Senior Elastic Engineer

Role Overview The Senior Elastic Engineer leads the design, optimization, and strategic evolution of Elastic environments that support advanced security and observability use cases. This role combines deep hands-on engineering with architectural leadership, with responsibility for scalability, resilience, platform standards, and complex solution design across enterprise environments. Key Responsibilities • Lead the architecture, design, and continuous improvement of enterprise Elastic environments • Define and enforce best practices for scalability, resilience, lifecycle management, and operational excellence • Support and optimize platform strategy for high availability, retention, performance, and cost efficiency • Lead root cause analysis and resolution of complex platform, pipeline, and data issues • Design and govern ingestion pipelines, data models, and normalization standards aligned to ECS • Build and optimize advanced Logstash and ingest pipelines for high-volume and diverse data sources • Lead large-scale Elastic Agent and Fleet deployments with strong operational standards for endpoint and observability use cases • Drive integration of diverse security and observability telemetry sources with high data quality • Design and optimize AWS-backed Elastic infrastructure, including S3, compute, networking, IAM, and related cloud services • Design production grade CI/CD pipelines. • Leverage AWS services for snapshot strategy, retention, archival, and broader platform operations • Monitor and optimize cost drivers across compute, storage, ingestion, and retention • Automate infrastructure provisioning and configuration using infrastructure-as-code • Design advanced Kibana dashboards, detection workflows, observability views, and executive reporting • Partner with detection engineering, infrastructure, and leadership teams to define requirements and roadmap priorities • Identify opportunities to improve detection coverage, platform reliability, and observability maturity • Mentor engineers, review technical designs, and contribute to platform roadmap planning • Elastic Certified Engineer • Elastic Certified Observability Engineer • 5+ years of hands-on experience with enterprise Elastic environments • Strong experience with Elastic Security and Elastic Observability • Expert-level knowledge of Elasticsearch architecture, including indexing, sharding, replication, search, and query performance • Expertise in Elasticsearch template optimization and relevance fine-tuning. • Proven experience operating large, highly available Elasticsearch clusters in production • Deep expertise in capacity planning, cluster optimization, scaling, and platform hardening • Advanced proficiency in Elasticsearch Query DSL and search optimization • Strong programming and automation skills in Python, Java, Ruby, or similar languages • Proven cybersecurity background with experience in threat detection, attack techniques, telemetry, and defensive operations • Deep knowledge of Elastic security controls, including RBAC, encryption, detection rules, machine learning, and AI Assistant capabilities • Extensive experience with data parsing, enrichment, and transformation using GROK, DISSECT, Logstash, and Elasticsearch ingest pipelines • Experience with advanced detections, Watchers, dashboards, and observability views • Strong experience supporting Elastic deployments in AWS-backed environments • Working knowledge of AWS services, including S3, compute, networking, IAM, monitoring, and cost management • Strong Linux administration skills in distributed data platform environments • Demonstrated ability to lead technical initiatives and communicate effectively across engineering and business stakeholders Preferred Qualifications • Experience leading platform modernization or migration initiatives • Experience designing multi-cluster or multi-region Elastic architectures • Experience building reusable engineering standards, patterns, and operational playbooks • Experience mentoring engineers in enterprise platform teams