About the role
▶︎ Job Details
・Job Title: Cloud Logging Integration Engineer ・Client: Japanese Global Automotive Group / Cybersecurity Division ・Working Location: Plano, TX ・Employment Type: Contract ・Visa Support: No ・Working Hours: Standard Business Hours (CST) ・Language: English Fluent
----------------------------------------
▶︎ Key Responsibilities
* Design, develop, deploy, and maintain Microsoft Sentinel log ingestion pipelines and Elastic Logstash configurations. * Build and support Azure logging infrastructure, including Data Collection Rules (DCRs), Data Collection Endpoints (DCEs), custom log tables, transformation rules, and Log Analytics workspaces. * Design and manage AWS log collection architectures leveraging S3, ECS/Fargate, SQS, SNS, Lambda, EFS, CloudWatch, IAM, EC2, VPC, and KMS. * Develop and optimize KQL queries to validate data ingestion and troubleshoot data-quality issues. * Investigate and resolve log ingestion failures, connector issues, authentication problems, and telemetry-related incidents across AWS and Azure environments. * Develop and maintain Infrastructure as Code (IaC) using Terraform and Terragrunt. * Automate cloud infrastructure deployments and operational workflows utilizing GitHub Actions. * Manage source code repositories, pull requests, and code review processes using GitHub. * Design and maintain integrations utilizing KQL, JSON, Python, Syslog, SQL, and REST APIs. * Ensure reliability, scalability, performance, and security of cloud-native logging and security telemetry solutions. * Collaborate with cloud, security, and engineering teams to support enterprise logging initiatives. * Document technical designs, operational procedures, and architecture standards.
----------------------------------------
▶︎ The Right Candidate Will Possess
* Strong hands-on experience with Microsoft Sentinel, log onboarding, and cloud security telemetry. * Expertise in designing and troubleshooting large-scale logging architectures across AWS and Azure. * Strong Infrastructure-as-Code experience using Terraform/Terragrunt. * Experience building and maintaining cloud automation through CI/CD pipelines and GitHub Actions. * Knowledge of log parsing, filtering, normalization, and transformation methodologies. * Strong analytical and troubleshooting skills for cloud infrastructure and security monitoring environments. * Ability to work independently in a remote environment while collaborating effectively across teams. * Experience integrating diverse cloud and security data sources into SIEM platforms. * Strong communication skills and ability to explain complex technical concepts to stakeholders. * Commitment to operational excellence, automation, and continuous improvement.
----------------------------------------
▶︎ Required Qualifications & Skills
* Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent professional experience. * 5+ years of Cloud Engineering experience. * 3+ years of hands-on experience with AWS and Azure cloud platforms. * 2+ years of experience with Microsoft Sentinel or other enterprise SIEM platforms. * 2+ years of experience developing Infrastructure as Code using Terraform. * 2+ years of experience with Elastic Logstash or similar log processing technologies. * 1+ year of experience with KQL, Python, and SQL. * Strong knowledge of Microsoft Sentinel log onboarding, ingestion, parsing, filtering, transformation, and troubleshooting. * Strong experience with AWS services including S3, ECS/Fargate, IAM, KMS, SNS, SQS, Lambda, EFS, EC2, VPC, and CloudWatch. * Strong understanding of Azure services including Microsoft Sentinel, Log Analytics, Azure Monitor, DCRs, DCEs, Logic Apps, Entra ID, and RBAC/IAM. * Experience implementing CI/CD pipelines using GitHub Actions. * Experience using GitHub for source control, pull requests, and code reviews. * Development experience utilizing KQL, JSON, Python, Syslog, SQL, and REST APIs. * Proven experience as a Data Engineer, Cloud Engineer, Security Engineer, SIEM Engineer, or similar infrastructure-focused role. * Must possess at least one active AWS or Microsoft Azure certification such as: * AWS Certified CloudOps Engineer – Associate * AWS Certified DevOps Engineer – Professional * AWS Certified Solutions Architect (Associate or Professional) * AWS Certified Security – Specialty * Microsoft Azure Administrator Associate * Microsoft Azure Security Engineer Associate * Azure Solutions Architect Expert
----------------------------------------
▶︎ Preferred Qualifications
* Experience designing and supporting enterprise-scale logging and security telemetry architectures. * Experience integrating AWS, Azure, security, and infrastructure data sources into Microsoft Sentinel. * Hands-on experience supporting multi-cloud environments. * Experience building automated deployment pipelines for cloud infrastructure and security monitoring solutions. * Strong knowledge of observability, log management, and monitoring platforms. * Experience with Security Operations, Detection Engineering, or Security Monitoring environments. * Additional cloud, security, or DevOps certifications are highly desirable.
----------------------------------------
No C2C: We do not accept Corp-to-Corp (C2C) arrangements for this position.