Elasticsearch Engineer; Secret Clearance

Elasticsearch Engineer (Secret Clearance)

Join to apply for the Elasticsearch Engineer (Secret Clearance) role at ShorePoint Inc.

ShorePoint is a fast‑growing, industry‑recognized and award‑winning cybersecurity services firm with a focus on high‑profile, high‑threat, private and public‑sector customers who demand experience and proven security models to protect their data. ShorePoint subscribes to a “work hard, play hard” mentality and celebrates individual and company successes. We are passionate about our mission and go above and beyond to deliver for our customers.

We are equally passionate about an environment that supports creativity, accountability, diversity, inclusion, and a focus on giving back to our community.

• Lead and support SIEM migration activities, including transitioning customers from Arc Sight to the Elastic Stack.
• Implement, configure, and document four Elasticsearch clusters in support of enterprise SIEM and analytics requirements.
• Develop detailed installation, configuration, and operational documentation to support deployment and sustainment.
• Design and implement data pipelines to support log ingestion, normalization, enrichment, and analytics.
• Support SIEM development activities, including migration execution, validation, and reporting.
• Collaborate with the Integration and Architecture teams to design, document, build, secure and maintain Elasticsearch, Logstash, Kibana (and X‑Pack) enterprise solutions in both cloud and on‑premises environments.
• Work closely with architects, engineers and integrators to assess customer requirements and design Elasticsearch Stack solutions that meet data compliance and performance needs.
• Follow the development lifecycle processes to transition solutions from Dev to Test to Production environments.
• Participate in Agile sprint meetings, share progress and ensure that the development aligns with project and customer requirements.
• Serve as a subject matter expert and trusted advisor, providing guidance and best practice recommendations for Elasticsearch deployments.
• Configure and maintain Linux‑based operating systems (including updates and version upgrades) to support the Elasticsearch platform.
• Install, configure and manage Elastic Cloud Enterprise (ECE) solutions, ensuring seamless communication and integration among Elasticsearch components and data sources.
• Create detailed installation and configuration documentation to support deployment.
• Secure the solution by implementing TLS, certificates, SSO/PIV authentication and encryption technologies.
• Collaborate with the data lifecycle management team to ensure optimal data flow and integrity.
• Troubleshoot and monitor data flows and the overall health of the Elasticsearch solution to maximize performance and minimize downtime.
• Provide regular status updates and analysis of alternatives in daily sprint meetings.
• Build and maintain effective working relationships across departments and teams to coordinate work and deliver results on schedule.
• Recommend and implement enhancements to optimize business intelligence processes.

• Experience in software development using Java with an IDE (e.g., Eclipse, Code Ready).
• Proficiency in parsing file formats (e.g., JSON, XML, CSV).
• Knowledge of SQL Server database design, programming, tuning and writing SQL queries/procedures.
• Experience in developing/automating test procedures.
• Familiarity with REST API web services client development.
• Experience with release management, build tools (e.g., Maven, Jenkins) and configuration tools (e.g., SVN).
• Understanding of secure coding practices, including encryption (e.g., certificates, TLS connections).

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Mathematics, Engineering or a related field or relevant experience in lieu of degree.
• 2+ years of relevant experience.
• CompTIA Security+ certification.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Applicants must hold and maintain an active Secret clearance.

• Experience with SAML authentication and familiarity with domain structures, user authentication and PKI.
• Experience with Messaging Queues (e.g., Rabbit
  
  MQ).
• Knowledge of Microsoft SQL.
• Experience with programming and regular expressions (XML, Java, JSON, Python, Power Shell, Painless, Grok).
• Relevant security certifications such as CISSP, CISM, CISA, Security+ or CEH.
• Understanding of the relationship between critical infrastructure protection and cybersecurity.
• Knowledge and experience with Assessment & Authorization (A&A) processes in federal environments, including familiarity with the NIST Risk Management Framework (RMF).

• On-site (Schriever SFB - Colorado Springs, CO).

Entry level

Full‑time

Engineering and Information Technology

IT Services and IT Consulting