Elastic SME

Salary: £80,000 - 90,000 per year

Requirements:

• We require proven experience administering enterprise on-premises Elastic Stack environments, including Elasticsearch clusters, Elastic Security (SIEM) and Elastic Observability.
• We require strong experience with Elasticsearch, Kibana and Logstash.
• We require strong experience with Elastic Agent, Beats and Fleet.
• We require experience managing large, highly available Elasticsearch clusters.
• We require Splunk experience.
• We require strong automation experience.
• You must be willing and able to undertake DV security clearance.
• You must be a British citizen and have lived in the UK for the last 10 years.

Responsibilities:

• We design and support resilient, highly available on-premises Elastic Stack environments.
• We administer and optimise large-scale Elasticsearch clusters.
• We deliver Elastic Security (SIEM) and Elastic Observability solutions.
• We build ingestion pipelines using Logstash, Elastic Agent and Beats.
• We configure Kibana dashboards, visualisations, RBAC and reporting.
• We implement TLS, PKI, LDAP/Active Directory, SAML and platform hardening.
• We optimise cluster performance, JVM, shards, ILM and storage.
• We automate deployments and operational tasks using PowerShell, REST APIs, Python and/or Ansible.
• We provide 3rd/4th line support, troubleshooting and root cause analysis.
• We produce HLDs, LLDs, SOPs, runbooks and DR documentation.

Technologies:

• Active Directory
• Ansible
• ElasticSearch
• Support
• JVM
• Kibana
• LDAP
• PowerShell
• Python
• REST
• RBAC
• SAML
• Security
• Splunk

More:

We are offering a great opportunity for an experienced Elastic SME / Elastic Stack Engineer to take technical ownership of our Elastic platform in a secure, enterprise-scale on-premises environment. The role sits within a Defence and National Security setting and follows a 4 days in the office, 1 day from home working pattern. You will work across our complex enterprise estate supporting Elasticsearch, Kibana, Logstash, Beats, Elastic Agent, Fleet, Elastic Security (SIEM) and Elastic Observability.

last updated 32 week of 2026