{"id":583793,"url":"https://alion.io/job/elastic-dev-consulting-architect-security-emea-public-sector-eligible-","title":"Consulting Architect - Security (EMEA / Public Sector eligible )","company":{"id":4819,"name":"Elastic","domain":"elastic.co","url":"https://alion.io/company/elastic","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":83,"open_postings":54,"ghost_share":0,"stale_share":0.685,"repost_share":0,"time_to_fill_p50_days":42,"computed_at":"2026-10-31T05:58:55Z"}},"role":"DevOps","role_family":"DevOps","seniority":"staff","employment_type":null,"work_mode":"remote","remote_scope":"stated_regions","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Germany"],"countries":["DE"],"hiring_countries":["DE","FR","AE","GB","AT","BY","BE","BA","BG","HR","CY","CZ","DK","FI","HU","IE","IL","IT","KE","ME","NL","NG","NO","PL","RO","SA","RS","ZA","ES","SE","CH","TR","UA","AL","DZ","AD","AO","BH","BJ","BW"],"hiring_countries_total":119,"salary":null,"salary_estimate":{"min_usd":102000,"max_usd":192000,"period":"year","method":"role_seniority_country_cell","sample_n":11},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Amazon ECS","optional":false},{"name":"Amazon S3","optional":false},{"name":"Apache Kafka","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Elastic SIEM","optional":false},{"name":"ElasticSearch","optional":false},{"name":"GCP","optional":false},{"name":"Git","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Logstash","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"Amazon EKS","optional":true},{"name":"Azure AKS","optional":true},{"name":"GitLab","optional":true},{"name":"Google GKE","optional":true},{"name":"Kubernetes","optional":true},{"name":"LLM","optional":true},{"name":"OpenShift","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-09-02T10:11:35Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-31T17:18:17Z","board_verified":true,"closed_at":null,"days_open":59,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":59},"description":"Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale - unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data - securing and protecting private information more effectively - Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI.\nWhat is The Role\nElastic Security is one of the fastest-growing parts of our business, and our customers (including government and public sector organisations) rely on our Security Solution to modernise their SOC, threat detection, and response capabilities.\nYou will lead the hands-on delivery of Elastic Security projects (new implementations, migrations, and use-case expansions) from discovery through architecture design and build. Along the way, you'll develop trusted relationships with senior stakeholders and work closely with our Services, Engineering and Sales teams.\nElastic is a remote-first company, but many of the projects you'll deliver might require onsite availability, making the role hybrid in practice, varying by project, with travel of up to 60%.\nSome of these engagements, given the organisations involved, also require national security screening or clearance; eligibility to obtain one in your country of employment is a strong advantage, and Elastic will sponsor the process where required.\nWhat You Will Be Doing\nAssess and Design\nAnalyse customer goals, pain points, existing architecture, and threat landscape, translating them into technical requirements\nDesign Elastic Security solution architectures (SIEM, endpoint, cloud security) that integrate with the customer's wider security ecosystem\nAdvise on the customer's security strategy and own the Elastic side of it, aligning recommendations through regular sessions with senior and key stakeholders\nImplement and Deliver\nLead hands-on delivery of Elastic Security projects end-to-end, including greenfield deployments and migrations from legacy SIEM/EDR platforms in mission-critical environments\nDeploy and secure the Elastic platform: cluster architecture, RBAC and role mapping, single sign-on, private connectivity (private links, VPC peering), and hardening for enterprise and government environments\nArchitect and build large-scale data ingestion with Elastic Agent, Beats, and Logstash, normalising data to ECS and integrating sources such as Kafka, Azure Event Hub, and AWS S3\nDevelop security content aligned to the customer's threat landscape: detection rules, dashboards, and alerting workflows\nDrive security migrations from competing platforms, applying deep knowledge of Elastic's capabilities to translate each use case into its best form, whether through feature parity mapping or full redesign\nEstablish