Cloud Logging Integration Engineer

CINTER CAREER USA, LLC

United States

9 days ago

Apply on www.indeed.com

Prepare application

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience required

1 year minimum

Working hours

Regular working hours

Job source

www.indeed.com

Tech stack

Amazon Web Services Amazon Elastic Compute Cloud Amazon S3 Microsoft Azure Cloud Computing Cloud Computing Security Cloud Engineering Code Review Cyber Security DevOps Github Identity and Access Management

+29 more

Intrusion Detection and Prevention JSON Python (Programming Language) Log Analysis Parsing Role-Based Access Control Logstash Kusto Query Language Security Information and Event Management Amazon Simple Notification Service (SNS) SQL Databases Syslog Systems Integration Data Logging Data Ingestion Microsoft Power Automate Cloud Monitoring Multi-Cloud Amazon Virtual Private Cloud (VPC) Information Technology Deployment Automation AWS Fargate Microsoft Sentinel Functional Programming Cloudwatch Restful APIs Amazon Simple Queue Service (SQS) Terraform Software Version Control

Job description

Design, develop, deploy, and maintain Microsoft Sentinel log ingestion pipelines and Elastic Logstash configurations.
Build and support Azure logging infrastructure, including Data Collection Rules (DCRs), Data Collection Endpoints (DCEs), custom log tables, transformation rules, and Log Analytics workspaces.
Design and manage AWS log collection architectures leveraging S3, ECS/Fargate, SQS, SNS, Lambda, EFS, CloudWatch, IAM, EC2, VPC, and KMS.
Develop and optimize KQL queries to validate data ingestion and troubleshoot data-quality issues.
Investigate and resolve log ingestion failures, connector issues, authentication problems, and telemetry-related incidents across AWS and Azure environments.
Develop and maintain Infrastructure as Code (IaC) using Terraform and Terragrunt.
Automate cloud infrastructure deployments and operational workflows utilizing GitHub Actions.
Manage source code repositories, pull requests, and code review processes using GitHub.
Design and maintain integrations utilizing KQL, JSON, Python, Syslog, SQL, and REST APIs.
Ensure reliability, scalability, performance, and security of cloud-native logging and security telemetry solutions.
Collaborate with cloud, security, and engineering teams to support enterprise logging initiatives.
Document technical designs, operational procedures, and architecture standards.

Requirements

Strong hands-on experience with Microsoft Sentinel, log onboarding, and cloud security telemetry.
Expertise in designing and troubleshooting large-scale logging architectures across AWS and Azure.
Strong Infrastructure-as-Code experience using Terraform/Terragrunt.
Experience building and maintaining cloud automation through CI/CD pipelines and GitHub Actions.
Knowledge of log parsing, filtering, normalization, and transformation methodologies.
Strong analytical and troubleshooting skills for cloud infrastructure and security monitoring environments.
Ability to work independently in a remote environment while collaborating effectively across teams.
Experience integrating diverse cloud and security data sources into SIEM platforms.
Strong communication skills and ability to explain complex technical concepts to stakeholders.
Commitment to operational excellence, automation, and continuous improvement., * Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent professional experience.
5+ years of Cloud Engineering experience.
3+ years of hands-on experience with AWS and Azure cloud platforms.
2+ years of experience with Microsoft Sentinel or other enterprise SIEM platforms.
2+ years of experience developing Infrastructure as Code using Terraform.
2+ years of experience with Elastic Logstash or similar log processing technologies.
1+ year of experience with KQL, Python, and SQL.
Strong knowledge of Microsoft Sentinel log onboarding, ingestion, parsing, filtering, transformation, and troubleshooting.
Strong experience with AWS services including S3, ECS/Fargate, IAM, KMS, SNS, SQS, Lambda, EFS, EC2, VPC, and CloudWatch.
Strong understanding of Azure services including Microsoft Sentinel, Log Analytics, Azure Monitor, DCRs, DCEs, Logic Apps, Entra ID, and RBAC/IAM.
Experience implementing CI/CD pipelines using GitHub Actions.
Experience using GitHub for source control, pull requests, and code reviews.
Development experience utilizing KQL, JSON, Python, Syslog, SQL, and REST APIs.
Proven experience as a Data Engineer, Cloud Engineer, Security Engineer, SIEM Engineer, or similar infrastructure-focused role.
Must possess at least one active AWS or Microsoft Azure certification such as:
AWS Certified CloudOps Engineer - Associate
AWS Certified DevOps Engineer - Professional +, AWS Certified Solutions Architect (Associate or Professional), * Experience designing and supporting enterprise-scale logging and security telemetry architectures.
Experience integrating AWS, Azure, security, and infrastructure data sources into Microsoft Sentinel.
Hands-on experience supporting multi-cloud environments.
Experience building automated deployment pipelines for cloud infrastructure and security monitoring solutions.
Strong knowledge of observability, log management, and monitoring platforms.
Experience with Security Operations, Detection Engineering, or Security Monitoring environments.
Additional cloud, security, or DevOps certifications are highly desirable.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com

Prepare application

Good distractions

Loading talks and stories from around this role…