Elastic Engineer

Job Overview Elastic Engineer—work with clients and peers to build a high‑performing system using Elastic to aggregate logs from many systems into a single common schema. Leverage Elastic Common Schema (ECS) formatted fields, create quality visualizations and alerts that analysts can use for threat hunting, and maintain infrastructure to identify problems or anomalous behavior before they become larger issues that can be actioned on. Responsibilities Design, deploy, and maintain Elastic Stack components (Elasticsearch, Logstash, Kibana). Build high‑quality Kibana visualizations and dashboards. Create log pipelines and interpret logs to determine information, converting raw logs into ECS formatted documents. Configure and manage Logstash plugins, filters, regular expressions, and grok patterns. Implement best practices for deployment, maintenance, and security of the system architecture. Collaborate with vendors to ensure architecture meets designated security requirements. Required Qualifications Experience with Elastic Stack (Elasticsearch, Logstash, Kibana), including installation, configuration, maintenance, upgrades, and troubleshooting. Proficiency in building Kibana visualizations and dashboards. Knowledge of cryptography protocols and standards (TLS, mTLS, hashing algorithms, PKI). Familiarity with federal compliance standards (NIST 800‑53, FIPS, STIG, FedRAMP). Secret clearance required. High school diploma or GED. Preferred Qualifications Experience with Docker, Kubernetes, and Elastic Cloud on Kubernetes (ECK). Experience with NiFi, Kafka, Confluent. Experience with Office 365 and Teams. Experience interacting with tools via RDP, web‑based UI, SSH, and CLI. Experience in DoD, Intelligence Community, or other regulated environments. Knowledge of Elastic Index Lifecycle Management (ILM), Linux/UNIX, networking protocols, system interactions, and Zero Trust Architecture (ZTA) principles. Clearance Requirements Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required. EEO Statement All qualified applicants will receive consideration for employment without regard to disability, veteran status, or any other status protected by applicable federal, state, local, or international law. #J-18808-Ljbffr Booz Allen Hamilton