Lead – Elastic Observability Solutions

Job description

**Who We Are** At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive. **The Role** Your role is hands on technical lead responsible for implementing, configuring, and running the Elastic-based Full Stack Observability platform for the Bank's engagement. This role owns transaction-journey dashboard delivery and acts as the technical escalation point for onsite L1/L2 support, with regular working-level engagement with the Bank's IT, Ops and Application teams. Join Kyndryl and gain the trust, autonomy and teamwork to help define what comes next for us, our customers and global industries as a whole. Implement and configure Elastic Stack components — Elasticsearch, Logstash (grok/dissect/mutate filters), Kibana, APM Server, Synthetic/Real User Monitoring, Elastic Agent/Beats — across application, infrastructure, network and database layers. Build and maintain business transaction journey dashboards (Lens, TSVB, Canvas) for UPI, IMPS, NEFT, RTGS, AEPS and Account Opening flows, including correlation rules and transform jobs across CBS, ESB, WSO2 and NPCI switch and channel applications. Configure infrastructure and network monitoring (hosts, VMs, Kubernetes pods/nodes, storage, network/security devices via Metricbeat / Filebeat modules) and tune dynamic threshold and ML-based anomaly alerts. Write and maintain index templates, ILM policies, and data streams for high-volume transaction log ingestion; troubleshoot common cluster issues (yellow/red indices, shard allocation, snapshot/restore via SLM). Act as the escalation point for onsite L1/L2 engineers; drive RCA coordination with application, infrastructure and OEM teams for P1/P2 issues, using KQL/Lucene queries and EQL for investigation. Coordinate patch and upgrade testing (Elasticsearch/Kibana version upgrades, reindex API for migrations) in non-production environments prior to production rollout, and prepare daily/weekly/monthly health and SLA reports. Engage directly with the Bank's IT Ops, Monitoring and Application teams — customer-facing — to gather requirements, fine-tune dashboards/KPIs, and close audit/VAPT observations related to the tool. Good communication and a collaborative, can-do attitude are important. Build and maintain Logstash pipelines/custom connectors and SNMP trap/syslog forwarders to pull data from the Bank's existing tool landscape into Elasticsearch — network monitoring tools (NetScout, Motadata , Entuity , Cisco NDI/v-Manage),storage/virtualization tools (VROPs, vCentre , SAN/NAS), the incumbent APM tool (HEAL), SIEM (LogRhythm) and ITSM (BMC Remedy) — and validate end-to-end data flow and field mapping. Support DR drills and validate RTO/RPO compliance for the observability platform; be willing to work in rotational/on-call shifts to support 24x7 banking operations. Your Future at Kyndryl Every position at Kyndryl offers a way forward to grow your career. We have opportunities that you won’t find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here. **Who You Are** You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others. **Required skills and experience** - 8+ years of hands-on Elastic Stack/observability implementation experience. - Write correlation rules and ML/Watcher alerts that link network-device anomalies (bandwidth breach, packet loss, latency/jitter, link/interface errors) to the affected application or transaction journey, so the dashboard surfaces whether a slow or failed transaction is a network, infra, or application issue. - Onboard new applications onto the observability platform — discovery, Fleet policy/agent installation, dashboard/alert baselining, and performance-impact validation. - Support AIOps configuration — event correlation, alert suppression, Watcher/Kibana Alerting rules, and ITSM ticket integration. - Mandatory: Banking/BFSI domain experience, with exposure to payment rails (UPI/IMPS/NEFT/RTGS/AEPS) and/or CBS/Account Opening workflows. - Strong hands-on skills in Elasticsearch (REST APIs, \\_bulk indexing, mappings), Logstash pipelines, Kibana (Lens/Dev Tools), and Beats/Elastic Agent; working knowledge of ELSER/GenAI features and KQL/Lucene query syntax is a plus. - Experience instrumenting and troubleshooting end-to-end transaction journeys and stitched log tracing, including basic transform/EQL usage. - Python Scripting Experience. - Good customer-facing skills — comfortable leading working-level discussions and requirement walkthroughs with Bank IT/Ops teams; clear and confident communicator. - Hands-on familiarity with ILM, data streams, composable index templates, and cluster troubleshooting (shard allocation, node health). - Practical experience integrating Elastic/Logstash with at least some of: network performance monitoring tools, storage/virtualization monitoring tools, an existing APM tool, a SIEM platform, or an ITSM tool — via SNMP, syslog, or REST API — and basic exposure to correlating network anomalies with application-level symptoms. **Preferred skills and ex