Data Engineer

Job Summary

The Data Engineer at Acuative Middle East in Amman, Jordan, is responsible for designing, building, and operating data pipelines that support observability platforms for BFSI and government clients in the GCC. The role focuses on reliable ingestion, transformation, indexing, and search of logs, metrics, traces, and events using Elastic Stack or Splunk.

Responsibilities

• Design, develop, and maintain comprehensive observability data pipelines including ingestion, parsing, transformation, enrichment, and loading of logs, metrics, traces, and events.
• Manage data flow into target platforms, handling index design, mappings, templates, retention policies, and storage tiering on Elastic or Splunk.
• Build and operate pipelines with tools such as Logstash, Beats, Elastic Agent, OpenTelemetry Collector, Splunk Universal and Heavy Forwarders, Kafka, or equivalents.
• Optimize ingestion throughput, indexing and search performance, shard and index sizing at scale.
• Integrate new data sources from applications, infrastructure, network devices, cloud services, databases, and APIs.
• Instrument client applications for traces, metrics, and errors; advise client teams on SDK integration, sampling, and code changes for telemetry exposure.
• Monitor pipeline health and address data quality, latency, and ingestion issues.
• Support pre-sales and delivery teams for client observability deployments remotely and on-site in GCC locations.
• Document pipeline architecture, data flows, and index design choices.

Must haves

• 5+ years of practical data engineering experience building and operating production data pipelines.
• Strong knowledge of at least one major observability platform (Elastic Stack or Splunk), including index design, data lifecycle, and deployment architecture.
• Experience with data modeling, ETL/ELT design, and pipeline orchestration.
• Proficiency in SQL and at least one data engineering language such as Python or Java.
• Hands-on coding and instrumentation experience with production applications in Java, .NET, Python, or Node.js, including auto-instrumentation, custom spans, context propagation, and trace-to-log correlation.
• Familiarity with JSON, REST APIs, and platform query languages like Elasticsearch Query DSL, KQL, or SPL.
• Fluency in Arabic and English.
• Based in Jordan with willingness to travel to GCC countries for client engagements.

Nice to haves

• Experience working with both Elastic Stack and Splunk platforms.
• Knowledge of ECE or ECK deployments, or administration of Splunk Enterprise and Splunk Cloud.
• Familiarity with OpenTelemetry and open telemetry collection standards.
• Exposure to SIEM and security analytics use cases on Elastic or Splunk.
• Experience with streaming platforms like Kafka and orchestration tools such as Airflow.
• Understanding of cross-cluster replication, multi-site, or multi-cluster environments.

We refresh listings regularly, but some roles close early on the source platform.