Consulting Architect - Security

Elastic Elastic · Enterprise · India · Consulting - Global - COE

This role is for a Consulting Architect focused on implementing Elastic's Search AI Platform, particularly for enterprise security (SIEM/SOAR) solutions. The architect will work with customers to design and implement scalable solutions, translate business challenges into technical designs, and provide hands-on implementation expertise. The role involves customer-facing consulting, working with engineering and product teams, and ensuring successful delivery of Elastic projects. While the company is "The Search AI Company" and the platform leverages AI, the core function of this role is consulting and solution architecture for security and observability use cases, not direct AI/ML model development or research.

What you'd actually do

  1. Serve as a trusted technical architect and consultant, working with complex enterprise environments to translate business challenges into robust, scalable, and value-driven Elastic solutions.
  2. Deliver Elastic solutions and Elastic stack expertise to drive customer business value from our products.
  3. Work with clients to facilitate strategy, roadmap, design, and sizing in workshops.
  4. Your activities will include end-to-end delivery of ground-breaking Elastic projects to our customers, as well as development of proof-of-concepts that highlight the value of the Elastic Stack and its solutions.
  5. Work across teams with engineering, product management, and support teams to identify feature improvements, extensions, and product defects.

Skills

Required

  • Elastic Certified Engineer certification
  • 7+ years as a Consulting Architect or senior IT functional leadership
  • Consulting experience delivering professional services in enterprise environments
  • Experience in Enterprise Security / SIEM / SOAR
  • Experience solving complex technical search problems (relevancy, scaling, performance fine-tuning, high query/indexing throughput, benchmarking)
  • Experience leading and delivering Enterprise Security projects
  • Hands-on experience deploying Elastic Security solutions or similar tools (Splunk, ArcSight, IBM QRadar)
  • Deep understanding of distributed architecture
  • Hands-on experience with on-prem systems and/or major public/private cloud platforms (AWS, Azure, GCP)
  • Hands-on experience in Linux, networking, security, containerization (Docker/Kubernetes), and infrastructure automation
  • Experience utilizing programming or scripting languages (e.g., Python, Javascript, Go)
  • Exceptional customer advocacy, relationship-building, and soft skills
  • Ability to lead and articulate technical solutions to stakeholders
  • Willingness to travel up to 20%

Nice to have

  • Gen AI certification
  • Additional Elastic Certifications
  • Specialization in machine learning or data analytics
  • Information Security and Cybersecurity certifications
  • Knowledge of the MITRE ATT&CK framework
  • Experience working closely with a pre-sales organization
  • Experience as a technical instructor or public speaker
  • Experience contributing to an open-source project or documentation

What the JD emphasized

  • Required – Active Elastic Certified Engineer certification is mandatory.
  • Proven experience in deploying solutions using Elastic core domain: Enterprise Security / SIEM / SOAR.
  • Hands-on experience deploying Elastic Security solutions or similar tools (Splunk, ArcSight, IBM QRadar).
  • Ability and willingness to travel to client sites periodically as required for project success (up to 20%)