ELK Architect

Job Title - ELK Architect

Job Type- Full Time

Location - Bengaluru

Key Responsibilities:

Architecture & Design

• Design and implement scalable ELK architectures for log aggregation, search, analytics, and monitoring.
• Define best practices for data ingestion, indexing, storage, and visualization.
• Create high-availability and disaster recovery solutions for Elasticsearch clusters.
• Establish capacity planning and performance optimization strategies.

ELK Stack Management

• Architect and manage Elasticsearch clusters across on-premises and cloud environments.
• Develop Logstash pipelines for data collection, transformation, and enrichment.
• Design Kibana dashboards, visualizations, and reporting solutions.
• Configure Beats (Filebeat, Metricbeat, Packetbeat, Winlogbeat, Auditbeat) for data collection.

Performance & Scalability

• Optimize index lifecycle management (ILM), shard management, and query performance.
• Monitor cluster health and tune Elasticsearch for maximum efficiency.
• Implement data retention and archiving strategies.

Security & Compliance

• Implement role-based access control (RBAC).
• Configure encryption, authentication, and authorization mechanisms.
• Ensure compliance with organizational and regulatory requirements.
• Conduct security assessments and vulnerability reviews.

Integration & Automation

• Integrate ELK with cloud platforms such as AWS, Azure, or GCP.
• Automate deployment and configuration using Terraform, Ansible, Jenkins, or CI/CD pipelines.
• Integrate with SIEM, monitoring, and ticketing tools.

Leadership & Governance

• Provide technical leadership to engineering and operations teams.
• Review architectural designs and implementation standards.
• Mentor engineers and administrators on ELK best practices.
• Create technical documentation and operational runbooks.

Required Skills:

Technical Skills:

• Strong expertise in:
• Elasticsearch
• Logstash
• Kibana
• Beats
• Experience with:
• Linux Administration
• Docker and Kubernetes
• AWS / Azure / GCP
• CI/CD tools
• Infrastructure as Code (Terraform, Ansible)
• Knowledge of:
• REST APIs
• JSON
• Python, Shell Scripting, or Java
• Monitoring tools (Prometheus, Grafana, Splunk, Dynatrace, etc.)