Elastic Defend Architect include: • Architect, design, and deploy Elastic Defend across large, distributed enterprise environments • Configure and manage Fleet Servers, agent enrollment workflows, endpoint policies, and security integrations • Design and maintain scalable Elasticsearch clusters supporting Elastic Security workloads • Build and optimize ingestion pipelines for endpoint telemetry, audit logs, alerts, and security-relevant data • Improve Elastic Security performance through index management, ILM tuning, ECS mapping, and ingest pipeline enhancements • Develop and maintain observability frameworks using Kibana and related tooling • Implement logging, metrics, and tracing systems for real-time monitoring and detection • Analyze and visualize datasets to support threat hunting, anomaly detection, and operational insights • Troubleshoot Elastic Defend agent behavior, endpoint policy issues, and integration failures • Ensure data integrity, security, and compliance across all Elastic Security components • Collaborate with SOC, Incident Response, DevOps, cloud, and platform engineering teams • Provide technical guidance, mentoring, and subject-matter expertise to internal teams and stakeholders • Document architectures, runbooks, deployment patterns, and best practices • Stay current on emerging Elastic Security capabilities, endpoint threat trends, and cybersecurity technologies. Keywords: #LI-RE1 #LI-Onsite elastic defend, elastic security, elasticsearch architect, endpoint security, EDR, fleet server, elastic agent, kibana, elastic stack, ELK, SIEM, threat detection, endpoint telemetry, ingest pipelines, ECS mapping, ILM, index lifecycle management, observability, logging, metrics, tracing, threat hunting, anomaly detection, distributed systems, cluster scaling, performance tuning, linux, unix, networking, aws, azure, gcp, cloud security, devops, sre, automation, python, powershell, bash, incident response, SOC, IR, security engineering, federal security, cleared engineer, secret clearance, colorado springs, onsite role, mission-critical systems, elastic certified engineer, elastic certified analyst, elastic security engineer, lucene, solr, mssp, high-visibility program, endpoint protection, cyber defense, security architecture, real-time monitoring.