> Markdown version of [/jobs/ext/566727-senior-elastic-stack-data-integration-engineer-dod](https://www.wearedevelopers.com/jobs/ext/566727-senior-elastic-stack-data-integration-engineer-dod). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Elastic Stack Data Integration Engineer - DOD - **Company:** INNOVIM Defense Services, LLC - **Location:** Colorado Springs, CO, United States (Remote available) - **Experience:** Expert - **Salary:** $130,000.0 - $150,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Amazon Web Services, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Engineering, Configuration Management, Cyber Security, Data Auditing, Data Validation, Data Cleansing, Information Engineering, Data Integration, Data Normalization, Software Debugging, Elasticsearch, Networking Hardware, Intrusion Detection and Prevention, JSON, Python (Programming Language), Linux System Administration, Network Protocols, Parsing, Performance Tuning, Windows PowerShell, Redis, Reliability Engineering, Cloud Services, Logstash, Ansible, Message Oriented Middleware, Security Information and Event Management, Data Streaming, Systems Integration, Strategies of Testing, Management of Software Versions, Data Logging, Data Processing, Scripting, Enterprise Software Applications, Load Balancing, Data Ingestion, Firewalls (Computer Science), Apache Kafka, Kibana, Terraform, Network Server, Software Version Control, Data Pipelines - **Published:** June 5, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=ae8947e7fba3d20b ## About the Role Do you have experience in Windows?, * Demonstrated ability to work independently, drive pipeline architecture decisions, and mentor junior engineers. * Strong documentation, workflow diagramming, and communication skills. * Deep command of Logstash architecture, patterns, and performance optimization. * Mastery of parsing, enrichment, normalization, and ECS alignment. * Strong understanding of network protocols, logging patterns, and telemetry generation from enterprise systems. * Advanced troubleshooting skills across data ingestion, pipeline logic, and Elastic Stack processing layers. * Capability to design scalable, HA ingestion workflows with clear operational boundaries. * Ability to conduct data modeling, schema design, and transformation mapping. * Effective at interfacing with multiple teams, gathering requirements, and aligning pipeline designs with SIEM analytics needs. * Focused on reliability, maintainability, and observability across all pipeline components. * Strong attention to detail and a disciplined approach to documentation, versioning, and configuration management., * Must have 10, or more, years of general (full-time) work experience. May be reduced with completion of advanced education * Must have 5, or more, years of experience in log ingestion, data engineering, or SIEM pipeline development. * Must have 2, or more, years of experience in a lead or senior role, mentoring and guiding other team members. * Must have a strong background in Elastic Stack components (Elasticsearch, Kibana, Beats, Elastic Agent). * Must have experience with data ingestion, processing, and enrichment techniques. * Must have hands-on experience ingesting, processing, and normalizing diverse log types (Windows events, syslog, firewall logs, cloud telemetry, security tooling). * Must be proficient with Linux administration, system-level debugging, and CLI-based operations. * Must have a DoD 8570.01-M IAT Level II certification with Continuing Education (CE) - (CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP) * Must have an active DoD Secret Security Clearance * Must be able to obtain an active DoD Top Secret Security Clearance Desired Requirements: * Be an Elastic Certified Engineer or have relevant Elastic Stack certifications. * Have strong experience integrating Kafka, Redis, or other message bus technologies into ingestion workflows. * Be proficient with scripting in Python, Bash, or PowerShell for automation and data validation. * Have experience designing geo-distributed or multi-cluster ingestion architectures. * Have knowledge of threat intelligence ingestion, correlation data enrichment, and advanced ECS mapping. * Have experience with CI/CD pipelines, GitOps workflows, or Infrastructure-as-Code (Terraform, Ansible). * Be familiar with data quality assurance frameworks and pipeline testing methodologies. * Have knowledge of cloud-native logging architectures (AWS Firehose, Azure Event Hub, GCP Logging). ## Description The Senior Elastic Stack Data Integration Engineer will serve as the primary technical authority for designing, building, and maintaining data ingestion pipelines supporting Elastic SIEM. This role focuses on creating scalable, resilient Logstash architectures; developing advanced pipeline logic; normalizing, enriching, and transforming security telemetry; and ensuring reliable delivery of high-fidelity data to Elasticsearch., * Architect, build, and maintain Logstash pipelines to ingest and transform logs from diverse systems, including network devices, servers, cloud services, and security platforms. * Implement parsing, grok patterns, JSON transformations, conditional routing, enrichment logic, and ECS mapping. * Optimize pipeline performance, resiliency, and scalability (e.g., persistent queues, pipeline workers, memory tuning, load balancing). * Ensure all ingested data aligns to ECS (Elastic Common Schema) or internal schema requirements. * Implement data enrichment workflows (GeoIP, threat intel lookups, metadata injection). * Validate data completeness, integrity, and fidelity across ingestion flows. * Maintain and optimize Logstash clusters, including version management, scaling, tuning, and high-availability configurations. * Manage integrations with Beats, Elastic Agent, Kafka, syslog endpoints, and custom data collectors. * Monitor ingestion throughput, latency, and error rates; implement proactive alerting and troubleshooting processes. * Create and maintain technical documentation, including pipeline diagrams, data flow maps, runbooks, and schema references. * Establish enterprise standards for parsing, enrichment, normalization, and ingestion patterns. * Support internal and external audits by documenting data handling flows and pipeline logic. * Work closely with SIEM integration engineers to align pipelines with customer environments and logging requirements. * Partner with detection engineering teams to ensure data supports analytic coverage and rule development. * Collaborate with infrastructure and platform operations for deployment, scaling, and reliability engineering. ## Related Videos - [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies) - [Debug a Kubernetes Operator](https://www.wearedevelopers.com/videos/487-debug-a-kubernetes-operator) - [Reducing LLM Calls with Vector Search Patterns - Raphael De Lio (Redis)](https://www.wearedevelopers.com/videos/1714-reducing-llm-calls-with-vector-search-patterns-raphael-de-lio-redis) - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [Add Location-based Searching to Site with ElasticSearch](https://www.wearedevelopers.com/videos/77-add-location-based-searching-to-site-with-elasticsearch) - [Accelerating Authentication Architecture: Taking Passwordless to the Next Level](https://www.wearedevelopers.com/videos/733-accelerating-authentication-architecture-taking-passwordless-to-the-next-level) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)