Job Description
Insight Global is looking to hire a Sr. Elastic Engineer for one of our clients supporting a modernization effort at Scott Air Force Base, IL. This individual will play a key role in migrating enterprise security logging and observability capabilities from Splunk to Elastic within a secure DoD environment. On a day-to-day basis, this engineer will lead Elastic architecture efforts, Kubernetes-based deployments, and custom data ingestion solutions while partnering with infrastructure, security, and engineering teams to build scalable, resilient, and mission-critical logging platforms.
Responsibilities Include:
• Design, deploy, and maintain enterprise Elastic Stack environments supporting security logging, search, and observability initiatives.
• Lead the migration of logging and monitoring capabilities from Splunk to Elastic while minimizing disruption to operational workloads.
• Build and implement custom data ingestion pipelines to support enterprise security and operational data sources.
• Deploy and administer Elastic Cloud on Kubernetes (ECK) environments and manage Kubernetes operators supporting Elastic workloads.
• Configure and optimize Index Lifecycle Management (ILM) policies, data retention strategies, and storage architectures.
• Monitor and improve Elastic cluster performance, scalability, availability, and reliability across production environments.
• Troubleshoot complex issues involving Elastic infrastructure, Kubernetes platforms, and distributed systems.
• Integrate Elastic solutions with enterprise security tools, SIEM capabilities, and observability platforms.
• Develop automation, operational standards, and best practices for Elastic platform administration and support.
• Maintain technical documentation, deployment standards, architectural designs, and operational procedures.
Compensation:
$186,000 to $191,667 per year annual salary.
Exact compensation may vary based on several factors, including skills, experience, and education.
Benefit packages for this role may include healthcare insurance offerings and paid leave as provided by applicable law.
We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.
Required Skills & Experience
• Active Secret clearance
• Deep, hands-on expertise with Elastic Stack (Elasticsearch, Kibana, Logstash, Beats, Fleet)
• Strong scripting and automation skills (Python, PowerShell, Bash, etc.)
• Experience deploying and administering Elastic Cloud on Kubernetes (ECK) in production environments
• Strong Kubernetes experience, including managing complex multi-node environments
• Experience building, deploying, and scaling Elastic clusters in enterprise environments
• Understanding of ECK operators, Helm charts, and containerization technologies such as Docker
• Solid understanding of observability, logging, metrics, and distributed systems.
• Experience designing, deploying, and optimizing production-scale Elastic environments.
• Strong Linux/Unix, networking, and cloud platform knowledge (AWS, Azure, GCP).
Nice to Have Skills & Experience
• Familiarity with SIEM concepts, Elastic Security, or other SIEM/EDR platforms.
• Experience with containerization and orchestration (Kubernetes, Docker, OpenShift).
• Experience with automation/orchestration tools (Terraform, Ansible, CI/CD pipelines).
• Familiarity integrating Elastic with endpoint telemetry or cloud-native tools.
• Certifications (preferred):
o Elastic Certified Engineer, Elastic Security Engineer, Elastic Observability Engineer
o AWS Certified Solutions Architect or equivalent
o Docker Certified Associate (DCA)
o Certified Kubernetes Administrator (CKA)
o HashiCorp Certified: Terraform Associate
o Red Hat Certified Specialist in Ansible Automation
• Prior experience in DevOps, Site Reliability Engineering, or cloud platform roles is a plus.
• Experience designing dashboards, observability frameworks, and large-scale workflows.
• Experience with the below:
o Platforms: On-premises, Public Cloud (AWS, Azure, GCP), GovCloud, hybrid deployments
o Containerization: Kubernetes, Docker, OpenShift
o Automation: Terraform, Ansible, CI/CD pipelines, Docker
o Integrations: SIEMs (Splunk, Elastic Security), endpoint/security telemetry (CrowdStrike), cloud-native services
o Competing Technologies:
o Splunk, OpenSearch, Solr, Lucene, Graylog, Datadog, Elastic Cloud alternatives
Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.