> Markdown version of [/jobs/ext/1978122-azure-cloud-sentinel-engineer](https://www.wearedevelopers.com/jobs/ext/1978122-azure-cloud-sentinel-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Azure Cloud Sentinel Engineer - **Company:** Experis - **Location:** Marietta, GA, United States - **Experience:** Expert - **Contract:** Temporary to permanent - **Skills:** Microsoft Azure, Cloud Computing, Cloud Computing Security, System Configuration, Microsoft Office, ArcSight SIEM Tool, Zero Trust Network Access, EndPointSecurity, Software Security, QRadar, Microsoft Sentinel, Splunk, Key Vault - **Published:** August 7, 2026 - **Apply:** https://www.experis.com/en/job/407301/azure-cloud-sentinel-engineer ## About the Role * Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field * 5+ years cybersecurity experience with substantial hands-on Microsoft Sentinel administration and engineering * Hands-on, current experience (within the last 12 months) with: Microsoft Sentinel, Azure Log Analytics, Kusto Query Language (KQL), Azure Logic Apps, Microsoft Defender suite, Azure security and identity services * Privileged Access Management (PAM) and Identity and Access Management concepts * CI/CD security and application security scanning * Configuring and securing enterprise Azure environments * Working knowledge of Zero Trust architecture and cloud security best practices * US Citizen or Green Card holder with 3+ years continuous US residence and work history. No offshore work within that window. Federal background check required - allow 4-8 weeks. * Willing and able to work onsite in Marietta, GA five days per week * Open to converting to full-time employment with the client Preferred * Azure Government (GovCloud) experience * FISMA, FedRAMP, and NIST 800-53 compliance experience * Certifications: SC-200, AZ-500, SC-100, CISSP, CCSP - current, not lapsed * Microsoft Defender XDR: Defender for Endpoint, Office 365, Identity, Cloud Apps * Data protection: Microsoft Purview, MIP, DLP, Key Vault * Identity: Entra ID, PIM, Conditional Access, Azure Lighthouse * Experience migrating an organization from Splunk, QRadar, ArcSight, or LogRhythm onto Sentinel * Prior work with government clients, auditors, and executive stakeholders ## Description Our client, a Fortune 500 financial technology company, is hiring an Azure Sentinel Engineer to support a federal government program. This is hands-on detection engineering in an Azure Government (GovCloud) environment - building the security monitoring capability, not triaging alerts on someone else's. You'll own Microsoft Sentinel end to end: onboarding data sources, writing and tuning KQL analytics rules, building automated response playbooks, and hunting threats alongside the SOC. The program operates under FedRAMP and FISMA, so security work here is measured against real federal controls. What You'll Do * Design, implement, and maintain Microsoft Sentinel SIEM/SOAR * Onboard and manage security data sources into Azure Log Analytics - Syslog, CEF, REST APIs, threat intelligence feeds * Write and tune KQL queries, analytics rules, alerts, and workbooks * Build automated response playbooks with Azure Logic Apps * Perform threat hunting, incident investigation, and response with SOC teams * Implement Azure security controls aligned to Zero Trust * Assess vulnerabilities, analyze attacker TTPs, and drive remediation * Support cloud security governance, compliance, and audit activity across FedRAMP and FISMA requirements * Provide security architecture guidance on cloud security strategy ## Related Videos - [Best Practices for Using GitHub Secrets](https://www.wearedevelopers.com/videos/1214-best-practices-for-using-github-secrets) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Building Sovereign AI: Lessons from Deploying Secure RAG Systems using Confidential Computing](https://www.wearedevelopers.com/videos/100108-building-sovereign-ai-lessons-from-deploying-secure-rag-systems-using-confidential-computing) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)