Professional Services Architect (AI SIEM & Hyperautomation)

As a Professional Services Architect (AI SIEM & Hyperautomation), you will be tasked with designing and implementing effective security data and automation solutions for complex customer environments, drawing on strong SIEM and SOAR expertise and strong hands-on delivery experience. This is a hands-on, customer- and partner-facing technical role, and you will collaborate with partners and customers throughout the pre-sale to deployment lifecycle. You are not a people manager, and you are not primarily pre-sales; you are a skilled technical practitioner who brings technical credibility, clear communication, and a consultative approach to every engagement you lead. You will work effectively alongside partners, including MSSPs, system integrators, and resellers, providing direct technical guidance and contributing to the partner’s ability to deliver independently over time.

What Will You Do?

Primary responsibilities include:

• Serve as the go-to expert on SentinelOne AI SIEM & Hyperautomation internally and with partners and customers; maintain a deep, up-to-date understanding of product architecture, integrations, use cases, and deployment models; stay informed on evolving threat landscapes, industry trends, and competing technologies to guide best practices.
• Participate in technical discovery and requirements analysis for customer engagements, contributing to solution designs and implementation approaches that address each customer’s security objectives and technical constraints.
• Support pre-sales and post-sales efforts, including scoping, architecture design, RFP responses, SOW development, and technical deep dives.
• Support new and strategic delivery partners during their initial onboarding projects to build partner competence and assess their readiness to work independently; work alongside channel delivery partners, providing direct technical guidance during joint customer engagements to ensure implementations are executed to the agreed standard.
• Provide strategic advisory services on risk mitigation, compliance alignment, and solution optimization.
• Provide escalation support to partners and delivery teams for complex technical issues; respond to ad hoc implementation questions from certified partners; conduct periodic office hours for certified partners.
• Define and document repeatable onboarding and delivery methodologies for SentinelOne solutions; establish standardized frameworks, playbooks, and checklists to improve consistency and quality; collaborate with Partner Delivery Assurance Engineers to document these implementation quality standards.
• Partner with PS leadership to streamline service delivery and improve time-to-value for customers; drive continual improvement through post-engagement reviews and lessons learned, with input from Professional Services Consultants (PSCs) where available.
• Build and maintain Partner Delivery Package assets, including implementation reference and troubleshooting guides, aligned to the standard playbooks; provide foundational content for partner learning paths and review partner learning path content with the Training team.
• Host monthly partner Q&A sessions to address technical challenges raised by field teams; support partner certification and readiness, including AI SIEM implementation training, helping partner engineers reach delivery independence.

What Skills and Knowledge Will You Bring?

Ideal candidates will have:

• 5 or more years of experience in enterprise cybersecurity, with meaningful time in customer-facing technical roles such as Professional Services, technical consulting, solution engineering, or security architecture.
• Deep hands-on experience with SIEM platforms (e.g., Splunk, SentinelOne AI SIEM, Exabeam, QRadar) and security data ingestion pipelines, including delivering or supporting complex migrations from incumbent SIEM and SOAR platforms, having worked within these environments at meaningful scale and contributed to architecture decisions; 3 or more years architecting large-scale SIEM data platforms (e.g., Splunk) is preferred.
• Solid experience with SOAR or security automation, including workflow design and the use of scripting or programming languages (e.g., Python, Lua), REST APIs, and JSON to build data ingestion and automation workflows; proficiency in automating software processes, extracting data from databases, and designing and implementing automated software workflows is preferred.
• Familiarity with logging pipelines, normalization (e.g., OCSF, ECS schemas), and integrations with third-party platforms (e.g., Okta, AWS, Palo Alto); experience with log shipping agents (e.g., Fluent Bit, Vector, Beats) and SIEM enrichment strategies is preferred.
• Experience with EDR/XDR technologies and an understanding of how endpoint, identity, cloud, and SIEM products interconnect.
• Experience contributing to the scoping of Professional Services engagements, including effort estimation and SOW input for multi-technology projects; a disciplined approach to assessing effort, risks, and dependencies, bringing structure to ambiguity and scoping only what can be delivered with excellence, is preferred.
• Experience working alongside cybersecurity channel partners, including MSSPs, system integrators, or value-added resellers, in a delivery or technical advisory capacity; specific examples of contributing to partner-led customer engagements and helping to build partner capability over time is preferred.
• Strong communication skills, with the ability to explain complex technical topics clearly to both technical teams and business stakeholders; mentorship and thought leadership, contributing to internal frameworks, delivery methodology, and service innovation for AI SIEM and Hyperautomation, is preferred.
• Relevant industry certifications demonstrating expertise in security or related domains (e.g., CISSP, CCSP, AWS Certified Security - Specialty, or equivalent).
• Background at a cybersecurity vendor, professional services practice, MSSP, system integrator, or enterprise security team in a technical delivery or consulting capacity is preferred; prior experience with SentinelOne’s platform or directly comparable enterprise SIEM and XDR solutions is an advantage, though demonstrable expertise in the relevant technology domains is what matters.

Why SentinelOne?

AI is redefining how the world operates and rewriting the rules of security in real time, and SentinelOne was built for this moment. From day one, we architected an AI-native platform designed to operate at machine speed, not as an add-on to legacy systems but as the foundation itself. If you want to build where innovation and impact move together, this is that place.

We invest in our Sentinels with comprehensive, competitive benefits designed to support you and your family:

Equity & Rewards

• Restricted Stock Units (RSUs)
• Employee Stock Purchase Plan (ESPP)

Time Off & Wellbeing

• Competitive leave benefits
• Gender-neutral parental leave

Insurance & Financial Security

• Medical and insurance benefits
• Pension scheme
• Employee Assistance Program (EAP)

Work Perks & Flexibility

• Global home office allowance
• Mobile phone allowance

Wellness & Lifestyle

• Wellness benefit