Cloud Logging Integration Engineer

・Job Title: Cloud Logging Integration Engineer
・Client: Japanese Global Automotive Group / Cybersecurity Division
・Working Location: Plano, TX 
・Employment Type: Contract
・Visa Support: No
・Working Hours: Standard Business Hours (CST)
・Language: English Fluent

• →Design, develop, deploy, and maintain Microsoft Sentinel log ingestion pipelines and Elastic Logstash configurations.
• →Build and support Azure logging infrastructure, including Data Collection Rules (DCRs), Data Collection Endpoints (DCEs), custom log tables, transformation rules, and Log Analytics workspaces.
• →Design and manage AWS log collection architectures leveraging S3, ECS/Fargate, SQS, SNS, Lambda, EFS, CloudWatch, IAM, EC2, VPC, and KMS.
• →Develop and optimize KQL queries to validate data ingestion and troubleshoot data-quality issues.
• →Investigate and resolve log ingestion failures, connector issues, authentication problems, and telemetry-related incidents across AWS and Azure environments.
• →Develop and maintain Infrastructure as Code (IaC) using Terraform and Terragrunt.
• →Automate cloud infrastructure deployments and operational workflows utilizing GitHub Actions.
• →Manage source code repositories, pull requests, and code review processes using GitHub.
• →Design and maintain integrations utilizing KQL, JSON, Python, Syslog, SQL, and REST APIs.
• →Ensure reliability, scalability, performance, and security of cloud-native logging and security telemetry solutions.
• →Collaborate with cloud, security, and engineering teams to support enterprise logging initiatives.
• →Document technical designs, operational procedures, and architecture standards.

• Strong hands-on experience with Microsoft Sentinel, log onboarding, and cloud security telemetry.
• Expertise in designing and troubleshooting large-scale logging architectures across AWS and Azure.
• Strong Infrastructure-as-Code experience using Terraform/Terragrunt.
• Experience building and maintaining cloud automation through CI/CD pipelines and GitHub Actions.
• Knowledge of log parsing, filtering, normalization, and transformation methodologies.
• Strong analytical and troubleshooting skills for cloud infrastructure and security monitoring environments.
• Ability to work independently in a remote environment while collaborating effectively across teams.
• Experience integrating diverse cloud and security data sources into SIEM platforms.
• Strong communication skills and ability to explain complex technical concepts to stakeholders.
• Commitment to operational excellence, automation, and continuous improvement.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent professional experience.
• 5+ years of Cloud Engineering experience.
• 3+ years of hands-on experience with AWS and Azure cloud platforms.
• 2+ years of experience with Microsoft Sentinel or other enterprise SIEM platforms.
• 2+ years of experience developing Infrastructure as Code using Terraform.
• 2+ years of experience with Elastic Logstash or similar log processing technologies.
• 1+ year of experience with KQL, Python, and SQL.
• Strong knowledge of Microsoft Sentinel log onboarding, ingestion, parsing, filtering, transformation, and troubleshooting.
• Strong experience with AWS services including S3, ECS/Fargate, IAM, KMS, SNS, SQS, Lambda, EFS, EC2, VPC, and CloudWatch.
• Strong understanding of Azure services including Microsoft Sentinel, Log Analytics, Azure Monitor, DCRs, DCEs, Logic Apps, Entra ID, and RBAC/IAM.
• Experience implementing CI/CD pipelines using GitHub Actions.
• Experience using GitHub for source control, pull requests, and code reviews.
• Development experience utilizing KQL, JSON, Python, Syslog, SQL, and REST APIs.
• Proven experience as a Data Engineer, Cloud Engineer, Security Engineer, SIEM Engineer, or similar infrastructure-focused role.
• Must possess at least one active AWS or Microsoft Azure certification such as:
  • AWS Certified CloudOps Engineer – Associate
  • AWS Certified DevOps Engineer – Professional
  • AWS Certified Solutions Architect (Associate or Professional)
  • AWS Certified Security – Specialty
  • Microsoft Azure Administrator Associate
  • Microsoft Azure Security Engineer Associate
  • Azure Solutions Architect Expert

• Experience designing and supporting enterprise-scale logging and security telemetry architectures.
• Experience integrating AWS, Azure, security, and infrastructure data sources into Microsoft Sentinel.
• Hands-on experience supporting multi-cloud environments.
• Experience building automated deployment pipelines for cloud infrastructure and security monitoring solutions.
• Strong knowledge of observability, log management, and monitoring platforms.
• Experience with Security Operations, Detection Engineering, or Security Monitoring environments.
• Additional cloud, security, or DevOps certifications are highly desirable.