Consulting Architect - Security (EMEA / Public Sector eligible )

Overview

Consulting Architect for Elastic Security delivery, covering discovery-to-architecture and hands-on implementation for government and public-sector customers where eligible.

What you'll do

• Lead hands-on delivery of Elastic Security projects from discovery through architecture design and build.
• Assess and design solutions by translating customer goals, pain points, and threat landscape into technical requirements.
• Design Elastic Security architectures (SIEM, endpoint, and cloud security) integrating with the customer’s wider security ecosystem.
• Implement end-to-end security projects including greenfield deployments and migrations from legacy SIEM/EDR platforms.
• Deploy and secure the Elastic platform, including cluster architecture, RBAC/role mapping, SSO, private connectivity, and hardening.
• Build large-scale data ingestion pipelines and develop security content such as detection rules, dashboards, and alerting workflows.
• Use detection-as-code practices with Python, Git, and CI/CD pipelines and deliver customer enablement sessions.

What you'll need

• Minimum of 5 years’ experience as a Consulting Architect, Senior Consultant, or senior IT technical leadership role delivering professional services engagements.
• Solid experience deploying Elastic Security or comparable SIEM platforms and/or EDR platforms, or at least 2 years as a Security Analyst / Detection Engineer.
• Experience across the security ecosystem (e.g., SOAR, vulnerability management, penetration testing, ticketing, and security policies in a SOC context).
• Scripting skills ideally in Python and exposure to Infrastructure-as-Code and CI/CD practices.
• Hands-on experience with Linux and Windows and with on-prem and/or public cloud platforms (AWS, Azure, GCP).
• Eligibility to obtain national security clearance in the country of employment (screening sponsored by Elastic where required).