Sr. Elastic Engineer

Job description Job Description ECS is seeking a Sr. Elastic Engineerto work in our Springfield, VA office.

Please Note:

This position is contingent upon additional funding. Are you passionate about building and scaling Elastic environments and eager to make an immediate technical impact? Join ECS, a leading provider of cloud, AI, data, and enterprise transformation solutions. In this role, you will implement, optimize, and maintain Elastic Stack environments at scale while contributing to architecture, automation, and integrations that improve reliability, performance, and operational efficiency. We are seeking a Sr. Elastic Engineer to join our Managed Security Services (MSSP) team . The ideal candidate has hands-on experience with Elastic Stack and enjoys designing, coding, and deploying complex systems. You will collaborate with engineering, DevOps, cloud, and client teams to deliver resilient, high-performance Elastic solutions while maintaining visibility into system health and operational workflows. Key Responsibilities Design, deploy, and maintain Elastic Stack environments, including Elasticsearch, Kibana, Logstash, Beats, and Fleet. Build and optimize ingestion pipelines, index strategies, search queries, dashboards, and automation workflows. Write scripts, automation, and integrations (Python, PowerShell, Bash, etc.) to streamline operations, data processing, and monitoring. Deploy Elastic across platforms, including on-premises, public cloud (AWS, Azure, GCP), GovCloud, and containerized environments (Kubernetes, Docker, OpenShift). Leverage automation and orchestration tools such as Terraform, Ansible, CI/CD pipelines, and Docker to manage deployments and operational tasks. Integrate Elastic with enterprise tools such as SIEMs, Splunk, CrowdStrike, and other telemetry sources. Monitor system health, troubleshoot performance issues, and optimize for reliability and scalability. Lead design reviews, provide guidance on Elastic best practices, and support knowledge sharing across teams. Maintain documentation for architectures, deployment patterns, runbooks, and operational best practices. Stay current with Elastic features, certifications, and emerging platform capabilities. Required Skills Deep, hands-on expertise with Elastic Stack (Elasticsearch, Kibana, Logstash, Beats, Fleet). Strong scripting and automation skills (Python, PowerShell, Bash, etc.). Solid understanding of observability, logging, metrics, and distributed systems. Experience designing, deploying, and optimizing production-scale Elastic environments. Strong Linux/Unix, networking, and cloud platform knowledge (AWS, Azure, GCP). Ability to mentor, guide, and influence engineering teams on Elastic best practices. Outstanding verbal and written communication skills. Willingness and ability to support domestic or international on-site engagements. U.S. Passport required. Must have a TS/SCI with CI Poly Clearance, at minimum. Must be eligible to obtain a U.S. Security Clearance. Desired Skills Familiarity with SIEM concepts, Elastic Security, or other

SIEM/EDR

platforms. Experience with containerization and orchestration (Kubernetes, Docker, OpenShift). Experience with automation/orchestration tools (Terraform, Ansible, CI/CD pipelines). Familiarity integrating Elastic with endpoint telemetry or cloud-native tools. Certifications (preferred) Elastic Certified Engineer, Elastic Security Engineer, Elastic Observability Engineer AWS Certified Solutions Architect or equivalent Docker Certified Associate (DCA) Certified Kubernetes Administrator (CKA)

HashiCorp Certified:

Terraform Associate Red Hat Certified Specialist in Ansible Automation Prior experience in DevOps, Site Reliability Engineering, or cloud platform roles is a plus. Experience designing dashboards, observability frameworks, and large-scale workflows. Experience with the below

Platforms:

On-premises, Public Cloud (AWS, Azure, GCP), GovCloud, hybrid deployments

Containerization:

Kubernetes, Docker, OpenShift Automation:

Terraform, Ansible, CI/CD pipelines,

Docker Integrations:

SIEMs (Splunk, Elastic Security), endpoint/security telemetry (CrowdStrike), cloud-native services Competing Technologies Splunk, OpenSearch, Solr, Lucene, Graylog, Datadog, Elastic Cloud alternatives ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law. Everforth ECS is the federal segment of Everforth , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies. Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow. We Value Attracting and developing top talent and high-performing teams Fostering a culture that is engaging, accountable, and mission-driven Meet the challenge. Make a difference with Everforth ECS! Keywords elastic-go job-descriptions amazon-ecs artificial-intelligence elk-stack operational-efficiency managed-security-services development-operations-devops ibm-security-soar environment-health-and-safety-hsse planning-and-design visual-art-design product-development-and-design elasticsearch kibana logstash beats search-and-retrieval python powershell streamline maintenance-repair-and-operations-mro data-processing public-cloud amazon-web-services microsoft-azure google-cloud-platform good-clinical-practice-gcp aws-govcloud kubernetes docker service-management-and-orchestration-smo terraform ansible customer-intelligence-ci continuous-integration cd-certificate-of-deposit ci-cd splunk crowdstrike troubleshooting scalability policies-and-practices runbooks training-certification scripting observability distributed-computing linux networking-telecommunications amazon-linux mentoring passport total-station managed-security-incident-and-event-management-siem security-information-and-event-management-siem elastic-security endpoint-detection-and-response containerization elastic-observability hashicorp red-hat site-reliability-engineering-sre hybrid-deployment opensearch solr lucene apache-lucene graylog datadog elastic-cloud limited-liability-company-llc laws-and-regulations state-local-municipal clubs-organizations insurance-consulting-and-technology cyber-security cyber-intelligence