Staff Professional Services Architect, SentinelOne

• 5+ years in customer-facing technical consulting, solution engineering, or architecture roles
• Proven ability to scope, estimate, and structure professional services projects
• Deep experience with SIEM platforms (e.g., Splunk, SentinelOne AI SIEM, Exabeam, QRadar, etc.) and security data ingestion pipelines
• Deep experience with Endpoint Detection and Response: Experience with EDR/XDR tools
• Familiarity with logging pipelines, normalization (e.g., ECS schemas), and integrations with third-party platforms (e.g., CrowdStrike, Okta, AWS CloudTrail)
• Proficiency in writing customer-facing SOWs
• Excellent communication skills—able to influence technical and business stakeholders alike
• Experience with modern programming languages and use of APIs to drive data ingestion and SOAR solutions
• Preferred Qualifications:
• 3+ years of experience architecting Splunk data platforms, having had exposure to other SIEM solutions
• SentinelOne product knowledge or experience strongly preferred
• Security certifications such as CISSP, CCSP, AWS Certified Security – Specialty, or GCLD (GIAC Cloud Defense)
• Familiarity with log shipping agents (e.g., Fluent Bit, Vector, Beats), and SIEM enrichment strategies
• Prior experience working in or with a Professional Services organization at a cybersecurity or SaaS company
• Proficient in automating software processes, extracting data from databases, and skilled in designing and implementing automated software workflows

Desirable

• As a Professional Services Architect within SentinelOne’s Professional Services organization, you will play a critical role in the successful scoping and delivery of complex, cross-platform cybersecurity product implementations, particularly in the areas of AI-powered SIEM and SOAR
• This is a customer-facing, post-sales role where you will serve as a trusted advisor, working closely with sales, delivery consultants, and customer stakeholders to ensure successful outcomes and high satisfaction
• Scoping Engagements: Collaborate with sales, partners, and customers to define implementation plans, estimate effort, and create Statements of Work (SOW). Align services to customer needs across SentinelOne product lines, with a focus on AI SIEM and Hyperautomation/SOAR
• Solution Design: Architect scalable, secure solutions across SentinelOne’s platform, including the design of AI SIEM data ingestion pipelines, parsing strategies, schema normalisation, and automation workflows that support end-to-end detection and response
• AI SIEM Architecture & Normalisation: Define and validate architectural patterns for high-volume data ingestion, telemetry normalisation, parser requirements, and enrichment workflows to ensure consistent, high-fidelity data for analytics and automation
• Collaborate with Product Management and Engineering: Partner with the AI SIEM Product team to evaluate new use cases, data models, and integration patterns, ensuring alignment between customer requirements, platform capabilities, and Professional Services delivery readiness
• SME Leadership: Act as a cross-platform subject matter expert (SME), supporting delivery teams during complex deployments or escalations while providing technical guidance across endpoint, identity, cloud, and SIEM domains
• Collaboration: Work closely with product teams, support engineers, TAMs, and pre-sales solution architects to ensure service offerings evolve in tandem with platform innovation and the increasing complexity of real-world deployments
• Enablement: Contribute to internal playbooks, SOW templates, reusable scoping guides, and delivery methodology. Mentor consultants and provide enablement sessions on platform capabilities, AI SIEM best practices, and Hyperautomation frameworks