Elastic Engineer

Everforth ECS Federal is looking for a motivated Junior to Mid-Level Elastic Engineer to support the design, deployment, and maintenance of secure, scalable Elasticsearch solutions. This role will focus on Elastic Security features, ingestion pipeline development, and compliance with Veterans Affairs and federal cybersecurity standards. The ideal candidate will have foundational Elasticsearch and cybersecurity skills, a willingness to learn advanced concepts, and the ability to work closely with senior engineers in a collaborative environment. Key Responsibilities Assist in implementing and maintaining Elastic Security features (e.g., Role-Based Access Control, TLS encryption) under senior engineer guidance. Support analysis of cybersecurity events, system changes, and performance issues, applying basic cybersecurity and privacy principles. Help develop and refine ingestion pipelines, parsers, enrichment workflows, and telemetry normalization strategies. Participate in the deployment and configuration of Elasticsearch clusters across VA enclaves and cloud environments. Troubleshoot ingestion issues, performance slowdowns, and observability platform alerts with escalation support. Contribute to ATO, RMF, compliance validation, and continuous monitoring activities. Assist in creating technical documentation, operational procedures, and training materials. Provide Tier 2–3 troubleshooting support and learn from senior technical team members. Salary Range: $100,000 - 130,000 General Description of Benefits Must be a U.S. citizen eligible to obtain and maintain a Tier 5 (critical sensitive national security) background investigation. Minimum 2 years of experience supporting enterprise logging, SIEM, observability, or cybersecurity engineering platforms Minimum 2 years of hands-on Elastic Stack engineering experience Minimum 2 years working with languages like Python, C++, JavaScript, and PowerShell to automate tasks, analyze malware and develop security tools and practices Exposure to large-scale data ingestion, telemetry normalization, or analytics platforms. Basic understanding of incident handling methodologies for log data. Familiarity with Linux administration, scripting, and automation. Strong problem-solving skills and eagerness to learn new technologies. Good written and verbal communication skills.