Sr. Elastic Engineer

Sr. Elastic Engineer – Norfolk, VA

Everforth ECS is seeking a Sr. Elastic Engineer
. This position is contingent on contract award. The role focuses on implementing, optimizing, and maintaining Elastic Stack environments at scale while contributing to architecture, automation, and integrations that improve reliability, performance, and operational efficiency.

• Design, deploy, and maintain Elastic Stack environments, including Elasticsearch, Kibana, Logstash, Beats, and Fleet.
• Build and optimize ingestion pipelines, index strategies, search queries, dashboards, and automation workflows.
• Write scripts, automation, and integrations (Python, Power Shell, Bash, etc.) to streamline operations, data processing, and monitoring.
• Deploy Elastic across platforms, including on‑premises, public cloud (AWS, Azure, GCP), Gov Cloud, and containerized environments.
• Leverage automation and orchestration tools such as Terraform, Ansible, CI/CD pipelines, and Docker to manage deployments and operational tasks.
• Integrate Elastic with enterprise tools such as SIEMs, Splunk, Crowd Strike, and other telemetry sources.
• Monitor system health, troubleshoot performance issues, and optimize for reliability and scalability.
• Lead design reviews, provide guidance on Elastic best practices, and support knowledge sharing across teams.
• Maintain documentation for architectures, deployment patterns, runbooks, and operational best practices.
• Stay current with Elastic features, certifications, and emerging platform capabilities.

• Deep, hands‑on expertise with Elastic Stack (Elasticsearch, Kibana, Logstash, Beats, Fleet).
• Strong scripting and automation skills (Python, Power Shell, Bash, etc.).
• Solid understanding of observability, logging, metrics, and distributed systems.
• Experience designing, deploying, and optimizing production‑scale Elastic environments.
• Strong Linux/Unix, networking, and cloud platform knowledge (AWS, Azure, GCP).
• Ability to mentor, guide, and influence engineering teams on Elastic best practices.
• Outstanding verbal and written communication skills.
• Willingness and ability to support domestic or international on‑site engagements.
• U.S. Passport required.
• Must have a TS/SCI Clearance, at minimum.
• Must be eligible to obtain a U.S. Security Clearance.

• Familiarity with SIEM concepts, Elastic Security, or other SIEM/EDR platforms.
• Experience with containerization and orchestration (Kubernetes, Docker, Open Shift).
• Experience with automation/orchestration tools (Terraform, Ansible, CI/CD pipelines).
• Familiarity integrating Elastic with endpoint telemetry or cloud‑native tools.
• Certifications (preferred):
  • Elastic Certified Engineer, Elastic Security Engineer, Elastic Observability Engineer
  • AWS Certified Solutions Architect or equivalent
  • Docker Certified Associate (DCA)
  • Certified Kubernetes Administrator (CKA)
  • Hashi Corp Certified:
    Terraform Associate
  • Red Hat Certified Specialist in Ansible Automation
• Prior experience in Dev Ops, Site Reliability Engineering, or cloud platform roles is a plus.
• Experience designing dashboards, observability frameworks, and large‑scale workflows.
• Experience with the following technologies:
  • Platforms:
    On‑premises, Public Cloud (AWS, Azure, GCP), Gov Cloud, hybrid deployments
  • Containerization:
    Kubernetes, Docker, Open Shift
  • Automation:
    Terraform, Ansible, CI/CD pipelines, Docker
  • Integrations: SIEMs (Splunk, Elastic Security), endpoint/security telemetry (Crowd Strike), cloud‑native services
  • Competing Technologies:
    Splunk, Open Search, Solr, Lucene, Graylog, Datadog, Elastic Cloud alternatives

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis of any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.