Cloud Logging Integration Engineer

This is a fully remote position, open to applicants in Texas.

📋 Description

• Design, implement, and sustain Elastic Logstash configurations along with Microsoft Sentinel log ingestion pipelines.

• Create and manage Azure resources, which include Data Collection Rules, Data Collection Endpoints, customized log tables, transformation rules, and Log Analytics workspaces.

• Architect, deploy, and oversee AWS log-collection frameworks utilizing S3, ECS/Fargate, SQS, SNS, Lambda, EFS, CloudWatch, IAM, EC2, VPC, and KMS.

• Formulate KQL queries to verify data ingestion and address logging and data integrity issues.

• Diagnose ingestion failures, connector malfunctions, authentication challenges, and data quality issues across AWS and Azure logging infrastructures.

• Develop and oversee AWS and Azure infrastructure utilizing Terraform/Terragrunt.

• Automate infrastructure deployments via GitHub Actions.

• Oversee the source-code development lifecycle, including pull requests and code reviews, using GitHub repositories and IDEs.

• Create and maintain integrations using KQL, JSON, Python, Syslog, SQL, and REST APIs.

• Ensure reliability, scalability, and performance of cloud-based security telemetry and logging solutions.

• Be available for occasional evening and weekend work as necessary.

• Travel as required based on business needs.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or relevant professional experience.

• Over 5 years of experience in Cloud Engineering.

• More than 3 years of experience working with AWS and Azure cloud environments.

• At least 2 years of experience with Microsoft Sentinel or enterprise SIEM platforms.

• Minimum of 2 years of experience with Terraform.

• A minimum of 2 years of experience with Elastic Logstash or a comparable technology.

• Over 1 year of experience with KQL, Python, and SQL.

• Strong understanding of Microsoft Sentinel log onboarding and data ingestion processes, including parsing, filtering, transformation, and troubleshooting using Elastic Logstash or similar tools.

• Solid knowledge of AWS services such as S3, ECS/Fargate, IAM, KMS, SNS, SQS, Lambda, EFS, EC2, VPC, and CloudWatch.

• Comprehensive knowledge of Microsoft Azure, including Tenant/Subscription/Resource Group architecture, Microsoft Sentinel, Log Analytics, Azure Monitor, DCRs, DCEs, Logic Apps, Entra ID, and RBAC/IAM.

• Experience in developing Infrastructure as Code using Terraform/Terragrunt and executing automated deployments through GitHub Actions.

• Proficient in using GitHub for source control and IDEs for development purposes.

• Development experience with KQL, JSON, Python, Syslog, SQL, and REST API-based integrations.

• Demonstrated experience as a Data Engineer or in a comparable role emphasizing data solutions.

• Must hold at least one active certification from AWS or Microsoft Azure, such as AWS Certified CloudOps Engineer – Associate, AWS Certified DevOps Engineer – Professional, AWS Certified Solutions Architect – Associate or Professional, AWS Certified Security – Specialty, Microsoft Azure Administrator Associate, Microsoft Azure Security Engineer Associate, or Azure Solutions Architect Expert.

• Preferred: experience in designing and supporting enterprise-scale security telemetry and logging architectures.

• Preferred: familiarity with integrating various cloud and security data sources into Microsoft Sentinel.

• Preferred: practical experience with both AWS and Azure logging infrastructures.

• Preferred: experience in automating cloud infrastructure and security telemetry deployments via CI/CD pipelines.

• Preferred: strong troubleshooting skills across cloud infrastructure, authentication, log ingestion, and data quality issues.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Opportunities for professional development and continuous learning.

• Flexible work hours and remote work options.

• Generous vacation and paid time off policy.