Cloud Logging Integration Engineer at PROLIM… · Hybrid…

Job Description

We are seeking an experienced Cloud Logging Integration Engineer with 8+ years of cloud engineering experience to design, implement, and support cloud-based logging and security telemetry solutions across AWS and Microsoft Azure environments.

The ideal candidate will have strong hands-on experience with Microsoft Sentinel, security log ingestion pipelines, Elastic Logstash, Terraform/Terragrunt, and automated infrastructure deployments. This role requires expertise in integrating security data sources, transforming and normalizing log data, and troubleshooting complex ingestion issues across cloud environments.

Key Responsibilities

• Design, develop, deploy, and maintain Microsoft Sentinel log ingestion pipelines and Elastic Logstash configurations.
• Configure and maintain Azure Data Collection Rules (DCRs), Data Collection Endpoints (DCEs), Log Analytics workspaces, custom log tables, and transformation rules.
• Build and manage AWS logging architectures using services such as S3, ECS/Fargate, SQS, SNS, Lambda, EFS, CloudWatch, IAM, EC2, VPC, and KMS.
• Integrate security logs and telemetry from AWS and Azure services into Microsoft Sentinel and other enterprise SIEM platforms.
• Develop parsing, filtering, transformation, and normalization logic for security telemetry using Logstash or similar technologies.
• Write and maintain KQL queries to validate data ingestion and troubleshoot logging and data-quality issues.
• Investigate and resolve ingestion failures, connector issues, authentication problems, missing events, and data-processing errors.
• Develop and manage cloud infrastructure using Terraform/Terragrunt.
• Automate infrastructure deployments using GitHub Actions and CI/CD pipelines.
• Develop and maintain integrations using KQL, JSON, Python, Syslog, SQL, and REST APIs.
• Manage source code, pull requests, and code reviews using GitHub and development tools.
• Ensure the reliability, scalability, performance, and security of cloud logging and telemetry solutions.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent professional experience.
• 8+ years of experience in Cloud Engineering.
• 3+ years of hands-on experience with AWS and Microsoft Azure environments.
• 2+ years of experience with Microsoft Sentinel or enterprise SIEM platforms.
• 2+ years of experience with Terraform.
• 2+ years of experience with Elastic Logstash or similar log-processing technologies.
• 1+ years of experience with KQL, Python, and SQL.
• Strong hands-on experience designing, implementing, and troubleshooting security log ingestion pipelines.
• Experience with parsing, filtering, transforming, and normalizing security telemetry at scale.
• Strong knowledge of AWS services, including S3, ECS/Fargate, IAM, KMS, SNS, SQS, Lambda, EFS, EC2, VPC, and CloudWatch.
• Strong knowledge of Azure architecture, Microsoft Sentinel, Log Analytics, Azure Monitor, DCRs, DCEs, Logic Apps, Entra ID, and RBAC/IAM.
• Experience with Infrastructure as Code using Terraform/Terragrunt and automated deployments through GitHub Actions.
• Experience with GitHub, JSON, Syslog, and REST API integrations.
• Background in data engineering or similar roles focused on data integration and processing.
• Must hold at least one active AWS or Microsoft Azure certification.

Preferred Qualifications

• Experience designing and supporting enterprise-scale security logging and telemetry architectures.
• Hands-on experience integrating AWS and Azure security data sources into Microsoft Sentinel.
• Experience troubleshooting complex SIEM ingestion pipelines and data-quality issues.
• Experience automating cloud infrastructure and security telemetry deployments through CI/CD.
• Strong analytical, troubleshooting, and problem-solving skills.

Required Certifications

Candidates must hold at least one active certification from the following or an equivalent AWS/Azure certification:

• AWS Certified CloudOps Engineer – Associate
• AWS Certified DevOps Engineer – Professional
• AWS Certified Solutions Architect – Associate or Professional
• AWS Certified Security – Specialty
• Microsoft Certified: Azure Administrator Associate
• Microsoft Certified: Azure Security Engineer Associate
• Microsoft Certified: Azure Solutions Architect Expert

Work Schedule and Additional Information

• Contract position.
• Hybrid work arrangement in Plano, Texas.
• Occasional evening or weekend work may be required based on business needs.
• Travel requirements, if any, will be determined by business needs.

How to Apply

Interested candidates should submit an updated resume highlighting their hands-on experience with Microsoft Sentinel, AWS/Azure security log ingestion, Logstash, Terraform, and cloud security telemetry integrations. Please include relevant certifications and project experience.

Pay: $50.00 - $55.00 per hour

Benefits:

• Dental insurance

Application Question(s):

• How many years of hands-on experience do you have with Microsoft Sentinel? Have you personally designed and managed end-to-end security log ingestion pipelines into Sentinel in a production environment?
• Have you hands-on experience integrating security logs from both AWS and Azure into Microsoft Sentinel? Which AWS services and Azure components have you worked with, and how did you troubleshoot ingestion issues?
• Do you have hands-on experience with Elastic Logstash or similar tools for parsing, filtering, transforming, and normalizing security logs? Also, do you hold at least one active AWS or Microsoft Azure certification? If yes, please specify the certification.

Work Location: In person