Full job description
Seeking an experienced ELK Stack Administrator to manage, maintain, and optimize Elasticsearch clusters in production. Responsibilities include installing, configuring, and administering Elasticsearch, Kibana, and Logstash; managing cluster operations such as index lifecycle, shard optimization, replication, backups, scaling, performance tuning, and troubleshooting; configuring Logstash pipelines; creating Kibana dashboards; implementing Observability, Monitoring, and SIEM use cases; managing security configurations including roles, TLS, and RBAC; performing upgrades, patching, and health checks; collaborating with DevOps and Infrastructure teams; ensuring high availability and disaster recovery; and using Infrastructure as Code and automation tools for deployments. Requires 5+ years experience with Elasticsearch stack administration, Linux system administration, Infrastructure as Code (Terraform, Ansible), version control (Git, Bitbucket), monitoring concepts, incident troubleshooting, and scripting (Shell or Python). Preferred experience includes Elastic Stack X-Pack, cloud integrations (AWS, Azure, GCP), Elastic Beats, and containerization (Docker, Kubernetes).
What you'll do
- Install, configure, and administer Elasticsearch, Kibana, and Logstash in production environments
- Manage Elasticsearch clusters including index lifecycle management, shard allocation and optimization, replication management, backups and restores
- Perform cluster scaling, performance tuning, and troubleshooting
- Configure and maintain Logstash pipelines and data ingestion workflows
- Create and maintain Kibana dashboards and monitoring visualizations
- Implement and support Observability, Monitoring, and SIEM use cases
- Manage security configurations including roles and users, TLS encryption, RBAC policies
- Perform stack upgrades, patching, and regular health checks
- Collaborate with DevOps, Infrastructure, and Monitoring teams
- Ensure high availability and disaster recovery readiness
- Use Infrastructure as Code (IaC) and automation tools to manage deployments and configurations
Requirements
- 5+ years of hands-on experience administering Elasticsearch, Kibana, and Logstash
- Strong understanding of Elasticsearch cluster architecture, index management, shard optimization, query performance tuning, snapshot and restore processes
- Experience with Linux system administration (RHEL / Ubuntu)
- Experience with Infrastructure as Code and automation tools: Terraform, Ansible
- Experience with version control systems: Git, Bitbucket
- Knowledge of Monitoring and Observability concepts
- Experience handling production incidents and troubleshooting
- Basic scripting skills (Shell or Python preferred)
- Understanding of SIEM and APM concepts
- Good to have: Experience with Elastic Stack X-Pack features
- Good to have: Experience integrating ELK with cloud platforms (AWS / Azure / GCP)
- Good to have: Knowledge of Elastic Beats and related components
- Good to have: Exposure to containerized environments (Docker, Kubernetes)
Tech stack
ElasticsearchKibanaLogstashLinux (RHEL, Ubuntu)TerraformAnsibleGitBitbucketShell scriptingPythonAWSAzureGCPElastic Stack X-PackFilebeatMetricbeatElastic Serverless forwarderAPM serversElastic AgentElastic FleetDockerKubernetes
Benefits
Employee well-being focusCollaborative work environmentOpportunities for growth, learning, development, and career advancementInnovation-driven cultureWork-life balance and flexibilityDiversity, inclusion, and equal employment opportunity commitment