Solutions Architect

Role: Solution Architect - AI-Enabled Data Onboarding / Google SecOps

Location: Melbourne/Perth

Job Description

Essential: Strong experience in solution architecture, preferably involving SIEM, security analytics, observability or data-ingestion platforms. Good understanding of SIEM architecture and data onboarding concepts, including ingestion, parsing, normalization, routing and data quality. Experience with Google SecOps, or comparable enterprise SIEM platforms with the ability to rapidly develop Google SecOps expertise. Understanding of Google SecOps Unified Data Model (UDM)and the principles of mapping source telemetry into a common data model. Experience with Cribl Stream, including the design of scalable data collection, routing, filtering, transformation and enrichment patterns, and its integration with SIEM platforms suchas Google SecOps and Splunk. Deep expertise in AWS S3-based data architectures, including Parquet data formats, universal/canonical data schemas, schema mapping and transformation, and the design of scalable dataingestion patterns. Experience designing API-based integrations and automation between enterprise platforms. Experience designing solutions across cloud and enterprise environments, including identity, connectivity, security and access considerations. Ability to translate standards, specifications and governance requirements into technical architecture, controls and reusable implementation patterns. Strong stakeholder engagement skills and the ability to work across architecture, cybersecurity, engineering, operations and delivery teams. Desirable: Hands-on experience with Google SecOps ingestion mechanisms, parsers, UDM mapping or automation. Experience with Splunk enterprise platform Understanding of configuration-as-code, CI/CD and automated testing. Experience with AI/GenAI, agentic automation or AI-assisted engineering solutions. Familiarity with YARA-L, regular expressions and security detection concepts. Understanding of Azure, AWS and/or Google Cloud Platform.

Responsibilities

Lead the solution architecture and technical design of the AI-enabled self-service data onboarding capability. Define the MVP architecture, initially integrating with Google SecOps, data lake/S3 while maintaining extensibility to Splunk and Cribl. Design the end-to-end onboarding architecture covering self-service intake, AI-assisted assessment, standards-driven validation, workflow, governance, provisioning and verification. Translate organisational SIEM standards and technical specifications into reusable architecture patterns, validation controls and automation requirements. Define Google SecOps, data lake/S3 integration patterns covering ingestion, APIs, collectors, parsers, UDM mapping and configuration automation. Define how Cribl will be used within the target onboarding architecture, including reusable patterns for data collection, routing, filtering, transformation and delivery to Google SecOps,while supporting coexistence with Splunk where required. Establish reusable patterns for log-source onboarding, normalization, validation and data-quality management. Define integration patterns with relevant enterprise services such as workflow, identity, secrets management, network services, source control and CI/CD. Work with AI and engineering specialists to define how AI-assisted decision-making can safely support onboarding assessment, recommendations and automation. Ensure appropriate separation between AI recommendations, deterministic controls, human approvals and automated execution. Support the selection and implementation of initial MVP onboarding use cases. Identify technical dependencies, constraints, risks and architecture decisions required to progress the MVP into production. Provide architecture guidance to engineers implementing the solution and support technical design reviews. Work with Cybersecurity, O&M, platform teams and other stakeholders to ensure the solution is secure, scalable, supportable and aligned with enterprise architecture. Support production readiness and capability handover following successful implementation.Interested Candidates can share their updated resumes on shalini.tomar@carecone.com.au or can reach me on +61283195549