Senior Lead – Elastic Observability Solutions
Job Description
Who We Are
At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive.
The Role
Your role is solution-owner role + Individual Contributor combining deep hands-on Elastic Stack expertise with regular, senior-level client interaction — translating technical observability capability into business outcomes from delivery perspective.
Join Kyndryl and gain the trust, autonomy and teamwork to help define what comes next for us, our customers and global industries as a whole.
Own architecture and design of the Unified Observability solution on the Elastic Stack — cluster topology (master/data/ingest/coordinating node sizing), shard strategy, hot-warm-cold tiering, ILM policies and composable index templates — deployed via ECK/Docker on Kubernetes OR on-premise private cloud, spanning DC, DR and Near-DR sites. Lead end-to-end Business/Transaction Journey design — define start-to-end touchpoints and stitch asynchronous events into single transaction views (using transforms/EQL sequence queries) for journeys spanning CBS (Finacle/Flexcube), UPI, IMPS, NEFT, RTGS, AEPS, Internet/Mobile Banking and Account Opening, pinpointing exact technical and business decline points. Own capacity planning, licensing, and hardware/infrastructure sizing (VM/CPU/RAM/heap, storage IOPS, network, load balancers) for FSO deployment across UAT, DC and DR; tune JVM heap, GC and circuit breakers for cluster stability at scale.
Define and govern AIOps correlation logic (ML anomaly-detection jobs, Watcher/Kibana Alerting rules), alert tuning/suppression strategy, and bi-directional ITSM integration (auto-ticketing via webhook/connector).
Implement APM/OpenTelemetry instrumentation strategy across the Bank's Java, .NET and Node-based CBS/ESB/mobile-banking workloads, including distributed tracing and service-map correlation. Define RBAC, role mappings, and per-hop TLS/mTLS security architecture (Beats→Logstash, Logstash→ES, ES transport, Kibana↔ES, Fleet) in line with banking IS audit requirements. Lead preparation of architecture and technical design documents, SOPs, capacity/sizing sheets, and RFP/SOW-linked technical submissions — strong written documentation skills are a must.
Drive onboarding of new applications and payment switches (NPCI interfaces — UPI/IMPS/AEPS) into the platform, including dependency mapping, Fleet policy rollout, and end-to-end validation. Own the integration architecture that pipes data from Logstash/Beats/custom adaptors into Elasticsearch from the Bank's existing network monitoring tools (NetScout, Motadata, Entuity, Cisco NDI/v-Manage for SD-WAN), storage/virtualization platforms (VROPs, vCentre, SAN/NAS), the incumbent APM tool (HEAL), and SIEM/security platforms (LogRhythm SIEM, Imperva DAM, AD/PIM) — via SNMP traps, syslog forwarding, REST/API connectors, or custom Logstash input plugins where native integration isn't available. Mentor Leads and L1/L2/L3 resources, foster a culture of ownership and continuous improvement, and contribute to presales/solutioning for adjacent observability opportunities.
Your Future at Kyndryl
Every position at Kyndryl offers a way forward to grow your career. We have opportunities that you won’t find anywhere else, including hands-on experience, learning opportunities, and the chance to certify in all four major platforms. Whether you want to broaden your knowledge base or narrow your scope and specialize in a specific sector, you can find your opportunity here.
Who You Are
You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others.
Required skills and experience
Design cross-domain correlation logic (Elastic ML jobs, transforms, EQL sequences) that ties network-layer anomalies — bandwidth breaches, packet loss, latency/jitter spikes, link flaps — back to the specific application/transaction journey impacted, so RCA pinpoints whether a slow IMPS/UPI transaction is a network, infra, or application-code issue.
Lead end-to-end Business/Transaction Journey design — define start-to-end touchpoints and stitch asynchronous events into single transaction views (using transforms/EQL sequence queries) for journeys spanning CBS (Finacle/Flexcube), UPI, IMPS, NEFT, RTGS, AEPS, Internet/Mobile Banking and Account Opening, pinpointing exact technical and business decline points.