detection-as-code practices for customers managing detections programmatically: developing, testing, versioning, and deploying detection content with Python, Git, and CI/CD pipelines\nApply and enable Elastic's Agentic AI capabilities (AI Assistant, Attack Discovery, agent-driven workflows) to accelerate customers' detection and response\nGrow and Collaborate\nIdentify and deliver new security use cases as customers mature their cyber defence journey with Elastic\nDeliver engagements on time and within the agreed Statement of Work (SOW) scope, surfacing opportunities for follow-on work\nCommunicate confidently with stakeholders from SOC engineers up to CISO / C-suite level\nPartner with Elastic Sales and pre-sales to assess technical risks and shape opportunities\nFeed field insight back to Elastic Engineering, Product Management, and Support to drive feature enhancements\nMentor and share knowledge with fellow Elastic consultants across a highly distributed team\nLead or assist with demos and proof-of-concepts that showcase the value of the Elastic Stack, and deliver enablement sessions and hands-on workshops that make customer teams self-sufficient\nWhat You Bring Along\nMinimum of 5 years' experience as a Consulting Architect, Senior Consultant, or in a senior IT technical leadership role, delivering and executing professional services engagements, ideally in the security domain\nSolid experience deploying Elastic Security or comparable SIEM platforms (e.g., Splunk, MS Sentinel, QRadar, ArcSight) and/or EDR platforms (e.g., CrowdStrike, MS Defender), or at least 2 years as a Security Analyst / Detection Engineer in a threat detection and response role\nAn architect's view of the security ecosystem across varied customer environments: SOAR, vulnerability management, penetration testing, ticketing, and security policies, and how they connect in a SOC\nScripting skills, ideally in Python, and exposure to modern delivery practices such as Infrastructure-as-Code and CI/CD are strongly preferred\nHands-on experience with Linux and Windows operating systems, and on-prem and/or public cloud platforms (AWS, Azure, GCP)\nStrong customer advocacy, relationship-building, and communication skills, with the ability to pivot easily between delivery and strategic engagements\nEligibility to obtain national security clearance in your country of employment (screening sponsored by Elastic where required)\nWillingness to travel and work onsite with customers (up to 60% of the time), combined with comfort working remotely in a highly distributed team\nStrong proficiency in both English (our company-wide operating language) and the local market language.\nBonus Points\nExperience with advanced Elasticsearch operations: cluster architecture, shard management, data ingestion, and data tiering at scale\nExperience with detection-as-code: authoring, testing, and versioning detection content managed in Git\nExperience automating deployments and lifecycle management with Python, Terraform, and CI/CD tooling (e.g., GitLab pipelines)\nExperience deploying and operating containerised workloads on Kubernetes, cloud-managed or self-hosted (EKS, AKS, GKE, OpenShift)\nExperience with Agentic AI and LLM-based security workflows: AI assistants, automated triage, and agent-driven investigation\nExperience as a Tier-2/Tier-3 SOC Analyst, Threat Hunter, or DevSecOps Engineer\nExperience in large distributed environments or MSSPs, from architecture through deployment\nExperience delivering enablement sessions, technical workshops, or product training to technical audiences\nElastic Certified Engineer certification, or security certifications such as GIAC or CISSP\nAdditional Information - We Take Care of Our People\nAs a distributed company, diversity drives our identity. Whether you’re looking to launch a new career or grow an existing one, Elastic is the type of company where you can balance great work with great life. Your age is only a number. It doesn’t matter if you’re just out of college or your children are; we need you for what you can do.\nWe strive to have parity of benefits across regions and while regulations differ from place to place, we believe taking care of our people is the right thing to do.\nCompetitive pay based on the work you do here and not your previous salary\nHealth coverage for you and your family in many locations\nAbility to craft your calendar with flexible locations and schedules for many roles\nGenerous number of vacation days each year\nIncrease your impact - We match up to $2000 (or local currency equivalent) for financial donations and service\nUp to 40 hours each year to use toward volunteer projects you love\nEmbracing parenthood with minimum of 16 weeks of parental leave\nDifferent people approach problems differently. We need that. Elastic is an equal opportunity employer and is committed to creating an inclusive culture that celebrates different perspectives, experiences, and backgrounds. