Consulting Architect - Security (EMEA)

About the Role

Elastic is looking for a Consulting Architect to join our rapidly growing Security team. You will lead the hands-on delivery of Elastic Security projects, including new implementations, migrations, and use-case expansions for government and public sector organizations. This role requires a blend of technical architecture, strategic advisory, and hands-on deployment expertise.

Note: While Elastic is a remote-first company, this role requires onsite availability for customer projects (up to 60% travel) and eligibility for national security clearance in your country of employment.

What You Will Be Doing

Assess and Design

• Analyze customer goals, pain points, and threat landscapes to define technical requirements.
• Design Elastic Security architectures (SIEM, endpoint, cloud security) integrated with the customer's ecosystem.
• Advise on security strategy and align recommendations with senior stakeholders and CISOs.

Implement and Deliver

• Lead end-to-end delivery of mission-critical deployments and migrations from legacy SIEM/EDR platforms.
• Configure cluster architecture, RBAC, SSO, and private connectivity (VPC peering, private links).
• Architect large-scale data ingestion using Elastic Agent, Beats, and Logstash.
• Develop detection-as-code practices using Python, Git, and CI/CD pipelines.
• Enable Agentic AI capabilities (AI Assistant, Attack Discovery) to accelerate response workflows.

Grow and Collaborate

• Partner with Sales and Engineering to shape opportunities and provide field feedback.
• Mentor fellow consultants and deliver enablement workshops to ensure customer self-sufficiency.
• Communicate effectively with stakeholders ranging from SOC engineers to C-suite executives.

What You Bring

• 5+ years of experience as a Consulting Architect or Senior Consultant in the security domain.
• Solid experience with Elastic Security or comparable platforms (Splunk, Sentinel, CrowdStrike, etc.).
• Strong understanding of the security ecosystem (SOAR, vulnerability management, threat detection).
• Proficiency in scripting (Python) and modern delivery practices (Infrastructure-as-Code, CI/CD).
• Hands-on experience with Linux, Windows, and major public cloud platforms (AWS, Azure, GCP).
• Ability to travel up to 60% for onsite customer engagements.
• Fluency in English and the local market language.
• Eligibility to obtain national security clearance.

Benefits

• Competitive pay based on role and impact.
• Flexible work schedules and locations.
• Comprehensive health coverage for you and your family.
• Generous annual vacation time.
• Support for volunteering and financial donation matching.
• Minimum 16 weeks of parental leave.