Microsoft Sentinel Engineer or Architect

Senior Microsoft Sentinel Engineer / Architect

Location: 100% Remote or Dallas, TX / Wilmington, DE
Job Type: Contract
Experience: 15+ Years

We are seeking a highly experienced Senior Microsoft Sentinel Engineer / Architect to lead the design, implementation, optimization, and automation of enterprise security solutions.

Key Responsibilities

• Design and optimize Microsoft Sentinel SIEM architecture and deployments.

• Develop advanced KQL queries, analytics rules, workbooks, and threat-hunting solutions.

• Build SOAR playbooks using Azure Logic Apps and Azure Functions.

• Implement Azure security controls using Microsoft Defender, Entra ID, Conditional Access, and Azure Policy.

• Administer Microsoft Purview, including DLP and information protection.

• Develop security automation using Python, PowerShell, REST APIs, and webhooks.

• Implement Infrastructure as Code using Terraform, Bicep, or ARM templates.

• Manage security content and CI/CD pipelines using Git, Azure DevOps, or GitHub.

• Support security investigations, incident response, and MITRE ATT&CK-based detection engineering.

Required Qualifications

• 15+ years of experience in cloud security, information security, security architecture, or DevSecOps.

• 5+ years of hands-on Microsoft Sentinel engineering and architecture experience.

• Strong expertise in KQL, SIEM/SOAR, threat hunting, and detection engineering.

• Hands-on experience with Azure security, Microsoft Defender, Entra ID, and Microsoft Purview.

• Experience with Python, PowerShell, Logic Apps, Azure Functions, and Infrastructure as Code.

• Strong background in security incident investigation and enterprise security solutions.

Preferred Certifications
SC-200, SC-100, AZ-500, or equivalent Microsoft security certifications.