About the role
August Schell is looking for an Elasticsearch Engineer to join our team in support of a cybersecurity, network architecture, and mission support role with our DoD customer. The engineer will be part of a project team responsible for working with clients and peers and building a high performing system using Elastic.
Individuals in this role must be able work hybrid and go on site at Fort Meade as requested.
Responsibilities Include:
* Demonstrate expertise with Elastic Stack including designing and implementing solutions to aggregate logs from multiple systems.
* Extensive experience installing, configuring, upgrading, maintaining and troubleshooting Elastic Stack components
* Proficient in developing Kibana visualizations, dashboards, and alerting capabilities to support threat hunting, security monitoring, and data analytics
* Strong knowledge of log ingestion pipelines, Elastic Common Schema (ECS) formatting, and Logstash plugins and filters.
* Experience maintaining and troubleshooting Elastic infrastructure and proactively identifying and resolving anomalous behavior prior to escalation
* Skilled in deploying and managing systems in compliance with federal security requirements and standards.
* Proven ability to lead engineering initiatives, collaborating with vendors to determine best practices for system architecture, deployment, and ongoing maintenance.
* Solid understanding of system integrations, dependencies, and interactions across complex enterprise environments.
* Experience utilizing Cribl in the onboarding and normalization process
Requirements:
* Two (2) years of overall experience in a DoD or Federal IT environment
* Have an active Top Secret
* DoD 8570 IAM/IA Technical (IAT) Level II certification
* Strong written and verbal communication skills for reporting assessment findings.
Stand out with:
* Bachelor's degree (IT-related field preferred)
* Experience with Docker, Kubernetes, Elastic Cloud on Kubernetes (ECK) and cloud containerization Knowledge of Linux/UNIX and networking
* Familiarity with NIFI, Kafka, Confluent, McAfee, Tenable