Data Engineer

About the Role

Acuative is hiring a Data Engineer in Jordan to design, build, and operate the data pipelines behind observability platforms for enterprise BFSI and government clients across the GCC. The role centers on getting logs, metrics, traces, and events reliably ingested, transformed, indexed, and searchable at scale on Elastic Stack or Splunk. The candidate must combine broad data engineering capability with a strong working understanding of how observability platforms index and store data.key Responsibilities:

• Design, build, and maintain end-to-end observability data pipelines covering ingestion, parsing, transformation, enrichment, and loading across logs, metrics, traces, and events
• Own the data flow into the target platform, including index design, mappings, templates, retention and lifecycle policies, and storage tiering (ILM and hot/warm/cold/frozen on Elastic; indexes, buckets, and SmartStore on Splunk)
• Build and operate pipelines using tools such as Logstash, Beats, Elastic Agent, OpenTelemetry Collector, Splunk Universal and Heavy Forwarders, Kafka, or equivalent
• Optimize ingestion throughput, indexing performance, shard and index sizing, and search performance at scale
• Onboard new data sources from applications, infrastructure, network devices, cloud services, databases, and APIs
• Instrument client applications for traces, metrics, and errors, and advise client development teams on SDK integration, sampling strategy, and code changes required to expose useful telemetry
• Monitor pipeline health and resolve data quality, latency, and ingestion issues
• Support pre-sales and delivery teams on client-facing observability deployments, delivered remotely from Jordan and on-site at GCC client locations as required
• Document pipeline architecture, data flows, and index design decisionsRequired Qualifications:
• 5+ years of hands-on data engineering experience building and operating production data pipelines
• Strong understanding of at least one major observability platform (Elastic Stack or Splunk), including index design, data lifecycle, and cluster or deployment architecture
• Experience with data modeling, ETL/ELT design, and pipeline orchestration
• Proficiency in SQL and at least one language commonly used in data engineering (Python, Java, or similar)
• Coding and instrumentation experience: Hands-on experience instrumenting production applications in at least one of Java, .NET, Python, or Node.js, including auto-instrumentation, custom spans, context propagation, and trace-to-log correlation. Comfortable reading application code to identify meaningful instrumentation points and advising client development teams on SDK integration, sampling strategy, and code changes needed to expose useful traces, metrics, and errors.
• Working knowledge of JSON, REST APIs, and platform query languages (Elasticsearch Query DSL, KQL, or SPL)
• Fluency in Arabic and English
• Based in Jordan and willing to travel to GCC countries for client engagements

Preferred Qualifications

• Hands-on experience with both Elastic Stack and Splunk
• Experience with ECE or ECK deployments, or Splunk Enterprise and Splunk Cloud administration
• Familiarity with OpenTelemetry and open standards for telemetry collection
• Exposure to SIEM and security analytics use cases on either platform
• Experience with streaming platforms (Kafka or similar) and orchestration tools (Airflow or similar)
• Familiarity with cross-cluster replication, multi-site, or multi-cluster environments