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, pregnancy, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, disability status, or any other basis protected by federal, state or local law, ordinance or regulation.\nWe welcome individuals with disabilities and strive to create an accessible and inclusive experience for all individuals. To request an accommodation during the application or the recruiting process, please email . We will reply to your request within 24 business hours of submission.\nApplicants have rights under Federal Employment Laws, view posters linked below: Family and Medical Leave Act (FMLA) Poster; Pay Transparency Nondiscrimination Provision Poster; Employee Polygraph Protection Act (EPPA) Poster and Know Your Rights (Poster)\nElasticsearch develops and distributes technology and information that is subject to U.S. and other countries’ export controls and licensing requirements for individuals who are located in or are nationals of the following sanctioned countries and regions: Belarus, Cuba, Iran, North Korea, Syria, or Russia, including the Ukrainian territories annexed by Russia (The Crimea region of Ukraine, The Donetsk People's Republic (DNR), The Luhansk People's Republic (LNR), Kherson or Zaporizhzhia). If you are located in or are a national of one of the listed countries or regions, an export license may be required as a condition of your employment in this role. Please note that national origin and/or nationality do not affect eligibility for employment with Elastic.\nPlease see here for our Privacy Statement.","description_format":"text","description_chars":9719,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Parental leave"],"hiring_locations":[{"name":"Germany","iso":"DE","kind":"region"},{"name":"France","iso":"FR","kind":"region"},{"name":"United Arab Emirates","iso":"AE","kind":"region"},{"name":"United Kingdom","iso":"GB","kind":"region"},{"name":"Austria","iso":"AT","kind":"region"},{"name":"Belarus","iso":"BY","kind":"country"},{"name":"Belgium","iso":"BE","kind":"region"},{"name":"Bosnia and Herzegovina","iso":"BA","kind":"region"},{"name":"Bulgaria","iso":"BG","kind":"region"},{"name":"Croatia","iso":"HR","kind":"region"},{"name":"Cyprus","iso":"CY","kind":"region"},{"name":"Czech Republic","iso":"CZ","kind":"region"},{"name":"Denmark","iso":"DK","kind":"region"},{"name":"Finland","iso":"FI","kind":"region"},{"name":"Hungary","iso":"HU","kind":"region"},{"name":"Ireland","iso":"IE","kind":"region"},{"name":"Israel","iso":"IL","kind":"region"},{"name":"Italy","iso":"IT","kind":"region"},{"name":"Kenya","iso":"KE","kind":"region"},{"name":"Montenegro","iso":"ME","kind":"region"},{"name":"Netherlands","iso":"NL","kind":"region"},{"name":"Nigeria","iso":"NG","kind":"region"},{"name":"Norway","iso":"NO","kind":"region"},{"name":"Poland","iso":"PL","kind":"region"},{"name":"Romania","iso":"RO","kind":"region"},{"name":"Saudi Arabia","iso":"SA","kind":"region"},{"name":"Serbia","iso":"RS","kind":"region"},{"name":"South Africa","iso":"ZA","kind":"region"},{"name":"Spain","iso":"ES","kind":"region"},{"name":"Sweden","iso":"SE","kind":"region"},{"name":"Switzerland","iso":"CH","kind":"region"},{"name":"Turkey","iso":"TR","kind":"region"},{"name":"Ukraine","iso":"UA","kind":"region"},{"name":"Albania","iso":"AL","kind":"region"},{"name":"Algeria","iso":"DZ","kind":"region"},{"name":"Andorra","iso":"AD","kind":"region"},{"name":"Angola","iso":"AO","kind":"region"},{"name":"Bahrain","iso":"BH","kind":"region"},{"name":"Benin","iso":"BJ","kind":"region"},{"name":"Botswana","iso":"BW","kind":"region"},{"name":"Burkina Faso","iso":"BF","kind":"region"},{"name":"Burundi","iso":"BI","kind":"region"},{"name":"Cameroon","iso":"CM","kind":"region"},{"name":"Cape Verde","iso":"CV","kind":"region"},{"name":"Chad","iso":"TD","kind":"region"},{"name":"Central African Republic","iso":"CF","kind":"region"},{"name":"Comoros","iso":"KM","kind":"region"},{"name":"Cuba","iso":"CU","kind":"country"},{"name":"Democratic Republic of the Congo","iso":"CD","kind":"region"},{"name":"Djibouti","iso":"DJ","kind":"region"},{"name":"Equatorial Guinea","iso":"GQ","kind":"region"},{"name":"Eritrea","iso":"ER","kind":"region"},{"name":"Estonia","iso":"EE","kind":"region"},{"name":"Eswatini","iso":"SZ","kind":"region"},{"name":"Ethiopia","iso":"ET","kind":"region"},{"name":"Faroe