible, CI/CD pipelines).
• Familiarity integrating Elastic with endpoint telemetry or cloud-native tools.

• Elastic Certified Engineer, Elastic Security Engineer, Elastic Observability Engineer
• AWS Certified Solutions Architect or equivalent
• Docker Certified Associate (DCA)
• Hashi Corp Certified:
  Terraform Associate
• Red Hat Certified Specialist in Ansible Automation
• Prior experience in Dev Ops, Site Reliability Engineering, or cloud platform roles is a plus.
• Experience designing dashboards, observability frameworks, and large-scale workflows.

• Platforms:
  On-premises, Public Cloud (AWS, Azure, GCP), Gov Cloud, hybrid deployments
• Integrations: SIEMs (Splunk, Elastic Security), endpoint/security telemetry (Crowd Strike), cloud-native services

Insight Global is looking to hire a Sr. Elastic Engineer for one of our clients supporting a modernization effort at Scott Air Force Base, IL. This individual will play a key role in migrating enterprise security logging and observability capabilities from Splunk to Elastic within a secure DoD environment. On a day-to-day basis, this engineer will lead Elastic architecture efforts, Kubernetes-based deployments, and custom data ingestion solutions while partnering with infrastructure, security, and engineering teams to build scalable, resilient, and mission-critical logging platforms.

• Design, deploy, and maintain enterprise Elastic Stack environments supporting security logging, search, and observability initiatives.
• Lead the migration of logging and monitoring capabilities from Splunk to Elastic while minimizing disruption to operational workloads.
• Build and implement custom data ingestion pipelines to support enterprise security and operational data sources.
• Deploy and administer Elastic Cloud on Kubernetes (ECK) environments and manage Kubernetes operators supporting Elastic workloads.
• Configure and optimize Index Lifecycle Management (ILM) policies, data retention strategies, and storage architectures.
• Monitor and improve Elastic cluster performance, scalability, availability, and reliability across production environments.
• Troubleshoot complex issues involving Elastic infrastructure, Kubernetes platforms, and distributed systems.
• Integrate Elastic solutions with enterprise security tools, SIEM capabilities, and observability platforms.
• Develop automation, operational standards, and best practices for Elastic platform administration and support.
• Maintain technical documentation, deployment standards, architectural designs, and operational procedures.

$186,000 to $191,667 per year annual salary.

Exact compensation may vary based on several factors, including skills, experience, and education.

Benefit packages for this role may include healthcare insurance offerings and paid leave as provided by applicable law.