Security Architect - SIEM
Summary
Contract SIEM/SOC solution architect (via boutique architecture partner Collada) working with one of NZ's largest organisations on migrating off its current SIEM to Microsoft Sentinel or Google SecOps. You own end-to-end architecture — migration and coexistence planning, log-source onboarding, detection engineering, SOC/IR readiness and ServiceNow integration — through to operations by July 2027.
Salary: $140 – $160 per hour
Plenty of security architects have worked alongside a SIEM, far fewer have owned one from design through to a SOC actually running on it. That is the person this role needs.
Collada is a boutique architecture partner, we engage our architects as associates and stay involved for the length of the engagement. We are partnering with one of New Zealand’s largest organisations, headquartered in central Auckland, on their cybersecurity programme.
They are moving off their current SIEM, with Microsoft Sentinel and Google SecOps the direction the programme is heading in, and need a senior solution architect to own the end-to-end architecture for that move. It is a hands-on role in a large, multi-vendor environment, covering the migration and coexistence planning, log-source onboarding patterns, detection engineering direction, SOC and incident-response readiness including the ServiceNow integration, and assurance over what the vendors deliver. It runs full time through to the end of July 2027 with the possibility of extension, so they want someone who will see it through to operations rather than hand over a design and leave.
The filter is a simple one. They need someone who has delivered at least one enterprise SIEM implementation, major upgrade or migration all the way through to operationalisation. Unfortunately, if you haven’t done that, we are unlikely to be able to engage with you on this occasion, no matter how strong the rest of your security background is.
Role: SIEM/SOC Solution Architect
Location: Auckland
Start Date: ASAP
Contract Length: Through to 31 July 2027, possible extension
Rate: $140ph - $160ph + GST
Skills: SIEM solution architecture, Microsoft Sentinel or Google SecOps, detection engineering, SOC operating model, ServiceNow integration
What they are looking for:
• At least one enterprise SIEM implementation or migration taken through to operations
• Microsoft Sentinel or Google SecOps experience
• Log collection and forwarding architectures, connectors, endpoint agents and data-quality controls
• Practical detection engineering, SOC operations and incident response
• SIEM and SOC workflow integration with an ITSM platform, ideally ServiceNow
• Able to lead across a multi-vendor environment and write clear design, decision and handover documentation