What are the responsibilities and job description for the Cloud Logging Integration Engineer position at Appathon.Ai?
Hiring: Cloud Logging Integration Engineer
Division: Cybersecurity Location: Plano, Texas Work Model: Remote Employment Type: Contract Experience Required: 5 Years in Cloud Engineering Certification: At Least One Active AWS or Microsoft Azure Certification Required
The role focuses on Microsoft Sentinel log ingestion, Elastic Logstash, cloud infrastructure automation, Infrastructure as Code (IaC), and security telemetry integration.
Key Responsibilities:-
Design, deploy, and maintain cloud-native logging pipelines using Microsoft Sentinel and Elastic Logstash. Implement log ingestion, parsing, filtering, transformation, and normalization processes. Develop and maintain Azure Data Collection Rules (DCRs), Data Collection Endpoints (DCEs), custom log tables, transformation rules, and Log Analytics workspaces. Integrate cloud and security data sources into Microsoft Sentinel and troubleshoot ingestion, connector, authentication, and data-quality issues. Design and manage AWS log collection architectures using S3, ECS/Fargate, SQS, SNS, Lambda, EFS, CloudWatch, IAM, EC2, VPC, and KMS. Manage Azure resources supporting security monitoring and log ingestion, including Azure Monitor, Log Analytics, Logic Apps, Entra ID, and RBAC/IAM. Automate cloud infrastructure deployments using Terraform/Terragrunt and GitHub Actions.
Required Qualifications:-
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent professional experience.
5 years of experience in Cloud Engineering. 3 years of hands-on experience with AWS and Azure cloud environments. 2 years of experience with Microsoft Sentinel or enterprise SIEM platforms. 2 years of experience with Terraform. 2 years of experience with Elastic Logstash or similar technologies. 1 years of experience with KQL, Python, and SQL.
Strong experience with Microsoft Sentinel log onboarding, ingestion pipelines, parsing, filtering, transformation, and troubleshooting. Strong knowledge of AWS and Azure cloud architecture, services, security, and logging infrastructure. Experience with Terraform/Terragrunt, GitHub Actions, source control, pull requests, and code reviews. Development experience with KQL, JSON, Python, Syslog, SQL, and REST API integrations. Proven experience in Data Engineering or a similar role focused on data solutions. Strong analytical, troubleshooting, and problem-solving skills.
Mandatory Certification Requirement:-
Candidates must possess at least one active AWS or Microsoft Azure certification, such as: AWS Certified CloudOps Engineer – Associate AWS Certified DevOps Engineer – Professional AWS Certified Solutions Architect – Associate or Professional AWS Certified Security – Specialty Microsoft Certified: Azure Administrator Associate Microsoft Certified: Azure Security Engineer Associate Microsoft Certified: Azure Solutions Architect Expert
Preferred Qualifications:-
Experience designing and supporting enterprise-scale security telemetry and cloud logging architectures. Experience integrating multiple cloud and security data sources into Microsoft Sentinel. Hands-on experience with logging infrastructure across AWS and Azure. Experience implementing automated cloud infrastructure deployments using CI/CD pipelines. Strong troubleshooting expertise across cloud services, identity and access management, log ingestion, and data quality. Experience optimizing security logging solutions for performance, scalability, and operational reliability.
Tools & Technologies:-
Cloud Platforms: AWS, Microsoft Azure SIEM & Logging: Microsoft Sentinel, Elastic Logstash, Azure Monitor, Log Analytics Azure Services: DCRs, DCEs, Logic Apps, Entra ID, RBAC/IAM AWS Services: S3, ECS/Fargate, SQS, SNS, Lambda, EFS, CloudWatch, IAM, EC2, VPC, KMS Infrastructure as Code: Terraform, Terragrunt DevOps & CI/CD: GitHub, GitHub Actions, Pull Requests, Code Reviews Programming & Integration: KQL, Python, SQL, JSON, Syslog, REST APIs
Required Qualifications:-
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent professional experience.
5 years of experience in Cloud Engineering.
3 years of hands-on experience with AWS and Azure cloud environments.
2 years of experience with Microsoft Sentinel or enterprise SIEM platforms.
2 years of experience with Terraform.
2 years of experience with Elastic Logstash or similar technologies.