Islands","iso":"FO","kind":"region"},{"name":"Gabon","iso":"GA","kind":"region"},{"name":"Gambia","iso":"GM","kind":"region"},{"name":"Georgia","iso":"GE","kind":"region"},{"name":"Ghana","iso":"GH","kind":"region"},{"name":"Greece","iso":"GR","kind":"region"},{"name":"Guinea","iso":"GN","kind":"region"},{"name":"Guinea-Bissau","iso":"GW","kind":"region"},{"name":"Iceland","iso":"IS","kind":"region"},{"name":"Iran","iso":"IR","kind":"country"},{"name":"Iraq","iso":"IQ","kind":"region"},{"name":"Isle of Man","iso":"IM","kind":"region"},{"name":"Ivory Coast","iso":"CI","kind":"region"},{"name":"Jordan","iso":"JO","kind":"region"},{"name":"Kosovo","iso":"XK","kind":"region"},{"name":"Kuwait","iso":"KW","kind":"region"},{"name":"Latvia","iso":"LV","kind":"region"},{"name":"Lebanon","iso":"LB","kind":"region"},{"name":"Lesotho","iso":"LS","kind":"region"},{"name":"Liberia","iso":"LR","kind":"region"},{"name":"Liechtenstein","iso":"LI","kind":"region"},{"name":"Lithuania","iso":"LT","kind":"region"},{"name":"Luxembourg","iso":"LU","kind":"region"},{"name":"Madagascar","iso":"MG","kind":"region"},{"name":"Malawi","iso":"MW","kind":"region"},{"name":"Mali","iso":"ML","kind":"region"},{"name":"Malta","iso":"MT","kind":"region"},{"name":"Mauritania","iso":"MR","kind":"region"},{"name":"Mauritius","iso":"MU","kind":"region"},{"name":"Mayotte","iso":"YT","kind":"region"},{"name":"Moldova","iso":"MD","kind":"region"},{"name":"Monaco","iso":"MC","kind":"region"},{"name":"Morocco","iso":"MA","kind":"region"},{"name":"Mozambique","iso":"MZ","kind":"region"},{"name":"Namibia","iso":"NA","kind":"region"},{"name":"Niger","iso":"NE","kind":"region"},{"name":"North Macedonia","iso":"MK","kind":"region"},{"name":"Oman","iso":"OM","kind":"region"},{"name":"Palestine","iso":"PS","kind":"region"},{"name":"Portugal","iso":"PT","kind":"region"},{"name":"Qatar","iso":"QA","kind":"region"},{"name":"Republic of the Congo","iso":"CG","kind":"region"},{"name":"Réunion","iso":"RE","kind":"region"},{"name":"Rwanda","iso":"RW","kind":"region"},{"name":"Saint Helena and Ascension","iso":"SH","kind":"region"},{"name":"San Marino","iso":"SM","kind":"region"},{"name":"São Tomé and Príncipe","iso":"ST","kind":"region"},{"name":"Senegal","iso":"SN","kind":"region"},{"name":"Seychelles","iso":"SC","kind":"region"},{"name":"Sierra Leone","iso":"SL","kind":"region"},{"name":"Slovakia","iso":"SK","kind":"region"},{"name":"Slovenia","iso":"SI","kind":"region"},{"name":"Somalia","iso":"SO","kind":"region"},{"name":"South Sudan","iso":"SS","kind":"region"},{"name":"Svalbard","iso":"SJ","kind":"region"},{"name":"Tanzania","iso":"TZ","kind":"region"},{"name":"Togo","iso":"TG","kind":"region"},{"name":"Tunisia","iso":"TN","kind":"region"},{"name":"Uganda","iso":"UG","kind":"region"},{"name":"Western Sahara","iso":"EH","kind":"region"},{"name":"Zambia","iso":"ZM","kind":"region"},{"name":"Zimbabwe","iso":"ZW","kind":"region"},{"name":"Gibraltar","iso":"GI","kind":"region"},{"name":"Vatican","iso":"VA","kind":"region"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Government","Endpoint Security","Security Operations","Vector Search & RAG"],"lifecycle":[{"event":"open","at":"2026-09-10T00:59:52Z"}],"visa":[],"liveness":{"score":21,"band":"cold","label":"Long shot","p_open":1,"p_active":0.475,"p_room":0.44,"age_days":58,"expected_fill_days":42,"reasons":["conf:3","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/elastic-dev-consulting-architect-security-emea-public-sector-eligible-","json_url":"https://alion.io/job/elastic-dev-consulting-architect-security-emea-public-sector-eligible-.json","meta":{"generated_at":"2026-10-31T20:17:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31832,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4819},"rest":"https://alion.io/mcp/rest/get_company?id=4819"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Felastic-dev-consulting-architect-security-emea-public-sector-eligible-"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Felastic-dev-consulting-architect-security-emea-public-sector-eligible-"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Felastic-dev-consulting-architect-security-emea-public-sector-eligible-"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/elastic-dev-consulting-architect-security-emea-public-sector-eligible-\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Felastic-dev-consulting-architect-security-emea-public-sector-eligible-"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":583793}},{"tool":"search_jobs","arguments":{"company":"elastic.co","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":583793},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}