Elastic Search Engineer

Key Responsibilities
Platform Administration
• Administer and maintain large-scale Elasticsearch clusters.
• Monitor cluster health, performance, storage utilization, and node availability.
• Configure and manage Index Lifecycle Management (ILM), snapshots, backups, and retention policies.
• Perform Elasticsearch upgrades, patching, and capacity planning.
• Manage Kibana, Fleet Server, Logstash, and Elastic Agent infrastructure.
Data Integration & Onboarding
• Integrate new data sources into Elastic from:
Windows & Linux systems
Cloud platforms (Azure, AWS, GCP)
Security tools (SentinelOne, Proofpoint, Zscaler, Vectra, CrowdStrike, etc.)
Network and application logs
Databases and custom APIs
• Develop and maintain Logstash pipelines and ingest pipelines.
• Normalize data using ECS (Elastic Common Schema).
Search & Analytics Development
• Develop advanced Elasticsearch queries and aggregations.
• Create dashboards, reports, alerts, and visualizations in Kibana.
• Build security and operational monitoring use cases.
• Design and implement observability solutions using logs, metrics, and traces.
• Utilize ES|QL and Kibana Lens for analytics and reporting.
Performance Optimization
• Tune cluster performance for indexing and search workloads.
• Optimize shard allocation, index templates, and mappings.
• Troubleshoot ingestion bottlenecks and search latency issues.
• Analyze JVM, heap memory, and storage utilization.
Security & Access Management
• Implement RBAC and Kibana role management.
• Configure SSO/SAML integrations
• Manage user onboarding, access reviews, and governance.
• Support security analytics and SIEM use cases.
Automation & DevOps
• Automate deployment and management tasks using:
Python
Shell scripting
Ansible
Terraform
• Support Infrastructure-as-Code and CI/CD practices.
• Develop reusable operational and monitoring scripts.
Support & Troubleshooting
• Resolve platform incidents and service requests.
• Participate in root cause analysis (RCA) activities.
• Collaborate with vendors and support teams for escalations.
• Maintain operational runbooks and technical documentation.

Preferred Qualifications
• Elastic Certified Engineer (ECE)
• Elastic Certified Analyst
• Elastic Observability Certification

interested candidates send resumes to asan.a@quesscorp.com