Description

Architect and build a cloud-native AI/ML observability platform, owning the production-grade SIEM collector pipeline that ingests, normalizes, and analyzes multi-cloud telemetry.

This role is remote.

Responsibilities

• Architect and implement multi-tenant SIEM collector pipelines (receivers, processors, exporters) across AWS, Azure, and GCP.
• Build multi-source ingestion from CloudTrail, Azure Monitor, GCP Audit Logs, Splunk, Sentinel, and API logs.
• Normalize telemetry to OpenTelemetry semantic conventions and implement DLQ and replay pipelines.
• Design detection engines using rules and ML anomaly detection, plus behavioral analytics for entity and data flow modeling.
• Enable real-time alerting, severity classification, and immutable audit logging for governance.

Required Skills

• 15+ years of experience in software engineering and architecture.
• Expertise in SIEM platforms (Splunk, Sentinel, Elastic, Chronicle) and multi-tenant distributed SaaS applications.
• Strong background in Java microservices development.
• Hands-on experience with OpenTelemetry (OTel Collector, OTTL).
• Deep streaming and data pipeline expertise using Kafka, Kinesis, Event Hub, PubSub, Flink, or Kafka Streams.
• Experience with Kubernetes and Infrastructure as Code.
• Knowledge of data warehousing and analytics technologies.

Preferred Skills

• Working knowledge of ML-based anomaly detection and behavioral analytics.

Key Skills

Education

Any Graduate