Cloud Logging Integration Engineer Microsoft Sentinel & AWS/Azure Security Telemetry (Remote Contract)

• Develop, deploy, and maintain Elastic Logstash configurations and Microsoft Sentinel log ingestion pipelines
• Build and manage Azure resources including DCRs, DCEs, custom log tables, transformation rules, and Log Analytics workspaces
• Architect AWS log collection solutions using S3, ECS/Fargate, SQS, SNS, Lambda, EFS, CloudWatch, IAM, EC2, VPC, and KMS
• Write KQL queries to validate ingestion and troubleshoot data-quality issues
• Diagnose and resolve ingestion failures, connector issues, and authentication problems across AWS and Azure
• Manage infrastructure as code using Terraform/Terragrunt and automate deployments via GitHub Actions
• Lead code reviews and manage source-code lifecycle through GitHub repositories
• Build integrations using KQL, JSON, Python, Syslog, SQL, and REST APIs

Ideal Candidates Will Have:

• A track record of designing enterprise-scale security telemetry architectures
• Experience integrating diverse cloud and security data sources into Microsoft Sentinel
• Hands-on expertise across both AWS and Azure logging ecosystems
• Strong CI/CD automation experience for infrastructure and telemetry deployments

• 5+ years in Cloud Engineering; 3+ years with AWS and Azure
• 2+ years with Microsoft Sentinel or enterprise SIEM platforms
• 2+ years with Terraform and Elastic Logstash (or similar)
• 1+ years with KQL, Python, and SQL
• Active AWS or Azure certification (e.g., AWS Security Specialty, Azure Security Engineer Associate)

Other Skills:

• Strong troubleshooting skills across cloud infrastructure, authentication, and data quality
• Familiarity with Entra ID, RBAC/IAM, and Logic Apps
• Bachelor’s degree in Computer Science, IT, Cybersecurity, or equivalent experience

Important Notes:

• Candidates must be able to clearly explain how they’ve designed and maintained log-ingestion pipelines this is a core screening criterion.
• A traditional data engineering background is acceptable, but practical experience in cloud security, SIEM/Sentinel, and log-pipeline integration is essential.

Calance is a global IT company with operations in the United States, Canada, and India. Over the years, Calance has grown organically and has acquired numerous successful IT Services firms along the way. As a result, the company today is a mix of diverse cultures, talents, and expertise that collaborate globally to bring our best capabilities and thinking to clients. Calance also offers benefits which includes Medical, Dental, Vision care, and 401K.

Calance - the place to grow.

www.calance.com