What are the responsibilities and job description for the Elasticsearch Engineer position at August Schell?
August Schell is looking for an Elasticsearch Engineer to join our team in support of a cybersecurity, network architecture, and mission support role with our DoD customer. The engineer will be part of a project team responsible for working with clients and peers and building a high performing system using Elastic.
Individuals in this role must be able work hybrid and go on site at Fort Meade as requested.
Responsibilities Include:
Demonstrate expertise with Elastic Stack including designing and implementing solutions to aggregate logs from multiple systems.
Extensive experience installing, configuring, upgrading, maintaining and troubleshooting Elastic Stack components
Proficient in developing Kibana visualizations, dashboards, and alerting capabilities to support threat hunting, security monitoring, and data analytics
Strong knowledge of log ingestion pipelines, Elastic Common Schema (ECS) formatting, and Logstash plugins and filters.
Experience maintaining and troubleshooting Elastic infrastructure and proactively identifying and resolving anomalous behavior prior to escalation
Skilled in deploying and managing systems in compliance with federal security requirements and standards.
Proven ability to lead engineering initiatives, collaborating with vendors to determine best practices for system architecture, deployment, and ongoing maintenance.
Solid understanding of system integrations, dependencies, and interactions across complex enterprise environments.
Experience utilizing Cribl in the onboarding and normalization process
Requirements:
Two (2) years of overall experience in a DoD or Federal IT environment
Have an active Top Secret
DoD 8570 IAM/IA Technical (IAT) Level II certification
Strong written and verbal communication skills for reporting assessment findings.
Stand out with:
Bachelor's degree (IT-related field preferred)
Experience with Docker, Kubernetes, Elastic Cloud on Kubernetes (ECK) and cloud containerization
Knowledge of Linux/UNIX and networking
Familiarity with NIFI, Kafka, Confluent, McAfee, Tenable