Job Description

Posted 1 hour ago

Elastic SME / Elastic Stack Engineer
4 days insite 1 day home
Great opportunity for an experienced Elastic SME to design, implement, optimise and support a secure, enterprise-scale on-premises Elastic Stack environment. The role is working in a Defence and National Security environment; as such, you MUST be willing and able ot under take DV security clearance (you must be a British citizen and have lived in the UK for the last 10 years)
You’ll take technical ownership of the Elastic platform, supporting Elasticsearch, Kibana, Logstash, Beats, Elastic Agent, Fleet, Elastic Security (SIEM) and Elastic Observability across a complex enterprise estate.
 
Key responsibilities:

Design and support resilient, highly available on-premises Elastic Stack environments
Administer and optimise large-scale Elasticsearch clusters
Deliver Elastic Security (SIEM) and Elastic Observability solutions
Build ingestion pipelines using Logstash, Elastic Agent and Beats
Configure Kibana dashboards, visualisations, RBAC and reporting
Implement TLS, PKI, LDAP/Active Directory, SAML and platform hardening
Optimise cluster performance, JVM, shards, ILM and storage
Automate deployments and operational tasks using PowerShell, REST APIs, Python and/or Ansible
Provide 3rd/4th line support, troubleshooting and RCA
Produce HLDs, LLDs, SOPs, runbooks and DR documentation 
Essential experience:

Enterprise on-premises Elastic Stack experience
Strong Elasticsearch, Kibana and Logstash experience
Strong Elastic Agent, Beats and Fleet experience
Strong Elastic Security (SIEM) and Elastic Observability experience
Experience managing large, highly available Elasticsearch clusters
Splunk experience
Strong automation experience 
You must have proven experience administering enterprise on-premises Elastic Stack environments, including Elasticsearch clusters, Elastic Security (SIEM) and Elastic Observability.
This role particularly suits an Elastic SME / Elastic Stack Engineer with extensive Elasticsearch, Kibana, Logstash, Elastic Agent, Fleet, Elastic Security and Elastic Observability experience