SIEM Solution Architect

Identifi Global; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Identifi Global is recruiting an experienced SIEM/SOC Security Architect with strong Elastic/ELK expertise to join its expanding security practice. You will work directly with end clients, shaping solutions and guiding delivery in complex, security-sensitive environments across UK Defence and NATO contexts.

This permanent hybrid role requires DV clearance, hands-on design and delivery, and the ability to operate at SME/Architect level with clients while coordinating with a team of specialists.

Qualifications

• Strong security architecture design and delivery experience.
• Hands-on Elastic/ELK implementation and operation.
• Ability to engage end clients and translate requirements into technical solutions.
• Experience working in complex, security-sensitive environments and with SME teams.

Responsibilities

• Work directly with end clients to understand technical, operational and security requirements.
• Design SOC and SIEM architectures incorporating Elastic/ELK technologies.
• Translate client requirements into practical technical solutions and architectures.
• Provide SME-level guidance throughout implementation and delivery.
• Support greenfield SIEM implementations and secure existing environments.
• Collaborate with a team of specialist SMEs on delivery pathways.
• Communicate architectural decisions and risk to client stakeholders.
• Support successful delivery in security-sensitive environments.

Skills

Security architecture

Elastic/ELK

Client engagement

Stakeholder management

Tools

Elasticsearch

Kibana

Logstash

Beats/Elastic Agent

Job description

Location - UK / Hybrid with regular client-site delivery, typically London

Current and active DV clearance required

An opportunity to join one of the leading Elastic partners as it continues to expand an established specialist security and Elastic practice.

You will become part of a team of 30+ specialist SMEs delivering complex security and technology projects extensively across UK Defence, alongside international work within NATO environments.

The practice is entering a significant period of growth following the award of major new projects and is expanding its permanent technical capability.

They are now looking to appoint an experienced SIEM / SOC Security Architect who can combine strong security architecture knowledge with practical Elastic/ELK experience.

This is not intended to be a purely advisory architecture position. You will work directly with end clients to understand their requirements, shape the solution and define the appropriate SIEM/SOC architecture, while remaining close to the technical delivery.

Projects are expected to include both greenfield implementations and recovery of existing environments, providing exposure to complex and highly sensitive security environments.

What will you do ?

• Working directly with end clients to understand technical, operational and security requirements
• Designing SOC and SIEM architectures incorporating Elastic/ELK technologies
• Translating client requirements into practical technical solutions and architectures
• Providing SME-level guidance throughout implementation and delivery
• Supporting greenfield SIEM implementations
• Assessing and supporting the recovery or improvement of existing environments
• Working alongside an established team of specialist SMEs
• Contributing directly to technical delivery where appropriate
• Communicating architectural decisions, technical risks and recommendations to client stakeholders
• Supporting successful delivery within complex and security-sensitive environments

We are particularly interested in candidates who can demonstrate:

• Current and active DV clearance
• Professional experience working with Elastic / ELK
• Evidence of what you have personally designed and delivered within relevant environments
• Ability to operate at SME/Architect level directly with end clients
• Strong stakeholder management and communication skills
• Experience working within complex, security-sensitive environments

Nice to have, but not essential

• Relevant Elastic certification
• Hands-on Elastic engineering and implementation
• Elasticsearch, Kibana and Logstash
• Elastic Agent / Beats
• SIEM implementation and optimisation
• Troubleshooting or recovery of existing Elastic environments
• Wider SOC architecture and security tooling experience

Candidates who meet the core clearance, architecture and Elastic requirements but do not currently hold the relevant Elastic certification may still be considered.

Working Arrangements

This is a permanent, hybrid position.

When not required at a client site, there will be scope to work remotely. However, due to the nature and security classification of the projects, candidates should be comfortable with regular and potentially significant client-site attendance.

Projects are expected to be predominantly across the South of England towards London, although exact requirements will depend on individual engagements.

Why Consider the Opportunity?

This is an opportunity to join an established specialist practice at a point of significant expansion rather than simply joining for a single assignment.

You will work alongside 30+ SMEs, delivering challenging security projects across Defence and international environments, while contributing to the continued development of the organisation's Elastic and security capability.

Alongside Defence engagements, there may also be opportunities to contribute to wider enterprise projects.