Senior Elastic Specialist

At Avaron, you get the security of permanent employment combined with the variety of working at different customers. We place specialists across everything from tech, IT and industry to project management and business support – and whatever the assignment, you have a consultant manager who is there for you and your development.

You will help strengthen and standardize observability in a complex industrial environment where reliable data, fast analysis, and clear visibility are critical. The focus is on building and refining an Elastic Stack setup that works across air-gapped environments and gives engineering teams better insight from logs, metrics, and traces.

In this role, you will work hands-on with architecture, data quality, query performance, and detection logic. You will also help create a more consistent and usable observability platform by improving data structures, retention strategies, and visualizations. This is a great opportunity if you enjoy deep technical ownership and want to influence how a modern observability stack is designed and used.

• You will design and improve an Elastic Stack observability setup that spans air-gapped environments.
• You will analyze existing observability data and evaluate how well it can be used through KQL.
• You will define and drive improvements for data consistency, tagging, and query performance.
• You will enhance data structures and schema design to support better searchability and analysis.
• You will implement alerts, detection strategies, dashboards, and visualizations in Elastic.
• You will assess storage options such as hot and cold tiers and define suitable retention policies based on data type and usage.
• You will implement head and tail sampling strategies to improve observability efficiency.
• You will support integrations with external systems and contribute to documentation and knowledge transfer.

• Deep expertise in the Elastic Stack, including Elasticsearch, Logstash, Kibana, Elastic APM, and OTEL.
• Experience with Elastic Fleet management.
• Strong experience in observability engineering, with focus on correlating logs, metrics, and traces.
• Advanced expertise in KQL.
• Strong experience designing detection logic and dashboards using KQL.
• Experience in Logstash pipeline design, transformation, and routing.
• Experience with alerting strategies and anomaly detection within Elastic.
• Knowledge of data modeling, tagging strategies, and schema design using Elastic Common Schema.
• Experience with storage tier strategies.
• Experience integrating Elastic with external systems, for example Splunk.
• Ability to collaborate across teams and communicate clearly through documentation and knowledge sharing.
• Fluency in English.

• Permanent employment at Avaron AB
• Occupational pension
• Wellness allowance of SEK 5,000 per year

Selections are made on an ongoing basis – apply as soon as you can.