1 years of experience with KQL, Python, and SQL.
Strong experience with Microsoft Sentinel log onboarding, ingestion pipelines, parsing, filtering, transformation, and troubleshooting.
Strong knowledge of AWS and Azure cloud architecture, services, security, and logging infrastructure.
Experience with Terraform/Terragrunt, GitHub Actions, source control, pull requests, and code reviews.
Development experience with KQL, JSON, Python, Syslog, SQL, and REST API integrations.
Proven experience in Data Engineering or a similar role focused on data solutions.
Strong analytical, troubleshooting, and problem-solving skills.
Mandatory Certification Requirement:-
Candidates must possess at least one active AWS or Microsoft Azure certification, such as:
AWS Certified CloudOps Engineer – Associate
AWS Certified DevOps Engineer – Professional
AWS Certified Solutions Architect – Associate or Professional
AWS Certified Security – Specialty
Microsoft Certified: Azure Administrator Associate
Microsoft Certified: Azure Security Engineer Associate
Microsoft Certified: Azure Solutions Architect Expert
Preferred Qualifications:-
Experience designing and supporting enterprise-scale security telemetry and cloud logging architectures.
Experience integrating multiple cloud and security data sources into Microsoft Sentinel.
Hands-on experience with logging infrastructure across AWS and Azure.
Experience implementing automated cloud infrastructure deployments using CI/CD pipelines.
Strong troubleshooting expertise across cloud services, identity and access management, log ingestion, and data quality.
Experience optimizing security logging solutions for performance, scalability, and operational reliability.
Tools & Technologies:-
Cloud Platforms: AWS, Microsoft Azure
SIEM & Logging: Microsoft Sentinel, Elastic Logstash, Azure Monitor, Log Analytics
Azure Services: DCRs, DCEs, Logic Apps, Entra ID, RBAC/IAM
AWS Services: S3, ECS/Fargate, SQS, SNS, Lambda, EFS, CloudWatch, IAM, EC2, VPC, KMS
Infrastructure as Code: Terraform, Terragrunt
DevOps & CI/CD: GitHub, GitHub Actions, Pull Requests, Code Reviews
Programming & Integration: KQL, Python, SQL, JSON, Syslog, REST APIs
Division: Cybersecurity Location: Plano, Texas Work Model: Remote Employment Type: Contract Experience Required: 5 Years in Cloud Engineering Certification: At Least One Active AWS or Microsoft Azure Certification Required
The role focuses on Microsoft Sentinel log ingestion, Elastic Logstash, cloud infrastructure automation, Infrastructure as Code (IaC), and security telemetry integration.
Key Responsibilities:-
Design, deploy, and maintain cloud-native logging pipelines using Microsoft Sentinel and Elastic Logstash. Implement log ingestion, parsing, filtering, transformation, and normalization processes. Develop and maintain Azure Data Collection Rules (DCRs), Data Collection Endpoints (DCEs), custom log tables, transformation rules, and Log Analytics workspaces. Integrate cloud and security data sources into Microsoft Sentinel and troubleshoot ingestion, connector, authentication, and data-quality issues. Design and manage AWS log collection architectures using S3, ECS/Fargate, SQS, SNS, Lambda, EFS, CloudWatch, IAM, EC2, VPC, and KMS. Manage Azure resources supporting security monitoring and log ingestion, including Azure Monitor, Log Analytics, Logic Apps, Entra ID, and RBAC/IAM. Automate cloud infrastructure deployments using Terraform/Terragrunt and GitHub Actions.
Required Qualifications:-
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent professional experience.
5 years of experience in Cloud Engineering. 3 years of hands-on experience with AWS and Azure cloud environments. 2 years of experience with Microsoft Sentinel or enterprise SIEM platforms. 2 years of experience with Terraform. 2 years of experience with Elastic Logstash or similar technologies. 1 years of experience with KQL, Python, and SQL.
Strong experience with Microsoft Sentinel log onboarding, ingestion pipelines, parsing, filtering, transformation, and troubleshooting. Strong knowledge of AWS and Azure cloud architecture, services, security, and logging infrastructure. Experience with Terraform/Terragrunt, GitHub Actions, source control, pull requests, and code reviews. Development experience with KQL, JSON, Python, Syslog, SQL, and REST API integrations. Proven experience in Data Engineering or a similar role focused on data solutions. Strong analytical, troubleshooting, and problem-solving skills.
