2 years ago
Fort Belvoir, VA, USASenior
Base Salary
$170k - $210k/yr
Responsibilities
- Design, deploy, configure, upgrade, and sustain self-managed Elastic Stack environments across three network enclaves.
- Migrate data sources, searches, dashboards, detections, alerts, and analyst workflows from Splunk to Elastic Security.
- Build and troubleshoot ingest pipelines, parsers, index templates, data streams, mappings, and Index Lifecycle Management policies.
- Monitor and tune cluster health, capacity, performance, availability, shard allocation, retention, snapshots, and recovery.
- Implement TLS or mTLS, certificate management, identity integration, role-based access control, Kibana spaces, and data segregation.
- Develop dashboards, detection rules, alerting, and threat-hunting content aligned with mission use cases and MITRE ATT&CK.
- Integrate Elastic with endpoint, network, vulnerability, identity, ticketing, and security automation technologies.
- Deploy and troubleshoot Elastic in disconnected, air-gapped, classified, and offline-repository environments.
- Support customer workshops, testing, dual-run validation, cutover, and post-migration optimization at Fort Belvoir and other approved locations.
- Produce architecture, configuration, testing, operating, troubleshooting, and knowledge-transfer documentation and train personnel.
Requirements
- Five or more years of experience in cybersecurity, systems engineering, network engineering, or a closely related technical field.
- Two or more years of hands-on experience engineering or operating Elastic Stack environments, or equivalent experience demonstrating the required capabilities.
- Practical experience with Elasticsearch cluster architecture, Kibana, Fleet, Elastic Agents, ingest pipelines, data lifecycle management, monitoring, and troubleshooting.
- Experience securing enterprise platforms with TLS, certificates, identity integration, role-based access, and logical data separation.
- Linux administration experience, preferably Red Hat Enterprise Linux, including platform tuning for vm.max_map_count, ulimits, memory, storage, and swap.
- Experience supporting DoD, federal, classified, or highly regulated environments and applying RMF, STIG, and NIST security controls.
- Experience supporting DoD CSSP or comparable SOC operations across multiple network enclaves.
- Active Secret clearance and ability to maintain required access; JWICS support requires eligibility for applicable TS/SCI access.
- Ability to travel regularly to Fort Belvoir, Virginia, including on short notice when required.
- Elastic Certified Engineer is strongly preferred; qualifying Elasticsearch Engineer training and substantial hands-on experience may substitute initially if certification can be obtained within 90 days.
- Elastic Certified Analyst, Elastic Certified Observability Engineer, and a DoD 8140 or 8570-aligned certification such as Security+ are preferred or may be required by assignment.
- Preferred experience includes Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, Docker, Kubernetes, Splunk-to-Elastic migration, high-volume security data, object storage, backup and recovery, defensive cyber operations, incident response, threat hunting, forensics, detection engineering, Python, PowerShell, shell scripting, API integration, and infrastructure automation.
Benefits
- Full-time employees receive health, dental, vision, 401K, life insurance, short-term and long-term disability, vacation time, and holidays.
- The position is based in a professional office environment at Fort Belvoir, Virginia, with a Monday-Friday 0800-1600 schedule.
- Travel is typically 1-2 weeks annually, with rare deployment occasions and training attendance; regular Fort Belvoir travel may be required for customer access and operational milestones.
- Active United States citizenship and a minimum DoD Secret clearance are required.
- Employees may be subject to contract-, legal-, or regulatory-mandated vaccination and drug-screening requirements.
Tech Stack
Categories
About TekSynap
TekSynap provides IT services and systems integration for government customers, including infrastructure operations, application development, wireless engineering, help desk, and DevOps across cloud and on‑premise environments. The privately held firm serves U.S. federal, state, and local agencies—work has included programs for the Department of Veterans Affairs and defense communities—through long-term contracts and managed services. Founded in 2008 and headquartered in Virginia, it supports mission environments with Agile, security‑cleared teams.