Senior Information Security Infrastructure Engineer, Security Architecture

Elastic

Confirmed live yesterday High trust

Quick summary

Work type: On-site
Location: —
Posted: 3 days ago
Freshness: Confirmed live yesterday

Market check

Salary context

How this pay compares to similar roles

Similar $184k

$126k most similar roles pay here $226k

This listing doesn't post a salary. Most similar roles pay $151,475–$216,065.

Based on 240 similar postings.

Employer

About Elastic

Elastic is the company behind Elasticsearch and the Elastic Stack (Elasticsearch, Kibana, Beats, and Logstash). It sells search, observability, and security products built on that search engine, primarily through its Elastic Cloud managed service.

Elastic currently has 257 open roles on FindRole.

Listed pay typically runs $133,100–$203,500 across 90 roles with salary data.

Most-posted roles

View all roles at Elastic

At a glance

TL;DR · Senior Information Security Infrastructure Engineer, Security Architecture

Role Posting Log in to save

Senior Information Security Infrastructure Engineer - Security Architecture - InfoSec joins the InfoSec - Security Architecture team to manage and protect organizational data and systems. This role involves owning the end-to-end pipeline for security telemetry, ensuring consistent ingestion into Elasticsearch while maintaining the health of underlying Elastic clusters. Key responsibilities include building integration pipelines for cloud provider audit logs and identity data, managing cluster capacity, shards, and index lifecycle management. The candidate will utilize Terraform to manage infrastructure as code, Kubernetes and Helm for deploying scheduled jobs, and Python for scripting automation. The role requires proficiency in REST API integration, AI-assisted workflows to reduce toil, and experience with Elastic Cloud on Kubernetes. This position addresses the critical challenge of ensuring data quality and reliability within security telemetry used by detection and incident response teams.

Skills

Elasticsearch Kubernetes Terraform Python Helm REST APIs GitHub Actions GCP Security Telemetry Index Lifecycle Management

What you'll do

Build and maintain ingestion pipelines for security data from cloud providers, identity systems, and endpoints into Elasticsearch.
Manage the health, upgrades, capacity, and shard management of Elastic Cloud clusters on Kubernetes.
Use Terraform to manage cloud infrastructure, pipeline configurations, index templates, and alerts as code.
Implement AI automation and tooling to reduce operational toil and create self-healing jobs.
Ensure data quality by monitoring backfills, maintaining consistent schemas, and managing costs.
Develop Python scripts to automate ingestion processes and internal operations.
Manage the end-to-end lifecycle of security telemetry from initial source integration to final query availability.

What we're looking for

Ability to operate Elastic and Elasticsearch in production, including managing ingest pipelines, index templates, mappings, and queries.
Experience with ECK or Elasticsearch on Kubernetes (preferred).
Proven track record of using AI to accelerate development, debug systems, and automate operations.
Proficiency in Kubernetes for deploying workloads, managing Helm charts, and troubleshooting pods/jobs.
Proficiency in Terraform for managing cloud infrastructure and Elasticsearch resources as code.
Ability to consume REST APIs for data ingestion, including handling authentication, pagination, and rate limiting.
Ability to read, write, and modify Python scripts for automation and ingestion.
Eligibility to work in Department of Defense (DoD) Impact Level 4 or above cloud service environments.

5+ yrs exp

Save