・Job Title: Cloud Logging Integration Engineer ・Client: Japanese Global Automotive Group / Cybersecurity Division ・Working Location: Plano, TX ・Employment Type: Contract ・Visa Support: No ・Working Hours: Standard Business Hours (CST) ・Language: English Fluent
▶︎ Key Responsibilities
Design, develop, deploy, and maintain Microsoft Sentinel log ingestion pipelines and Elastic Logstash configurations.
Build and support Azure logging infrastructure, including Data Collection Rules (DCRs), Data Collection Endpoints (DCEs), custom log tables, transformation rules, and Log Analytics workspaces.
Design and manage AWS log collection architectures leveraging S3, ECS/Fargate, SQS, SNS, Lambda, EFS, CloudWatch, IAM, EC2, VPC, and KMS.
Develop and optimize KQL queries to validate data ingestion and troubleshoot data-quality issues.
Investigate and resolve log ingestion failures, connector issues, authentication problems, and telemetry-related incidents across AWS and Azure environments.
Develop and maintain Infrastructure as Code (IaC) using Terraform and Terragrunt.
Automate cloud infrastructure deployments and operational workflows utilizing GitHub Actions.
Manage source code repositories, pull requests, and code review processes using GitHub.
Design and maintain integrations utilizing KQL, JSON, Python, Syslog, SQL, and REST APIs.
Ensure reliability, scalability, performance, and security of cloud-native logging and security telemetry solutions.
Collaborate with cloud, security, and engineering teams to support enterprise logging initiatives.
Document technical designs, operational procedures, and architecture standards.
▶︎ The Right Candidate Will Possess
Strong hands-on experience with Microsoft Sentinel, log onboarding, and cloud security telemetry.
Expertise in designing and troubleshooting large-scale logging architectures across AWS and Azure.
Strong Infrastructure-as-Code experience using Terraform/Terragrunt.
Experience building and maintaining cloud automation through CI/CD pipelines and GitHub Actions.
Knowledge of log parsing, filtering, normalization, and transformation methodologies.
Strong analytical and troubleshooting skills for cloud infrastructure and security monitoring environments.
Ability to work independently in a remote environment while collaborating effectively across teams.
Experience integrating diverse cloud and security data sources into SIEM platforms.
Strong communication skills and ability to explain complex technical concepts to stakeholders.
Commitment to operational excellence, automation, and continuous improvement.
▶︎ Required Qualifications & Skills
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent professional experience.
5+ years of Cloud Engineering experience.
3+ years of hands-on experience with AWS and Azure cloud platforms.
2+ years of experience with Microsoft Sentinel or other enterprise SIEM platforms.
2+ years of experience developing Infrastructure as Code using Terraform.
2+ years of experience with Elastic Logstash or similar log processing technologies.
1+ year of experience with KQL, Python, and SQL.
Strong knowledge of Microsoft Sentinel log onboarding, ingestion, parsing, filtering, transformation, and troubleshooting.
Strong experience with AWS services including S3, ECS/Fargate, IAM, KMS, SNS, SQS, Lambda, EFS, EC2, VPC, and CloudWatch.
Strong understanding of Azure services including Microsoft Sentinel, Log Analytics, Azure Monitor, DCRs, DCEs, Logic Apps, Entra ID, and RBAC/IAM.
Experience implementing CI/CD pipelines using GitHub Actions.
Experience using GitHub for source control, pull requests, and code reviews.
Development experience utilizing KQL, JSON, Python, Syslog, SQL, and REST APIs.
Proven experience as a Data Engineer, Cloud Engineer, Security Engineer, SIEM Engineer, or similar infrastructure-focused role.
Must possess at least one active AWS or Microsoft Azure certification such as:
AWS Certified CloudOps Engineer – Associate
AWS Certified DevOps Engineer – Professional
AWS Certified Solutions Architect (Associate or Professional)
AWS Certified Security – Specialty
Microsoft Azure Administrator Associate
Microsoft Azure Security Engineer Associate
Azure Solutions Architect Expert
▶︎ Preferred Qualifications
Experience designing and supporting enterprise-scale logging and security telemetry architectures.
Experience integrating AWS, Azure, security, and infrastructure data sources into Microsoft Sentinel.