Microsoft Sentinel Engineer or Architect

Summary

Senior Microsoft Sentinel Engineer / Architect

Location: 100% Remote or Dallas, TX / Wilmington, DE

Job Type: Contract

Experience: 15+ Years

We are seeking a highly experienced Senior Microsoft Sentinel Engineer / Architect to lead the design, implementation, optimization, and automation of enterprise security solutions.

Key Responsibilities

• Design and optimize Microsoft Sentinel SIEM architecture and deployments.
• Develop advanced KQL queries, analytics rules, workbooks, and threat-hunting solutions.
• Build SOAR playbooks using Azure Logic Apps and Azure Functions.
• Implement Azure security controls using Microsoft Defender, Entra ID, Conditional Access, and Azure Policy.
• Administer Microsoft Purview, including DLP and information protection.
• Develop security automation using Python, PowerShell, REST APIs, and webhooks.
• Implement Infrastructure as Code using Terraform, Bicep, or ARM templates.
• Manage security content and CI/CD pipelines using Git, Azure DevOps, or GitHub.
• Support security investigations, incident response, and MITRE ATT&CK-based detection engineering.

Required Qualifications

• 15+ years of experience in cloud security, information security, security architecture, or DevSecOps.
• 5+ years of hands-on Microsoft Sentinel engineering and architecture experience.
• Strong expertise in KQL, SIEM/SOAR, threat hunting, and detection engineering.
• Hands-on experience with Azure security, Microsoft Defender, Entra ID, and Microsoft Purview.
• Experience with Python, PowerShell, Logic Apps, Azure Functions, and Infrastructure as Code.
• Strong background in security incident investigation and enterprise security solutions.

Preferred Certifications: SC-200, SC-100, AZ-500, or equivalent Microsoft security certifications.