Sr. Elastic Engineer

Key Responsibilities

• Design, deploy, and maintain Elastic Stack environments, including Elasticsearch, Kibana, Logstash, Beats, and Fleet.
• Build and optimize ingestion pipelines, index strategies, search queries, dashboards, and automation workflows.
• Write scripts, automation, and integrations (Python, PowerShell, Bash, etc.) to streamline operations, data processing, and monitoring.
• Deploy Elastic across platforms, including on-premises, public cloud (AWS, Azure, GCP), GovCloud, and containerized environments (Kubernetes, Docker, OpenShift).
• Leverage automation and orchestration tools such as Terraform, Ansible, CI/CD pipelines, and Docker to manage deployments and operational tasks.
• Integrate Elastic with enterprise tools such as SIEMs, Splunk, CrowdStrike, and other telemetry sources.
• Maintain documentation for architectures, deployment patterns, runbooks, and operational best practices.

Required Skills

• Deep, hands-on expertise with Elastic Stack (Elasticsearch, Kibana, Logstash, Beats, Fleet).
• Strong scripting and automation skills (Python, PowerShell, Bash, etc.).
• Solid understanding of observability, logging, metrics, and distributed systems.
• Experience designing, deploying, and optimizing production-scale Elastic environments.
• Solid understanding of Linux/Unix, networking, and cloud platform knowledge (AWS, Azure, GCP).
• Ability to mentor, guide, and influence engineering teams on Elastic best practices.
• Outstanding verbal and written communication skills.
• Willingness and ability to support domestic or international on-site engagements.
• U.S. Passport required.
• Must have a TS/SCI Clearance, at minimum.

Desired Skills

• Familiarity with SIEM concepts, Elastic Security, or other SIEM/EDR platforms.
• Experience with containerization and orchestration (Kubernetes, Docker, OpenShift).
• Experience with automation/orchestration tools (Terraform, Ansible, CI/CD pipelines).
• Familiarity integrating Elastic with endpoint telemetry or cloud-native tools.
• Certifications (preferred): Elastic Certified Engineer, Elastic Security Engineer, Elastic Observability Engineer, AWS Certified Solutions Architect, Docker Certified Associate (DCA), Certified Kubernetes Administrator (CKA), HashiCorp Certified: Terraform Associate, Red Hat Certified Specialist in Ansible Automation.
• Prior experience in DevOps, Site Reliability Engineering, or cloud platform roles.
• Experience designing dashboards, observability frameworks, and large-scale workflows.
• Experience with the below: Platforms: On-premises, Public Cloud (AWS, Azure, GCP), GovCloud, hybrid deployments; Containerization: Kubernetes, Docker, OpenShift; Automation: Terraform, Ansible, CI/CD pipelines, Docker; Integrations: SIEMs (Splunk, Elastic Security), endpoint/security telemetry (CrowdStrike), cloud-native services; Competing Technologies: Splunk, OpenSearch, Solr, Lucene, Graylog, Datadog, Elastic Cloud alternatives.

Salary Range

$170,000 - $225,000

Company Information

Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies. Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow. We Value Attracting and developing top talent and high-performing teams, Fostering a culture that is engaging, accountable, and mission-driven.