> Markdown version of [/jobs/ext/4646551-elastic-data-engineer](https://www.wearedevelopers.com/jobs/ext/4646551-elastic-data-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Elastic Data Engineer

- **Company:** JCS Solutions LLC
- **Location:** Hyattsville, MD, United States
- **Experience:** Experienced
- **Salary:** $148,000 - $162,000
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Amazon Web Services, Data Analysis, Bash Shell, Cloud Computing, Cyber Security, Databases, Data Deduplication, Information Engineering, Extract Transform Load (ETL), Data Retention, Elasticsearch, Event Logging, Intrusion Detection and Prevention, JSON, Python (Programming Language), Linux System Administration, Parsing, Windows PowerShell, Queueing Systems, Cloud Services, Logstash, Zero Trust Network Access, Application Data, Security Information and Event Management, SQL Databases, Data Streaming, Syslog, Unstructured Data, Software Vulnerability Management, Extensible Markup Language (XML), Data Logging, Scripting, Transport Layer Security, Data Ingestion, Software Troubleshooting, Git, Kubernetes, Real Time Data, Apache Kafka, Data Management, Kibana, Restful APIs, Docker
- **Published:** November 9, 2026
- **Apply:** https://www.juju.com/job/16_a3650a571

## About the Role

* Strong experience with the Elastic Stack, including Elasticsearch, Logstash, Kibana, Elastic Agent, Fleet, and Beats.
 * Experience designing and supporting high-volume logging, cybersecurity telemetry, and data-ingestion pipelines.
 * Knowledge of Elasticsearch architecture, including clusters, indices, shards, mappings, templates, data streams, and lifecycle management (ILM).
 * Experience processing JSON, XML, CSV, syslog, Windows Event Logs, and other log sources using Logstash filters and ingest pipelines.
 * Experience implementing data retention, rollover, and tiered-storage strategies.
 * Linux administration and scripting experience using Python, PowerShell, Bash, or similar languages.
 * Knowledge of REST APIs, Git, networking, TLS/certificates, and access-control mechanisms.
 * Understanding of security monitoring, threat detection, incident response, vulnerability management, with strong troubleshooting, documentation, and communication skills.
 * BS degree with 4-8 years of relevant experience, or MS degree with 2-6 years of relevant experience.
 * Active DoD TS/SCI clearance or ability to obtain one.

How will you wow us:

 * Experience supporting SOC, CSSP, SIEM, or enterprise observability platform.
 * Experience with Elastic Security, AWS, AWS GovCloud, Kafka, Docker, or Kubernetes.
 * Familiarity with Zero Trust, RMF, DISA STIGs, and federal logging requirements.
 * Elastic, AWS, Security+, GIAC, or CISSP certification.

## Description

JCS Solutions' C5ISR Center CSSP Cloud Operations Team is seeking an Elastic Data Engineer to support enterprise cybersecurity operations within a Department of Defense environment. In this role, you will design, maintain, and optimize data-ingestion, analytics, and monitoring capabilities using the Elastic Stack to help drive threat detection, incident response, compliance reporting, and operational visibility.
You will work with cybersecurity and operational telemetry from multiple sources, ensuring data quality, platform performance, and actionable insights for security analysts and stakeholders., * Design and maintain data pipelines for cybersecurity, cloud, network, endpoint, application, identity, and infrastructure telemetry.

 * Collect, ingest, transform, normalize, enrich, and route structured and unstructured data from enterprise sources.
 * Develop and maintain data schemas, mappings, standards, and models, including Elastic Common Schema (ECS) alignment.
 * Parse and process complex log formats, including JSON, XML, CSV, syslog, Windows Event Logs, and custom application data.
 * Implement data quality controls, validation, cleansing, reconciliation, deduplication, and enrichment processes.
 * Build reusable parsing, transformation, and enrichment workflows and integrate data from APIs, databases, cloud services, message queues, files, and security platforms.
 * Support high-volume, near-real-time data ingestion and event processing while troubleshooting ingestion, mapping, parsing, and data-quality issues.
 * Analyze data flows to identify gaps, bottlenecks, inconsistencies, and source-system issues.
 * Collaborate with cybersecurity analysts, detection engineers, and infrastructure teams to onboard data sources and support threat hunting, alerting, incident response, and reporting.
 * Document data sources, schemas, lineage, dependencies, governance, retention, classification, and onboarding procedures.
 * Use Python, SQL, PowerShell, Bash, Git, and testing practices to support data engineering, automation, validation, and troubleshooting.
 * Maintain expertise in cybersecurity telemetry, ETL/ELT processes, APIs, and large-scale event-data management.