ShortlistFox
← Back to results

Cloud Logging Integration Engineer

Cinter

United States

Apply

About the role

▶︎ Job Details

・Job Title: Cloud Logging Integration Engineer
・Client: Japanese Global Automotive Group / Cybersecurity Division
・Working Location: Plano, TX 
・Employment Type: Contract
・Visa Support: No
・Working Hours: Standard Business Hours (CST)
・Language: English Fluent

▶︎ Key Responsibilities

  • Design, develop, deploy, and maintain Microsoft Sentinel log ingestion pipelines and Elastic Logstash configurations.
  • Build and support Azure logging infrastructure, including Data Collection Rules (DCRs), Data Collection Endpoints (DCEs), custom log tables, transformation rules, and Log Analytics workspaces.
  • Design and manage AWS log collection architectures leveraging S3, ECS/Fargate, SQS, SNS, Lambda, EFS, CloudWatch, IAM, EC2, VPC, and KMS.
  • Develop and optimize KQL queries to validate data ingestion and troubleshoot data-quality issues.
  • Investigate and resolve log ingestion failures, connector issues, authentication problems, and telemetry-related incidents across AWS and Azure environments.
  • Develop and maintain Infrastructure as Code (IaC) using Terraform and Terragrunt.
  • Automate cloud infrastructure deployments and operational workflows utilizing GitHub Actions.
  • Manage source code repositories, pull requests, and code review processes using GitHub.
  • Design and maintain integrations utilizing KQL, JSON, Python, Syslog, SQL, and REST APIs.
  • Ensure reliability, scalability, performance, and security of cloud-native logging and security telemetry solutions.
  • Collaborate with cloud, security, and engineering teams to support enterprise logging initiatives.
  • Document technical designs, operational procedures, and architecture standards.

▶︎ The Right Candidate Will Possess

  • Strong hands-on experience with Microsoft Sentinel, log onboarding, and cloud security telemetry.
  • Expertise in designing and troubleshooting large-scale logging architectures across AWS and Azure.
  • Strong Infrastructure-as-Code experience using Terraform/Terragrunt.
  • Experience building and maintaining cloud automation through CI/CD pipelines and GitHub Actions.
  • Knowledge of log parsing, filtering, normalization, and transformation methodologies.
  • Strong analytical and troubleshooting skills for cloud infrastructure and security monitoring environments.
  • Ability to work independently in a remote environment while collaborating effectively across teams.
  • Experience integrating diverse cloud and security data sources into SIEM platforms.
  • Strong communication skills and ability to explain complex technical concepts to stakeholders.
  • Commitment to operational excellence, automation, and continuous improvement.

▶︎ Required Qualifications & Skills

  • Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent professional experience.
  • 5+ years of Cloud Engineering experience.
  • 3+ years of hands-on experience with AWS and Azure cloud platforms.
  • 2+ years of experience with Microsoft Sentinel or other enterprise SIEM platforms.
  • 2+ years of experience developing Infrastructure as Code using Terraform.
  • 2+ years of experience with Elastic Logstash or similar log processing technologies.
  • 1+ year of experience with KQL, Python, and SQL.
  • Strong knowledge of Microsoft Sentinel log onboarding, ingestion, parsing, filtering, transformation, and troubleshooting.
  • Strong experience with AWS services including S3, ECS/Fargate, IAM, KMS, SNS, SQS, Lambda, EFS, EC2, VPC, and CloudWatch.
  • Strong understanding of Azure services including Microsoft Sentinel, Log Analytics, Azure Monitor, DCRs, DCEs, Logic Apps, Entra ID, and RBAC/IAM.
  • Experience implementing CI/CD pipelines using GitHub Actions.
  • Experience using GitHub for source control, pull requests, and code reviews.
  • Development experience utilizing KQL, JSON, Python, Syslog, SQL, and REST APIs.
  • Proven experience as a Data Engineer, Cloud Engineer, Security Engineer, SIEM Engineer, or similar infrastructure-focused role.
  • Must possess at least one active AWS or Microsoft Azure certification such as:
    • AWS Certified CloudOps Engineer – Associate
    • AWS Certified DevOps Engineer – Professional
    • AWS Certified Solutions Architect (Associate or Professional)
    • AWS Certified Security – Specialty
    • Microsoft Azure Administrator Associate
    • Microsoft Azure Security Engineer Associate
    • Azure Solutions Architect Expert

▶︎ Preferred Qualifications

  • Experience designing and supporting enterprise-scale logging and security telemetry architectures.
  • Experience integrating AWS, Azure, security, and infrastructure data sources into Microsoft Sentinel.
  • Hands-on experience supporting multi-cloud environments.
  • Experience building automated deployment pipelines for cloud infrastructure and security monitoring solutions.
  • Strong knowledge of observability, log management, and monitoring platforms.
  • Experience with Security Operations, Detection Engineering, or Security Monitoring environments.
  • Additional cloud, security, or DevOps certifications are highly desirable.

No C2C: We do not accept Corp-to-Corp (C2C) arrangements for this position.