> Markdown version of [/jobs/ext/1842909-elastic-data-engineer](https://www.wearedevelopers.com/jobs/ext/1842909-elastic-data-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Elastic Data Engineer - **Company:** JCS Solutions LLC - **Location:** Adelphi, MD, United States - **Experience:** Experienced - **Salary:** $135,000.0 - $162,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Amazon Web Services, Data Analysis, Bash Shell, Cloud Computing, Encodings, Databases, Data Validation, Data Deduplication, Information Engineering, Data Governance, Extract Transform Load (ETL), Data Loss, Elasticsearch, Event Logging, Intrusion Detection and Prevention, JSON, Python (Programming Language), Linux System Administration, Lookup Table, Meta-Data Management, Parsing, Windows PowerShell, Queueing Systems, Cloud Services, Logstash, Zero Trust Network Access, Application Data, Security Information and Event Management, SQL Databases, Data Streaming, Syslog, Unstructured Data, Software Vulnerability Management, Extensible Markup Language (XML), Data Logging, Data Processing, Scripting, Transport Layer Security, Data Classification, Software Troubleshooting, Git, Kubernetes, Data Analytics, Real Time Data, Apache Kafka, Kibana, Restful APIs, Software Version Control, Data Pipelines, Docker - **Published:** July 31, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=2e6285f673863852 ## About the Role * Strong knowledge of Elasticsearch, Logstash, Kibana, Elastic Agent, Fleet, and Beats. * Experience developing high-volume logging or cybersecurity-telemetry pipelines. * Knowledge of Elasticsearch clusters, indices, shards, mappings, templates, and data streams. * Experience with Logstash filters, ingest pipelines, JSON, XML, CSV, syslog, and Windows event data. * Experience with Index Lifecycle Management, retention, rollover, and data-tiering strategies. * Linux administration and scripting experience using Python, PowerShell, or Bash. * Experience with REST APIs, Git, networking, TLS, certificates, and access controls. * Understanding security monitoring, threat detection, incident response, and vulnerability management. * Strong troubleshooting, documentation, and communication skills. * Requires a BS with 4-8 years of prior relevant experience or Master's with 2-6 years of prior relevant experience. * Active or obtainable DOD TS/SCI clearance. How will you wow us: * Experience supporting SOC, CSSP, SIEM, or enterprise observability platform. * Experience with Elastic Security, AWS, AWS GovCloud, Kafka, Docker, or Kubernetes. * Familiarity with Zero Trust, RMF, DISA STIGs, and federal logging requirements. * Elastic, AWS, Security+, GIAC, or CISSP certification. ## Description JCS Solutions' C5ISR Center CSSP Cloud Operations Team is seeking an Elastic Data Engineer to design, maintain, and optimize enterprise data-ingestion and analytics capabilities within a Department of Defense cybersecurity environment. The engineer will manage Elastic Stack data pipelines, integrate cybersecurity and operational telemetry, improve data quality and platform performance, and support dashboards, alerting, threat detection, incident response, and compliance reporting. This is a hybrid position requiring onsite attendance several days each month to support team collaboration, meetings, and business needs., * Collect, ingest, transform, normalize, enrich, and route structured and unstructured data from multiple enterprise sources. * Create and maintain standardized data schemas, field mappings, naming conventions, and data models. * Parse complex log formats including JSON, XML, CSV, syslog, Windows Event Logs, and custom application data. * Develop data-quality controls to identify missing, duplicated, malformed, delayed, or inconsistent records. * Perform data validation, reconciliation, cleansing, deduplication, and enrichment. * Map source data to Elastic Common Schema or other approved enterprise data standards. * Build reusable parsing rules, transformation logic, lookup tables, and enrichment workflows. * Integrate data from REST APIs, databases, message queues, cloud services, files, and third-party security platforms. * Support high-volume, near-real-time data ingestion and event-processing requirements. * Analyze data flows to identify ingestion gaps, bottlenecks, field inconsistencies, and source-system issues. * Collaborate with cybersecurity analysts and detection engineers to ensure data supports threat hunting, alerting, incident response, and reporting use cases. * Document data sources, schemas, transformations, lineage, dependencies, retention requirements, and onboarding procedures. * Support data governance, metadata management, data classification, retention, and access-control requirements. * Use Python, SQL, PowerShell, Bash, or similar tools for data processing, automation, validation, and troubleshooting. * Apply Git-based version control and testing practices to data pipelines, schemas, and transformation logic. * Troubleshoot data loss, timestamp issues, encoding problems, mapping conflicts, parsing failures, and ingestion delays. * Work with cloud and infrastructure teams to onboard data sources. * Maintain strong knowledge of cybersecurity telemetry, data engineering principles, ETL/ELT processes, APIs, and large-scale event data. ## Related Videos - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [From Messy Queries to Scalable Systems - How Data Engineering actually works](https://www.wearedevelopers.com/videos/100203-from-messy-queries-to-scalable-systems-how-data-engineering-actually-works) - [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Making Data Warehouses Fast: A Developer’s Story](https://www.wearedevelopers.com/magazine/107-making-data-warehouses-fast-a-developer-s-story) - [Top Big Data Technologies That You Need to Know](https://www.wearedevelopers.com/magazine/108-top-big-data-technologies-that-you-need-to-know) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)