Mandatory: Banking/BFSI domain experience — exposure to CBS (Finacle/Flexcube), ESB (TIBCO BWCE/WSO2), and payment rails (UPI/IMPS/NEFT/RTGS/AEPS).
Strong hands-on expertise across Elasticsearch, Logstash (grok/dissect pipelines), Kibana, Beats/Elastic Agent, APM Server, Fleet, and ELSER/GenAI integrations; working knowledge of Painless scripting, runtime fields, and ESQL/EQL.
Demonstrated experience designing and instrumenting end-to-end transaction/business journey tracing (stitched log tracing, transform jobs) for payment and account-opening flows.
Strong customer-facing track record — proven ability to present to and run workshops with CXO/IT Head/Risk & Compliance audiences, and own client governance independently. Excellent verbal and written communication skills are essential.
Working knowledge of index lifecycle management (ILM), Snapshot Lifecycle Management (SLM), cluster health diagnostics (shard allocation, hot threads, circuit breakers), and security hardening (RBAC, TLS/mTLS).
Hands-on integration experience pulling data from heterogeneous, already-deployed monitoring/security tools into a central Elastic platform — network performance monitoring tools, storage/virtualization monitoring (VROPs/vCentre-type tools), existing APM tools, SIEM platforms, and ITSM systems — via SNMP, syslog, REST APIs, or custom Logstash/Beats integrations, and correlating network-level anomalies with downstream application/transaction impact.
Strong analytical and structured problem-solving skills, with the ability to operate independently.
Python Scripting Experience.
Preferred skills and experience
Elastic Certified Observability Engineer or equivalent OEM certification.
Exposure to AIOps/ML-based anomaly detection jobs, OpenTelemetry instrumentation, network performance monitoring/packet-capture tools, and ITIL.
Prior presales or solution-architect experience on observability RFP responses for BFSI clients.
A self-starter mindset with strong ownership, stakeholder management, and the ability to mentor and lead a technical team.
Solaris/AIX based applications onboarding from Elastic prespective.
Being You
The “Kyn” in Kyndryl means kinship, which represents the strong bonds we have with each other, our customers and our communities. We focus on ensuring all Kyndryls feel included and we welcome people of all cultures, backgrounds, and experiences. Even if you don’t meet every requirement, we encourage you to apply. We believe in growth, and we’re excited to see what you can bring. At Kyndryl, employee feedback has told us that our number one driver of employee engagement is belonging. That sense of belonging — being a valued, respected, trusted member of the team — is fundamental to our culture and fueling great experiences for our customers. This dedication to welcoming everyone into our company means that Kyndryl gives you the ability to thrive and contribute to our culture of empathy and shared success. That’s The Kyndryl Way.
What You Can Expect
Your career with us isn’t just a job—it’s an adventure with purpose. We offer a dynamic, hybrid-friendly culture that supports your well-being and empowers you to grow. Our Be Well programs are thoughtfully designed to support your financial, mental, physical, and social health—because we know that when you feel your best, you do your best.
From your very first day, you’ll dive into impactful work that powers the systems our customers rely on every day. You won’t just contribute—you’ll make a difference, tackling meaningful projects that sharpen your skills and fuel your growth.
We’re here to champion your journey. With powerful tools to chart your career path, personalized development goals aligned with your ambitions, and continuous feedback to keep you inspired and on track, you’ll have everything you need to thrive and evolve. You’ll develop in-demand skills to grow your career and achieve your ambitions with access to cutting-edge learning opportunities—from certifications with Microsoft, Google, and Amazon to coaching and hands-on experiences. And through it all, you’ll be part of a culture that values empathy, restless learning, and a devotion to shared success.
We want you to thrive here—and we’re committed to helping you do just that. Ready to make an impact? Join us and help shape what’s next.
Get Referred!
If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact's Kyndryl email address.