Platform Infrastructure Application Performance Management and Logging - ELK - SME

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. 

Job Description

I&O Platform Infrastructure Application Performance Management and Logging (ELK) SME

Assistant Director  |  Enterprise Technology

The opportunity

In a plan to strengthen and extend our footprint in EY Enterprise Technology, we are looking for a proven Application Performance Management (APM) and Logging SME to support and evolve EY's monitoring and observability platforms globally. The role will provide engineering leadership, operational support, automation and lifecycle management for the firm's APM tooling and the ELK (Elasticsearch, Logstash, Kibana) stack. The successful candidate will work with cutting-edge observability technologies, driving platform maturity, operational excellence and engineering innovation across EY's global infrastructure estate.

Your key responsibilities

The I&O Platform Infrastructure APM and Logging SME provides technical leadership and engineering of complex nature for the firm's application performance monitoring and centralized logging platforms. This professional applies knowledge of APM solutions, the ELK stack, log management, metrics pipelines and distributed tracing to support enterprise-scale workloads and enable rapid incident response.

The role requires deep knowledge of the firm's infrastructure monitoring landscape to implement platform enhancements, lifecycle management activities, onboarding programs, security initiatives and operational improvements. The SME will serve as the subject matter authority for APM and logging platforms, partnering with application teams, infrastructure engineers and security stakeholders across global locations to ensure observability coverage, data quality and platform reliability.

Skills and attributes for success

• Strong experience designing, deploying and administering ELK stack (Elasticsearch, Logstash, Kibana) at enterprise scale.
• Deep knowledge of APM tooling (e.g., Dynatrace, AppDynamics, Elastic APM, New Relic or equivalent).
• Experience architecting centralized logging solutions and log aggregation pipelines.
• Strong understanding of metrics, traces and logs as the three pillars of observability.
• Experience with Elasticsearch cluster management, index lifecycle management (ILM) and snapshot/restore.
• Knowledge of Logstash pipeline development and Beats (Filebeat, Metricbeat, Winlogbeat) deployment.
• Experience building Kibana dashboards, visualizations and alerting rules.
• Experience with log parsing, field extraction, grok patterns and data enrichment.
• Knowledge of distributed tracing frameworks and instrumentation approaches.
• Strong scripting and automation skills, including:
  • Python
  • PowerShell
  • Bash / Shell scripting
• Experience integrating monitoring platforms with ITSM tooling (e.g., ServiceNow).
• Ability to produce high-quality technical documentation, runbooks and operational procedures.
• Strong working knowledge of DevOps, Agile, Kanban, SCRUM and ITIL frameworks.
• Ability to work effectively with clients, management and global engineering teams across multiple time zones.

To qualify for the role, you must have experience with

• ELK stack (Elasticsearch, Logstash, Kibana) — enterprise-scale deployment and administration. 7+ years.
• APM platform engineering and administration (Dynatrace, AppDynamics, Elastic APM or equivalent). 7+ years.
• Centralized logging architecture design and operations. 7+ years.
• Elasticsearch cluster management, performance tuning and capacity planning. 7+ years.
• Logstash pipeline development and Beats agent fleet management. 5–7 years.
• Kibana dashboard and visualization development. 5–7 years.
• Index lifecycle management (ILM), hot-warm-cold architecture and data tiering. 5–7 years.
• Log parsing, grok pattern development and field enrichment. 5–7 years.
• Metrics collection frameworks (Prometheus, InfluxDB, StatsD or equivalent).
• Distributed tracing — implementation, instrumentation and analysis.
• Alert management and notification workflows across monitoring platforms.
• SIEM integration and security event log forwarding.
• TLS/SSL configuration and security hardening of ELK components.
• Role-based access control (RBAC) within Elasticsearch and Kibana.
• Containerized deployment of ELK components (Docker, Kubernetes or OpenShift).
• CI/CD pipeline integration for monitoring-as-code and configuration management.
• Disaster Recovery and Business Continuity planning for monitoring platforms.
• Performance troubleshooting of high-ingestion Elasticsearch clusters (50 GB+/day).
• Onboarding application and infrastructure teams onto APM and logging platforms.
• Windows and Linux systems administration supporting ELK infrastructure.

Ideally, you'll also have

• Elastic Certified Engineer or Elastic Certified Analyst certification (desired).
• Dynatrace Associate or Professional certification (desired).
• Microsoft Azure Administrator or equivalent cloud certification (desired).
• ITIL v4 Foundation certification (exclusionary).
• Experience with OpenTelemetry (OTel) standards and collector configuration.
• Experience with Elastic Cloud or Elastic Cloud on Kubernetes (ECK).
• Familiarity with cloud-native logging solutions (Azure Monitor, AWS CloudWatch, GCP Cloud Logging).
• Experience operating in a managed service or large enterprise shared services environment.

What we look for

An experienced and technically deep observability engineer and leader to help build, operate and modernize EY's APM and centralized logging platforms. We are looking for an individual with proven expertise in ELK stack engineering, strong APM platform knowledge, a passion for operational excellence and automation, and the ability to serve as the technical authority for monitoring and observability across EY's global infrastructure estate.

What we offer

We offer a competitive remuneration package where you'll be rewarded for your individual and team performance. Our comprehensive Total Rewards package includes support for flexible working and career development. Plus, we offer:

• Continuous learning: You'll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We'll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We'll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You'll be embraced for who you are and empowered to use your voice to help others find theirs.

EY | Building a better working world 

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.