Cloud Logging Integration Engineer

Job Title: Cloud Logging Integration Engineer
Location: REMOTE CYBERSECURITY DIVISION Plano, Texas, United States

Duration:Long term

Experience:10 Above

Description

Position Summary
We are seeking a highly motivated and experienced Cloud Logging Integration Engineer with 5+ years of experience in Cloud Engineering to join our dynamic team. This position is ideal for a candidate with hands-on experience designing, deploying, automating, and troubleshooting cloud-native logging and security telemetry architectures across AWS and Microsoft Azure environments.
The successful candidate will be responsible for designing and supporting Microsoft Sentinel log ingestion solutions, developing cloud infrastructure using Terraform/Terragrunt, automating deployments through GitHub Actions, and implementing data parsing, filtering, transformation, and normalization using Elastic Logstash or similar technologies.
Requirements

Essential Functions
Develop, deploy, and maintain Elastic Logstash configurations and Microsoft Sentinel log ingestion pipelines.
Develop and maintain supporting Azure resources, including Data Collection Rules (DCRs), Data Collection Endpoints (DCEs), custom log tables, transformation rules, and Log Analytics workspaces.
Develop, deploy, and manage AWS architecture for log collection using services including S3, ECS/Fargate, SQS, SNS, Lambda, EFS, CloudWatch, IAM, EC2, VPC, and KMS.
Develop KQL queries to validate data ingestion and troubleshoot logging and data-quality issues.
Troubleshoot ingestion failures, connector issues, authentication problems, and data-quality concerns across AWS and Azure logging architectures.
Develop and manage AWS and Azure infrastructure using Terraform/Terragrunt.
Automate infrastructure deployments through GitHub Actions.
Manage the source-code development lifecycle, including pull requests and code reviews, using GitHub repositories and integrated development environments (IDEs).
Develop and maintain integrations using KQL, JSON, Python, Syslog, SQL, and REST APIs.
Support the reliability, scalability, and performance of cloud-based security telemetry and logging solutions.

Minimum Qualifications
Required Education & Experience
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent professional experience.
5+ years of experience in Cloud Engineering.
3+ years of experience working with AWS and Azure cloud environments.
2+ years of experience with Microsoft Sentinel or enterprise SIEM platforms.
2+ years of experience with Terraform.
2+ years of experience with Elastic Logstash or a similar technology.
1+ years of experience with KQL, Python, and SQL.
Strong knowledge of Microsoft Sentinel log onboarding and data ingestion, including parsing, filtering, transformation, and troubleshooting using Elastic Logstash or similar technologies.
Strong knowledge of AWS services, including S3, ECS/Fargate, IAM, KMS, SNS, SQS, Lambda, EFS, EC2, VPC, and CloudWatch.
Strong knowledge of Microsoft Azure, including Tenant/Subscription/Resource Group architecture, Microsoft Sentinel, Log Analytics, Azure Monitor, DCRs, DCEs, Logic Apps, Entra ID, and RBAC/IAM.
Experience developing Infrastructure as Code using Terraform/Terragrunt and implementing automated deployments through GitHub Actions.
Experience using GitHub for source control and IDEs for development.
Development experience with KQL, JSON, Python, Syslog, SQL, and REST API-based integrations.
Proven experience as a Data Engineer or in a similar role focused on data solutions.
Must possess at least one active AWS or Microsoft Azure certification, such as:
AWS Certified CloudOps Engineer Associate
AWS Certified DevOps Engineer Professional
AWS Certified Solutions Architect Associate or Professional
AWS Certified Security Specialty
Microsoft Azure Administrator Associate
Microsoft Azure Security Engineer Associate
Azure Solutions Architect Expert

Preferred Qualifications
Experience designing and supporting enterprise-scale security telemetry and logging architectures.
Experience integrating diverse cloud and security data sources into Microsoft Sentinel.
Hands-on experience with both AWS and Azure logging architectures.
Experience automating cloud infrastructure and security telemetry deployments through CI/CD pipelines.
Strong troubleshooting skills across cloud infrastructure, authentication, log ingestion, and data-quality issues.

Position Type/Expected Hours of Work
This is a Contract position.
Occasional evening and weekend work may be required as job duties demand.
Working hours and specific schedule will be determined based on business requirements.

Travel
Travel requirements will be determined based on business needs.