Mandatory Certification Requirement:-
Candidates must possess at least one active AWS or Microsoft Azure certification, such as: AWS Certified CloudOps Engineer – Associate AWS Certified DevOps Engineer – Professional AWS Certified Solutions Architect – Associate or Professional AWS Certified Security – Specialty Microsoft Certified: Azure Administrator Associate Microsoft Certified: Azure Security Engineer Associate Microsoft Certified: Azure Solutions Architect Expert
Preferred Qualifications:-
Experience designing and supporting enterprise-scale security telemetry and cloud logging architectures. Experience integrating multiple cloud and security data sources into Microsoft Sentinel. Hands-on experience with logging infrastructure across AWS and Azure. Experience implementing automated cloud infrastructure deployments using CI/CD pipelines. Strong troubleshooting expertise across cloud services, identity and access management, log ingestion, and data quality. Experience optimizing security logging solutions for performance, scalability, and operational reliability.
Tools & Technologies:-
Cloud Platforms: AWS, Microsoft Azure SIEM & Logging: Microsoft Sentinel, Elastic Logstash, Azure Monitor, Log Analytics Azure Services: DCRs, DCEs, Logic Apps, Entra ID, RBAC/IAM AWS Services: S3, ECS/Fargate, SQS, SNS, Lambda, EFS, CloudWatch, IAM, EC2, VPC, KMS Infrastructure as Code: Terraform, Terragrunt DevOps & CI/CD: GitHub, GitHub Actions, Pull Requests, Code Reviews Programming & Integration: KQL, Python, SQL, JSON, Syslog, REST APIs
Required Qualifications:-
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent professional experience.
5 years of experience in Cloud Engineering.
3 years of hands-on experience with AWS and Azure cloud environments.
2 years of experience with Microsoft Sentinel or enterprise SIEM platforms.
2 years of experience with Terraform.
2 years of experience with Elastic Logstash or similar technologies.
1 years of experience with KQL, Python, and SQL.
Strong experience with Microsoft Sentinel log onboarding, ingestion pipelines, parsing, filtering, transformation, and troubleshooting.
Strong knowledge of AWS and Azure cloud architecture, services, security, and logging infrastructure.
Experience with Terraform/Terragrunt, GitHub Actions, source control, pull requests, and code reviews.
Development experience with KQL, JSON, Python, Syslog, SQL, and REST API integrations.
Proven experience in Data Engineering or a similar role focused on data solutions.
Strong analytical, troubleshooting, and problem-solving skills.
Mandatory Certification Requirement:-
Candidates must possess at least one active AWS or Microsoft Azure certification, such as:
AWS Certified CloudOps Engineer – Associate
AWS Certified DevOps Engineer – Professional
AWS Certified Solutions Architect – Associate or Professional
AWS Certified Security – Specialty
Microsoft Certified: Azure Administrator Associate
Microsoft Certified: Azure Security Engineer Associate
Microsoft Certified: Azure Solutions Architect Expert
Preferred Qualifications:-
Experience designing and supporting enterprise-scale security telemetry and cloud logging architectures.
Experience integrating multiple cloud and security data sources into Microsoft Sentinel.
Hands-on experience with logging infrastructure across AWS and Azure.
Experience implementing automated cloud infrastructure deployments using CI/CD pipelines.
Strong troubleshooting expertise across cloud services, identity and access management, log ingestion, and data quality.
Experience optimizing security logging solutions for performance, scalability, and operational reliability.
Tools & Technologies:-
Cloud Platforms: AWS, Microsoft Azure
SIEM & Logging: Microsoft Sentinel, Elastic Logstash, Azure Monitor, Log Analytics
Azure Services: DCRs, DCEs, Logic Apps, Entra ID, RBAC/IAM
AWS Services: S3, ECS/Fargate, SQS, SNS, Lambda, EFS, CloudWatch, IAM, EC2, VPC, KMS
Infrastructure as Code: Terraform, Terragrunt
DevOps & CI/CD: GitHub, GitHub Actions, Pull Requests, Code Reviews
Programming & Integration: KQL, Python, SQL, JSON, Syslog, REST APIs