Note: The job is a remote job and is open to candidates in USA. Booz Allen Hamilton is seeking a Consolidated Data Analytics Platform Elastic Engineer to build high-performing systems using Elastic. The role involves aggregating logs, creating visualizations, and maintaining infrastructure to identify and address potential issues.
Responsibilities
- Work with clients and peers to build a high performing system using Elastic to aggregate logs from many systems into a single common schema
- Use Elastic Common Schema (ECS) formatted fields, create quality visualizations and alerts that analyst can use for threat hunting, maintain infrastructure, and identify problems or anomalous behavior before they become a larger issue and can be actioned on
- Work with the vendor to determine best practices for deployment and maintenance of system architecture and deploy within designated security requirements
Skills
- 2+ years of experience with Elastic Stack, such as Elasticsearch, Logstash, and Kibana tools, including installing, configuring, maintaining, upgrading, and troubleshooting these products
- 2+ years of experience building high-quality Kibana visualizations and dashboards
- Experience with log pipelines and interpreting logs to determine information, including converting raw logs into ECS formatted documents
- Experience with Logstash plugins, filters, regular expressions, and grok patterns
- Knowledge of cryptography protocols and standards, including TLS, mTLS, hashing algorithms, and Public Key Infrastructure (PKI)
- Knowledge of federal compliance standards, including NIST 800-53, FIPS, STIG, and FedRAMP
- Secret clearance
- HS diploma or GED
- Experience working with Docker, Kubernetes, and cloud containerization solutions, such as Elastic Cloud on Kubernetes (ECK)
- Experience with NiFi, Kafka, and Confluent
- Experience with Office 365 applications and Teams collaboration
- Experience interacting with tools through RDP, web-based UI, SSH, and CLI
- Experience in DoW, Intelligence Community, or other regulated environments
- Knowledge of Elastic Index Lifecycle Management (ILM)
- Knowledge of Linux or UNIX environments, including navigating and troubleshooting basic OS issues
- Knowledge of networking protocols
- Knowledge of how various systems interact with each other
- Knowledge of Zero Trust Architecture (ZTA) principles
Benefits
- Health, life, disability, financial, and retirement benefits
- Paid leave
- Professional development
- Tuition assistance
- Work-life programs
- Dependent care
- Recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values
- Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs
- Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits
Company Overview