Senior Lead – Elastic Observability Solutions

Job description

**Who We Are** At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive. **The Role** Your role As an AI Architect at Kyndryl, you won't just build apps; you’ll architect the foundational frameworks for autonomous enterprise systems. As a master designer, you’ll integrate LLMs, Agentic AI, and complex data estates into a cohesive, self-improving ecosystem. Join Kyndryl and gain the trust, autonomy and teamwork to help define what comes next for us, our customers and global industries as a whole. Own architecture and design of the Unified Observability solution on the Elastic Stack — cluster topology (master/data/ingest/coordinating node sizing), shard strategy, hot-warm-cold tiering, ILM policies and composable index templates — deployed via ECK/Docker on Kubernetes OR on-premise private cloud, spanning DC, DR and Near-DR sites. Lead end-to-end Business/Transaction Journey design — define start-to-end touchpoints and stitch asynchronous events into single transaction views (using transforms/EQL sequence queries) for journeys spanning CBS (Finacle/Flexcube ), UPI, IMPS, NEFT, RTGS, AEPS, Internet/Mobile Banking and Account Opening, pinpointing exact technical and business decline points. Own capacity planning, licensing, and hardware/infrastructure sizing (VM/CPU/RAM/heap, storage IOPS, network, load balancers) for FSO deployment across UAT, DC and DR; tune JVM heap, GC and circuit breakers for cluster stability at scale. Define and govern AIOps correlation logic (ML anomaly-detection jobs, Watcher/Kibana Alerting rules), alert tuning/suppression strategy, and bi-directional ITSM integration (auto-ticketing via webhook/connector). Implement APM/ OpenTelemetry instrumentation strategy across the Bank's Java, .NET and Node-based CBS/ESB/mobile-banking workloads, including distributed tracing and service-map correlation. Define RBAC, role mappings, and per-hop TLS/mTLS security architecture ( Beats Logstash , Logstash ES , ES transport, Kibana ES , Fleet) in line with banking IS audit requirements. Lead preparation of architecture and technical design documents, SOPs, capacity/sizing sheets, and RFP/SOW-linked technical submissions — strong written documentation skills are a must. Drive onboarding of new applications and payment switches (NPCI interfaces — UPI/IMPS/AEPS) into the platform, including dependency mapping, Fleet policy rollout, and end-to-end validation. Own the integration architecture that pipes data from Logstash/Beats/custom adaptors into Elasticsearch from the Bank's existing network monitoring tools (NetScout, Motadata , Entuity , Cisco NDI/v-Manage for SD-WAN), storage/virtualization platforms (VROPs, vCentre , SAN/NAS), the incumbent APM tool (HEAL), and SIEM/security platforms (LogRhythm SIEM, Imperva DAM, AD/PIM) — via SNMP traps, syslog forwarding, REST/API connectors, or custom Logstash input plugins where native integration isn't available. Mentor Leads and L1/L2/L3 resources, foster a culture of ownership and continuous improvement, and contribute to presales/solutioning for adjacent observability opportunities. Your Future at Kyndryl Every position at Kyndryl offers a way forward to grow your career. We have opportunities that you won’t find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here. **Who You Are** You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others. **Required skills and experience** - Design cross-domain correlation logic (Elastic ML jobs, transforms, EQL sequences) that ties network-layer anomalies — bandwidth breaches, packet loss, latency/jitter spikes, link flaps — back to the specific application/transaction journey impacted, so RCA pinpoints whether a slow IMPS/UPI transaction is a network, infra, or application-code issue. - Lead end-to-end Business/Transaction Journey design — define start-to-end touchpoints and stitch asynchronous events into single transaction views (using transforms/EQL sequence queries) for journeys spanning CBS (Finacle/ Flexcube ), UPI, IMPS, NEFT, RTGS, AEPS, Internet/Mobile Banking and Account Opening, pinpointing exact technical and business decline points. - Mandatory: Banking/BFSI domain experience — exposure to CBS (Finacle/ Flexcube ), ESB (TIBCO BWCE/WSO2), and payment rails (UPI/IMPS/NEFT/RTGS/AEPS). - Strong hands-on expertise across Elasticsearch, Logstash (grok/dissect pipelines), Kibana, Beats/Elastic Agent, APM Server, Fleet, and ELSER/GenAI integrations; working knowledge of Painless scripting, runtime fields, and ESQL/EQL. - Demonstrated experience designing and instrumenting end-to-end transaction/business journey tracing (stitched log tracing, transform jobs) for payment and account-opening flows. - Strong customer-facing track record — proven ability to present to and run workshops with CXO/IT Head/Risk & Compliance audiences, and own client governance independently. Excellent verbal and written communication skills are essential. - Working knowledge of index lifecycle management (ILM), Snapshot Li