Job Description:

Elastic SME / Elastic Stack Engineer
4 days insite 1 day home
Great opportunity for an experienced Elastic SME to design, implement, optimise and support a secure, enterprise-scale on-premises Elastic Stack environment. The role is working in a Defence and National Security environment; as such, you MUST be willing and able ot under take DV security clearance (you must be a British citizen and have lived in the UK for the last 10 years)
You’ll take technical ownership of the Elastic platform, supporting Elasticsearch, Kibana, Logstash, Beats, Elastic Agent, Fleet, Elastic Security (SIEM) and Elastic Observability across a complex enterprise estate.
 
Key responsibilities:

• Design and support resilient, highly available on-premises Elastic Stack environments
• Administer and optimise large-scale Elasticsearch clusters
• Deliver Elastic Security (SIEM) and Elastic Observability solutions
• Build ingestion pipelines using Logstash, Elastic Agent and Beats
• Configure Kibana dashboards, visualisations, RBAC and reporting
• Implement TLS, PKI, LDAP/Active Directory, SAML and platform hardening
• Optimise cluster performance, JVM, shards, ILM and storage
• Automate deployments and operational tasks using PowerShell, REST APIs, Python and/or Ansible
• Provide 3rd/4th line support, troubleshooting and RCA
• Produce HLDs, LLDs, SOPs, runbooks and DR documentation

 
Essential experience:

• Enterprise on-premises Elastic Stack experience
• Strong Elasticsearch, Kibana and Logstash experience
• Strong Elastic Agent, Beats and Fleet experience
• Strong Elastic Security (SIEM) and Elastic Observability experience
• Experience managing large, highly available Elasticsearch clusters
• Splunk experience
• Strong automation experience

 
You must have proven experience administering enterprise on-premises Elastic Stack environments, including Elasticsearch clusters, Elastic Security (SIEM) and Elastic Observability.
This role particularly suits an Elastic SME / Elastic Stack Engineer with extensive Elasticsearch, Kibana, Logstash, Elastic Agent, Fleet, Elastic Security and Elastic Observability experience.