Senior Elastic Engineer; Secret Clearance

Zachary Piper Solutions is seeking a Senior Elastic Platform Engineer to support an Air Force project at Ft. Belvoir, VA. The team is seeking an experienced security engineer to lead the migration from splunk to Elastic for the agency. Expertise across the elastic stack and automated deployment is needed to succeed in this position. Details below:

This job opens for applications on 10/8/2026 Applications for this job will be accepted for at least 30 days from the posting date

• Lead the design, deployment, configuration, and administration of enterprise-scale Elastic environments supporting security monitoring and log analytics requirements.
• Architect and implement the migration of security logging, monitoring, and SIEM capabilities from Splunk to Elastic, ensuring data integrity, performance, and operational continuity.
• Build, manage, and optimize Elastic clusters, including Elasticsearch, Kibana, and associated components in highly available and secure environments.
• Design, develop, and maintain custom data ingestion pipelines to collect, transform, enrich, and route security and operational log data from multiple sources into Elastic.
• Deploy, configure, and support Elastic Cloud on Kubernetes (ECK) environments, leveraging Kubernetes operators to automate cluster lifecycle management and scaling.
• Administer Kubernetes-based Elastic deployments, including cluster provisioning, upgrades, monitoring, troubleshooting, and performance tuning.
• Create custom dashboards, visualizations, alerts, and reporting capabilities to support operational monitoring and security investigations.
• Support testing, validation, and cutover activities associated with Splunk-to-Elastic migration efforts.
• Mentor junior engineers and contribute to engineering best practices, standards, and continuous improvement initiatives.

• Active Secret Clearance
• Bachelor’s degree from an accredited university and 5+ years of experience supporting cyber security tooling, specifically elastic.
• Extensive hands-on experience with Elasticsearch, Kibana, Logstash, Beats, and Elastic Agent.
• Proven experience leading or supporting large-scale Splunk-to-Elastic migration projects.
• Strong expertise in Kubernetes administration and containerized application deployments.
• Experience deploying and supporting Elastic Cloud on Kubernetes (ECK) using Kubernetes Operators.
• Deep understanding of security logging, SIEM architectures, threat detection, and security operations workflows.
• Experience developing custom data ingestion, parsing, enrichment, and normalization solutions.
• Strong troubleshooting and problem-solving skills in complex distributed system environments.
• Experience supporting federal government, defense, or highly regulated environments is highly desirable.

• Total compensation based on experience level - $190,000-$215,000
  ** based on experience level**
• Full Benefits: PTO, Paid Holidays, Medical, Dental, and Vision, 401k

#LI-MK1 #LI-Onsite

/sci, federal, W2, opentowork, hiring, Beats, Elastic Agent, Elastic Security, SIEM, Security Information and Event Management, Security Logging, Log Analytics, Threat Detection, Security Monitoring, Splunk Migration, Splunk to Elastic Migration, Data Migration, Elasticsearch Cluster Administration, Elastic Architecture, Distributed Systems, Index Lifecycle Management (ILM), Data Retention Policies, Index Management, Data Ingestion Pipelines, Custom Data Pipelines, ETL Development, Data Transformation, Data Enrichment, Log Parsing, Data Normalization, Log Aggregation, API Integration, Security Event Collection, Kubernetes, Elastic Cloud on Kubernetes (ECK), Kubernetes Operators, Container Orchestration, Containerized Deployments, Cloud-Native Architecture, Platform Engineering, Cluster Deployment, Cluster Management, Performance Tuning, Scalability, High Availability, Infrastructure Automation, Dev Ops, Site Reliability Engineering (SRE), Monitoring and Alerting, Root Cause Analysis, Troubleshooting, System Optimization, Linux Administration, Automation Scripting, CI/CD Pipelines, Security Operations (SOC), Cybersecurity, Role-Based Access Control (RBAC), Authentication and Authorization, Encryption, Audit Logging, Compliance, Incident Response, Threat Hunting, Security Analytics, Dashboard Development, Data Visualization, Technical Leadership,…