Senior Elastic Engineer

Everforth ECS Federal is seeking a Senior Elastic Engineer to work remotely .

Everforth ECS Federal is seeking a Senior Elastic Engineer to support enterprise observability modernization and migration initiatives within a federal healthcare environment supporting the U.S. Department of Veterans Affairs.

The Senior Elastic Engineer serves as a subject matter expert for the design, implementation, and optimization of the Elastic Stack (Elasticsearch, Logstash, Kibana, Beats) in support of Department of Veterans Affairs (VA) enterprise networks and cybersecurity operations. This role is critical for establishing robust log aggregation, data analytics, and real-time dashboarding to enhance situational awareness, threat hunting capabilities, and overall cybersecurity posture across VA information systems.

Required Skills

• Must be a US citizen with ability to obtain and maintain a Tier 5 (T5) background investigation (Public Trust Level 5)
• Minimum 7 years of experience supporting enterprise logging, SIEM, observability, or cybersecurity engineering platforms
• Minimum 5 years of hands-on Elastic Stack engineering experience
• Develop and maintain Logstash pipelines and Beats configurations to efficiently route and process high-volume network, security, and application data
• Monitor cluster health and optimize indices, shards, and queries for maximum performance and cost-effectiveness
• Implement and maintain Elastic Security features (e.g., Role-Based Access Control, TLS encryption) ensuring compliance with VA Handbook 6500 and federal security standards
• Analyze operational impacts associated with cybersecurity events, system changes, and platform performance issues with the ability to apply cybersecurity and privacy principles to organizational requirements
• Develop and optimize ingestion pipelines, parsers, enrichment workflows, and telemetry normalization strategies
• Architect, engineer, and deploy highly available and scalable Elasticsearch clusters across VA enclaves and cloud environments.
• Troubleshoot ingestion failures, performance bottlenecks, and observability platform issues
• Support Authority to Operate (ATO), Risk Management Framework (RMF), compliance validation, and continuous monitoring activities
• Develop technical documentation, operational procedures, and knowledge transfer materials
• Provide Tier 3 troubleshooting and act as a technical mentor for junior engineers

Salary Range: $140,000-180,000 General Description Of Benefits Required Skills

• 7+ years of experience with a Bachelor’s degree in Cybersecurity, Engineering or Computer Science, and/or 10+ years of equivalent experience
• One or more related certifications preferred:
• Elastic Certified Engineer or Elastic Certified Observability Engineer
• AWS Certified Security or Microsoft Azure Security Engineer
• Security+ or CSSIP
• Equivalent cybersecurity or cloud certificates

Desired Skills

• Experience supporting large-scale data ingestion, telemetry normalization, and analytics platforms
• Experience in incident handling methodologies (applied to logs in Elasticsearch)
• Experience with Linux administration, scripting, automation, and cloud-native deployments
• Experience with AWS GovCloud, Azure Government, Kubernetes, or containerized environments preferred
• Familiarity with MITRE ATT&CK, SIEM operations, and cybersecurity monitoring concepts
• Knowledge of network security architecture and protocols, cybersecurity and privacy principles and organizational requirements
• Knowledge of software engineering and development methodologies
• Excellent written, presentation, and stakeholder engagement skills
• Ability to support 10-15% travel

#EverforthECS1

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law. Everforth ECS is the federal segment of Everforth , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We Value

• Attracting and developing top talent and high-performing teams
• Fostering a culture that is engaging, accountable, and mission-driven

Meet the challenge. Make a difference with Everforth ECS!