Elastic Stack Platform Engineer (Logstash, Kafka, Linux)

We are looking for a hands-on Elastic Platform Engineer to join our technology team in Singapore to run and automate our clients' enterprise-scale log collection platform. You will own the Elastic Stack ingestion layer (Logstash, Kafka and Elasticsearch), which collects security and infrastructure logs from thousands of servers, endpoints, and network and security devices across the region. This is an engineering and operations role, not a SOC or monitoring role . You will build, tune, automate and support the platform, not triage alerts.

ABOUT THE JOB

• Operate and support a large-scale, high-throughput, near real-time log ingestion platform on Linux (physical and virtual servers).
• Manage and tune many Logstash instances and pipelines, including pipeline design, persistent queues, load balancing and troubleshooting performance bottlenecks.
• Work with Kafka in the ingestion flow: topics, consumers and throughput handling.
• Monitor platform health and capacity, and proactively resolve issues before they affect log collection.
• Automate deployments, configuration and rollouts across many servers using Ansible (or equivalent) and CI/CD pipelines.
• Write Python or Bash scripts to automate operations, health checks and maintenance.
• Provide production support and root-cause analysis for incidents, and document fixes and runbooks.
• Collaborate with security, infrastructure and application teams to onboard new log sources.

ABOUT YOU

• Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, Systems Engineering, or a related technical discipline.
• 7+ years of total professional experience, with 4-5+ years of production Elastic Stack experience (ingestion, indexing, monitoring, analytics), including hands-on Logstash .
• Strong hands-on Kafka experience.
• Proficient Linux administration (RHEL and/or Ubuntu): system capacity and performance checks, permissions, services, and network and process troubleshooting.
• Python or Bash scripting , minimum 2 years.
• Ansible (or equivalent) and CI/CD pipeline experience.
• Proven production support background in both virtual and physical environments.
• Familiarity with security log sources (Windows Event Logs, syslog, firewalls such as FortiGate and Palo Alto) and agents (Beats, Elastic Agent).
• Knowledge of ECS and Elastic detection rules.
• Rigorous and detail-oriented, with strong analytical and problem-solving skills.
• Self-driven and able to take ownership with little supervision.
• Comfortable managing multiple priorities in a production environment.
• A clear communicator and a collaborative team player, proactive and eager to up-skill.

WHY AMARIS?

• An international community bringing together 110+ different nationalities
• An environment where trust has a central place: 70% of our key leaders started their careers at the first level of responsibilities
• A robust training system with our internal Academy and 250+ available modules
• A vibrant workplace that frequently gathers for internal events (afterworks, team buildings, etc.)
• At Mantu, sustainability is part of everything we do. You’ll have the opportunity to turn your ideas into action and make a tangible impact. Every day, our teams bring our ESG commitments to life, from reducing our footprint to driving positive change within our communities. Through our WeCare Together program, you’ll be empowered to design and lead projects that create real social or environmental impact, with the company’s full support.

Amaris Consulting is proud to be an equal-opportunity workplace. We are committed to promoting diversity within the workforce and creating an inclusive working environment. For this purpose, we welcome applications from all qualified candidates regardless of gender, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics.