Senior Microsoft Sentinel Engineer / Architect
Location: 100% Remote or Dallas, TX / Wilmington, DE
Job Type: Contract
Experience: 15+ Years
We are seeking a highly experienced Senior Microsoft Sentinel Engineer / Architect to lead the design, implementation, optimization, and automation of enterprise security solutions.
Key Responsibilities
Design and optimize Microsoft Sentinel SIEM architecture and deployments.
Develop advanced KQL queries, analytics rules, workbooks, and threat-hunting solutions.
Build SOAR playbooks using Azure Logic Apps and Azure Functions.
Implement Azure security controls using Microsoft Defender, Entra ID, Conditional Access, and Azure Policy.
Administer Microsoft Purview, including DLP and information protection.
Develop security automation using Python, PowerShell, REST APIs, and webhooks.
Implement Infrastructure as Code using Terraform, Bicep, or ARM templates.
Manage security content and CI/CD pipelines using Git, Azure DevOps, or GitHub.
Support security investigations, incident response, and MITRE ATT&CK-based detection engineering.
Required Qualifications
15+ years of experience in cloud security, information security, security architecture, or DevSecOps.
5+ years of hands-on Microsoft Sentinel engineering and architecture experience.
Strong expertise in KQL, SIEM/SOAR, threat hunting, and detection engineering.
Hands-on experience with Azure security, Microsoft Defender, Entra ID, and Microsoft Purview.
Experience with Python, PowerShell, Logic Apps, Azure Functions, and Infrastructure as Code.
Strong background in security incident investigation and enterprise security solutions.
Preferred Certifications
SC-200, SC-100, AZ-500, or equivalent Microsoft security certifications.
