← All roles

Consulting Architect - Security (EMEA / Public Sector eligible )

Elastic· Consulting - EMEA
Apply on company site
Hybrid (Germany)full-timePosted 1mo ago

About the role

Senior consulting architect role delivering Elastic Security projects for public sector and other customers, leading design, implementation, and migrations, with hands-on delivery, stakeholder engagement, and collaboration across Services, Engineering, and Sales.

Responsibilities

  • Assess and design: Analyze customer goals, pain points, existing architecture, and threat landscape; design Elastic Security solution architectures (SIEM, endpoint, cloud security); advise on customer security strategy and align Elastic recommendations with senior stakeholders
  • Implement and deliver: Lead hands-on delivery of Elastic Security projects end-to-end; deploy and secure the Elastic platform (cluster architecture, RBAC, SSO, private connectivity, hardening); architect and build large-scale data ingestion with Elastic Agent, Beats, and Logstash; develop security content (detection rules, dashboards, alerting workflows); migrate from competing platforms; establish detection-as-code practices using Python, Git, and CI/CD; apply Elastic Agentic AI capabilities for detection/response
  • Grow and collaborate: Identify and deliver new security use cases; deliver engagements on time within SOW; communicate with stakeholders up to CISO level; partner with Sales/pre-sales; feed field insights back to Engineering/PM/Support; mentor fellow consultants; lead or assist demos, PoCs, enablement sessions and workshops

Qualifications

  • Minimum of 5 years' experience as a Consulting Architect, Senior Consultant, or senior IT technical leadership role in professional services, ideally in security
  • Solid experience deploying Elastic Security or comparable SIEM/EDR platforms (e.g., Splunk, MS Sentinel, QRadar, ArcSight; or CrowdStrike, MS Defender) or at least 2 years as a Security Analyst / Detection Engineer
  • Architect's view of security ecosystem across varied environments: SOAR, vulnerability management, penetration testing, ticketing, security policies, SOC integration
  • Scripting skills (prefer Python); exposure to Infrastructure-as-Code and CI/CD
  • Hands-on experience with Linux/Windows, on-prem and/or cloud (AWS, Azure, GCP)
  • Strong customer advocacy, relationship-building, and communication; ability to engage from delivery to executive levels
  • Eligibility to obtain national security clearance; willingness to travel up to 60% and work onsite as required; comfortable with remote distribution and hybrid work
  • Proficiency in English and local market language

Skills

Required:Elastic Security/SIEM deployment

Benefits

  • Competitive pay based on work performed
  • Health coverage for you and family in many locations
  • Flexible locations and schedules
  • Generous vacation days
  • Donation matching up to $2000 (or local equivalent)
  • Up to 40 hours per year for volunteer projects
  • Minimum 16 weeks parental leave
Last updated Sep 3, 2026. Interested? Apply on the company site.
Elastic logo

About Elastic

The open source platform that powers search, observability, security, and more ...

Power insights and outcomes with The Elastic Search AI Platform. See into your data and find answers that matter with enterprise solutions designed to help you accelerate time to insight.

searchobservabilitysecurityAIenterprise solutionsvector database
Company profileWebsite

More open roles at Elastic