Splunk ES Engineer

CCS Global Tech is a rapidly growing Information Technology company with a diverse portfolio of technology products and services and a large network of industry partnerships. With over 22 years of being a successful business with a global talent pool and presence, OpenKyber is a certified Microsoft Gold Partner and specializes in delivering expert Microsoft based solutions for technical and business needs. We have been recognized by Inc. 500 Magazine as one of the fastest growing small companies in the Unites States. we are a Tier 1 vendor for the City and County of San Francisco for Cloud Services, Staffing Services and Training Services. For this multi-year opportunity with a diverse set of needs to address, we are currently focusing on establishing partnerships with individuals as well as companies who can help us enhance our overall service portfolio, cut lead times, and ultimately help us deliver successfully. We currently hold sizable Government accounts in the San Francisco bay area including City and County of San Francisco, San Mateo County, and Santa Clara County. We take great pride in our global reach and local influence. Your experience alongside our highly skilled and talented internal team who guide you along the way, offers key insights into what helps you stand out in a competitive job market. If you are a partner company, please submit resumes with contact information of your own W2 Consultants only . Submitted consultants are expected to have excellent communication skills. Sr. Elastic Engineer Scott AFB, Illinois, United States Secret Clearance $190,000 - $230,000 Job Description Client is seeking a Sr. Elastic Engineer to work in our Scott AFB, IL office. We are seeking a Sr. Elastic Engineer to join our Professional team. The ideal candidate has hands-on experience with Elastic Stack and enjoys designing, coding, and deploying complex systems. You will collaborate with engineering, DevOps, cloud, and client teams to deliver resilient, high-performance Elastic solutions while maintaining visibility into system health and operational workflows. Key Responsibilities:

• Design, deploy, and maintain Elastic Stack environments, including Elasticsearch, Kibana, Logstash, Beats, and Fleet.
• Build and optimize ingestion pipelines, index strategies, search queries, dashboards, and automation workflows.
• Write scripts, automation, and integrations (Python, PowerShell, Bash, etc.) to streamline operations, data processing, and monitoring.
• Deploy Elastic across platforms, including on-premises, public cloud (AWS, Azure, Google Cloud Platform), GovCloud, and containerized environments (Kubernetes, Docker, OpenShift).
• Leverage automation and orchestration tools such as Terraform, Ansible, CI/CD pipelines, and Docker to manage deployments and operational tasks.
• Integrate Elastic with enterprise tools such as SIEMs, Splunk, CrowdStrike, and other telemetry sources.
• Monitor system health, troubleshoot performance issues, and optimize for reliability and scalability.
• Lead design reviews, provide guidance on Elastic best practices, and support knowledge sharing across teams.
• Maintain documentation for architectures, deployment patterns, runbooks, and operational best practices.
• Stay current with Elastic features, certifications, and emerging platform capabilities.

• Splunk migration. New install: cluster install, possibly using Cribl, ECK
• Deep, hands-on expertise with Elastic Stack (Elasticsearch, Kibana, Logstash, Beats, Fleet).
• Strong scripting and automation skills (Python, PowerShell, Bash, etc.).
• Solid understanding of observability, logging, metrics, and distributed systems.
• Experience designing, deploying, and optimizing production-scale Elastic environments.
• Strong Linux/Unix, networking, and cloud platform knowledge (AWS, Azure, Google Cloud Platform).
• Ability to mentor, guide, and influence engineering teams on Elastic best practices.
• Outstanding verbal and written communication skills.
• Willingness and ability to support domestic or international on-site engagements.
• U.S. Passport required. Must have a Secret Clearance, at minimum.

• Familiarity with SIEM concepts, Elastic Security, or other SIEM/EDR platforms.
• Experience with containerization and orchestration (Kubernetes, Docker, OpenShift).
• Experience with automation/orchestration tools (Terraform, Ansible, CI/CD pipelines).
• Familiarity integrating Elastic with endpoint telemetry or cloud-native tools.
• Certifications (preferred): Elastic Certified Engineer, Elastic Security Engineer, Elastic Observability Engineer AWS Certified Solutions Architect or equivalent Docker Certified Associate (DCA) Certified Kubernetes Administrator (CKA) HashiCorp Certified: Terraform Associate Red Hat Certified Specialist in Ansible Automation
• Prior experience in DevOps, Site Reliability Engineering, or cloud platform roles is a plus.
• Experience designing dashboards, observability frameworks, and large-scale workflows.
• Experience with the below: Platforms: On-premises, Public Cloud (AWS, Azure, Google Cloud Platform), GovCloud, hybrid deployments Containerization: Kubernetes, Docker, OpenShift Automation: Terraform, Ansible, CI/CD pipelines, Docker Integrations: SIEMs (Splunk, Elastic Security), endpoint/security telemetry (CrowdStrike), cloud-native services Competing Technologies: Splunk, OpenSearch, Solr, Lucene, Graylog, Datadog, Elastic Cloud alternatives.

For applications and inquiries, contact:View email address on click.appcast.io