Vacancy expired!
ECS is seeking an
Army Tactical Elastic Engineer to work in our Aberdeen, MD office. Job Description: As a leading provider of managed cybersecurity services, ECS provides a highly tailored and customized offering to each customer. Our team is responsible for protecting both our customers and corporate environment at ECS. Our mission is very broad, and our team is agile. We will look toward your unique skills to approach and solve problems in your own way. Whether engineering a system to address a technical hurdle, protecting customers data or consulting on a wide range of security topics. You are empowered to engage and lead across multiple groups. This role of Elastic Engineer will support ECS's Army PEO C3T (Tactical) program. This is a technical hands-on role to which you will be responsible for working within a multi-disciplined team to design, build, secure, maintain, optimize, and document multiple Elastic Stack Enterprise solutions (Elasticsearch, Logstash, Kibana, Beats, SIEM) deployed globally in a DoD environment. Additionally, you will perform continuous data normalization support functions and support the delivery of written technical deliverables such as SOPs and/or process workflows to optimize tool usage and contribute to new capabilities. Your infrastructure, data pipelines and reporting automation will directly support customer requirements. Responsibilities- Design and implement Elastic stack (Elasticsearch, Logstash and Kibana) solutions
- Manage, patch, and upgrade Elasticsearch clusters
- Tune and optimize Elastic stack deployments based on application/customer needs
- Design and configure ETL data pipelines using Elastic Common Schema to ingest application logs and metrics.
- Create custom visualizations and dashboards using Kibana
- Configure and maintain index templates and information lifecycle management (ILM) policies
- Develop Elastic alerting solutions using Watcher and/or Kibana Rules and Connectors with integrations to ticketing systems, email, and messaging apps as needed
- Develop Machine Learning (ML) jobs to dynamically monitor and alert on identified metrics and KPIs
- Follow ITIL based change management processes to move solutions from Dev to Test and into Production
- Certified Elastic Engineer on start date
- Minimum Secret clearance is required, Top Secret Preferred
- BS/BA degree +5 or 9 years' experience
- Compliance with DoD 8140 / 8570 IAT Level II certification prior to start date
- At least 5 years' hands-on experience related to the setup, operation, and maintenance of the Elastic Stack and Elastic Endgame software products.
- Specific experience with Elastic SIEM is plus.
- Demonstrated experience with the full Elastic Stack - Elasticsearch, Logstash, Kibana, Beats, and REST API integration
- Linux proficiency
- Dashboard and Visualization Creation
- Ansible proficiency highly desired
- DoD or Army Experience highly desired
- Experience integrating Elasticsearch with external systems (e.g. SOAR tools, Threat Intel Platforms)
- Experience with data management: hot/warm/cold architectures, shard allocation/re-allocation, snapshots & restoration
- Strong experience with evaluating existing Elastic clusters, configuration parameters, indexing, search and query performance tuning, security, and cluster administration
- Experience integrating Elasticsearch with alternate authentication mechanisms such as SAML, LDAP, and PKI
- Experience with supporting the Elastic Stack in on-prem and SaaS environments including system monitoring and tuning
- Experience securing the Elastic stack and hardening hosting environments
- Experience with developing in multiple languages (Python, Bash, PowerShell, Painless, etc.)
- Experience with the design and implement of highly scalable solutions using the Elastic Stack
- Experience in developing data structures, data mapping from various sources to achieve data normalization using Elastic Common Schema
- Experience developing Logstash and/or Ingest Pipelines
- Experience developing custom visualizations and dashboards using Kibana
- Developing custom reporting solutions using APIs that leverage Elasticsearch and Kibana
- Experience in end-to-end Low-level design, development, administration, and delivery of Elasticsearch based reporting solutions
- Strong technical foundation in building reliable, scalable, and supportable systems
- Experienced in Red Hat Enterprise Linux deployment and administration
Vacancy expired!