Consulting Architect - Security/SIEM

About the role

Elastic is seeking a Consulting Architect specialized in Security and SIEM to join its Canberra team. You will work closely with Services, Engineering and Sales to design, implement and expand Elastic solutions that address complex security challenges for enterprise customers.

Key responsibilities

• Analyse customer pain points, gather requirements and design Elastic‑based security architectures that integrate with existing enterprise technologies.
• Lead workshops, hands‑on deployments, data onboarding, configuration, visualisations and alerting while optimising queries, clusters and data models for fast search and analytics.
• Perform capacity planning, technical audits, upgrades, migrations and guide customers through their evolving cyber‑security journey.
• Collaborate with Engineering, Product Management and Support to influence product enhancements and resolve defects.

Required profile

• Minimum 5 years as a Consulting Architect or senior IT leader with a track record of delivering professional services engagements.
• Experience deploying Elastic Security or comparable SIEM solutions (Splunk, ArcSight, IBM QRadar) and/or 2 years as a Security Analyst in threat detection and response.
• Australian NV1 security clearance (mandatory) and ability to communicate with C‑suite stakeholders.
• Strong advocacy for customers, relationship‑building and presentation skills.

Required skills

• Elastic Security, SIEM platforms, MITRE ATT&CK framework.
• Cloud platforms: AWS, Azure, GCP, OpenStack.
• Linux administration, networking, containerisation, serverless, DevOps concepts.
• Programming/scripting: Python, JavaScript, Go, Chef/Puppet.
• Database fundamentals and data modelling.

What we offer

• Competitive salary based on performance.
• Health coverage for you and your family.
• Flexible working locations and schedules.
• Generous vacation allowance and parental leave.
• Matching charitable donations up to $2,000 and paid volunteer time.