Elasticsearch Engineer

August Schell is looking for an Elasticsearch Engineer to join our team in support of a cybersecurity, network architecture, and mission support role with our DoD customer.  The engineer will be part of a project team responsible for working with clients and peers and building a high performing system using Elastic.   

Individuals in this role must be able work hybrid and go on site at Fort Meade as requested.

Responsibilities Include:  

• Demonstrate expertise with Elastic Stack including designing and implementing solutions to aggregate logs from multiple systems.

• Extensive experience installing, configuring, upgrading, maintaining and troubleshooting Elastic Stack components

• Proficient in developing Kibana visualizations, dashboards, and alerting capabilities to support threat hunting, security monitoring, and data analytics

• Strong knowledge of log ingestion pipelines, Elastic Common Schema (ECS) formatting, and Logstash plugins and filters.

• Experience maintaining and troubleshooting Elastic infrastructure and proactively identifying and resolving anomalous behavior prior to escalation

• Skilled in deploying and managing systems in compliance with federal security requirements and standards.

• Proven ability to lead engineering initiatives, collaborating with vendors to determine best practices for system architecture, deployment, and ongoing maintenance.

• Solid understanding of system integrations, dependencies, and interactions across complex enterprise environments.

• Experience utilizing Cribl in the onboarding and normalization process

Requirements:  

• Two (2) years of overall experience in a DoD or Federal IT environment

• Have an active Top Secret

• DoD 8570 IAM/IA Technical (IAT) Level II certification

• Strong written and verbal communication skills for reporting assessment findings.

Stand out with:  

• Bachelor's degree (IT-related field preferred) 

• Experience with Docker, Kubernetes, Elastic Cloud on Kubernetes (ECK) and cloud containerization
  Knowledge of Linux/UNIX and networking

• Familiarity with NIFI, Kafka, Confluent, McAfee, Tenable