Leidos is seeking an experienced Elastic Agent Engineer to strengthen enterprise cybersecurity visibility, endpoint protection, and centralized logging for the U.S. Army C5ISR Cyber Security Service Provider (CSSP).

In this hands-on engineering role, you will design, deploy, automate, and optimize Elastic Agent, Fleet, and Elastic Defend across large-scale enterprise environments. You will develop standardized deployment solutions, streamline subscriber onboarding, and improve endpoint security operations across Windows, Linux, cloud, and virtualized platforms.

This is an opportunity to work with advanced cybersecurity technologies, solve complex engineering challenges, and directly support the security and resilience of mission-critical Department of War (DoW) systems.

Location: Hybrid - Adelphi, MD (3 days on site)

Clearance: U.S. Citizenship with an active Secret clearance and ability to obtain TS/SCI

Primary Responsibilities

• Elastic Platform Engineering: Design, deploy, configure, and maintain enterprise Elastic Agent, Fleet, and Fleet Server architectures supporting centralized logging, endpoint protection, and security integrations.
• Endpoint Deployment & Management: Develop standardized agent policies, enrollment methods, deployment packages, and lifecycle management processes across Windows, Linux, and cloud environments.
• Automation & Scalability: Automate Elastic Agent installation, upgrades, policy assignments, health checks, and troubleshooting using Python, PowerShell, Bash, Ansible, or similar tools.
• Enterprise Integration: Engineer scalable deployment solutions for cloud servers, traditional endpoints, virtual desktops, containerized workloads, and distributed subscriber environments.
• Troubleshooting & Optimization: Resolve complex issues involving agent enrollment, Fleet connectivity, TLS certificates, proxies, integrations, upgrades, and Elastic Defend configurations.
• Monitoring & Reliability: Develop monitoring and alerting solutions to track agent health, policy compliance, ingestion failures, deployment status, and platform performance.
• Security Operations Support: Collaborate with cybersecurity, cloud, logging, and subscriber teams to integrate Elastic Defend and onboard application logging across enterprise environments.
• Technical Documentation: Create deployment standards, automation scripts, implementation guides, troubleshooting procedures, and operational runbooks.

Basic Qualifications

• Bachelor's degree with 4+ years of relevant experience or a master's degree with 2+ years of relevant experience. Additional relevant experience may be considered in lieu of a degree.
• Hands-on experience engineering, deploying, and managing Elastic Agent, Elastic Fleet, Fleet Server, and centralized logging integrations in production environments.
• Experience deploying, configuring, and troubleshooting Elastic Agent across enterprise Windows and Linux systems.
• Working knowledge of Elastic Defend, endpoint security policies, endpoint enrollment, and operational troubleshooting.
• Strong understanding of networking and security fundamentals, including TLS, PKI, certificates, DNS, proxies, firewalls, and agent communication protocols.
• Experience developing automation scripts using Python, PowerShell, Bash, Ansible, or similar technologies.
• Experience implementing standardized deployment, configuration management, and lifecycle processes for large-scale endpoint environments.
• Strong analytical, troubleshooting, technical documentation, and communication skills.
• Ability to meet applicable DoD 8140 qualification requirements at start and obtain required CSSP and Computing Environment certifications within 90 days of starting, as applicable to the assigned work role.

Preferred Qualifications

• Experience with Elastic Security, Elastic Defend, Endpoint Detection and Response (EDR), or Extended Detection and Response (XDR) technologies.
• Experience supporting cybersecurity operations within DoD, federal government, or other regulated environments.
• Experience with enterprise software deployment tools, configuration management, golden images, cloud-init, or CI/CD pipelines.
• Familiarity with cloud and container technologies, including AWS, Microsoft Azure, Google Cloud Platform (GCP), Oracle Cloud, Kubernetes, or Amazon EKS.
• Experience supporting virtual desktop environments, including AWS WorkSpaces or other non-persistent and ephemeral workloads.
• Experience optimizing Elastic Fleet at scale, including policy segmentation, automated agent cleanup, version management, and high-availability Fleet Server configurations.
• Elastic certifications or DoD 8140-aligned cybersecurity certifications.

Work Location / Telework

Adelphi, Maryland (Hybrid)

This position requires onsite presence in Adelphi, MD, at least three days per week. Remote work may be considered for highly qualified candidates based on technical expertise, experience, and program requirements.

Security Clearance

An active Secret security clearance is required to start. TS/SCI clearance is required for the position, subject to program access and eligibility requirements.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.