Cloud Logging Integration Engineer

Appathon; Plano (TX); Remote; USD 96,000 - 165,000; Full time

Job summary

Appathon is seeking a Senior Cloud Engineer focused on security telemetry and cloud logging in a remote-capable role based in Plano, TX. You will design and operate logging pipelines with Microsoft Sentinel and Elastic Logstash, ingest data, and automate IaC pipelines using Terraform and GitHub Actions.

Required are 5+ years in Cloud Engineering, hands-on AWS/Azure, and Terraform, with strong Sentinel and Log Analytics experience. A bachelor’s degree and active cloud certifications are expected.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent professional experience.
• 5+ years of experience in Cloud Engineering.
• 3+ years of hands-on experience with AWS and Azure cloud environments.
• 2+ years of experience with Microsoft Sentinel or enterprise SIEM platforms.
• 2+ years of experience with Terraform.
• 2+ years of experience with Elastic Logstash or similar technologies.
• 1+ years of experience with KQL, Python, and SQL.

Responsibilities

• Design, deploy, and maintain cloud-native logging pipelines using Microsoft Sentinel and Elastic Logstash.
• Implement log ingestion, parsing, filtering, transformation, and normalization processes.
• Develop and maintain Azure Data Collection Rules (DCRs), Data Collection Endpoints (DCEs), custom log tables, transformation rules, and Log Analytics workspaces.
• Integrate cloud and security data sources into Microsoft Sentinel and troubleshoot ingestion, connector, authentication, and data-quality issues.
• Design and manage AWS log collection architectures using S3, ECS/Fargate, SQS, SNS, Lambda, EFS, CloudWatch, IAM, EC2, VPC, and KMS.
• Automate cloud infrastructure deployments using Terraform/Terragrunt and GitHub Actions.

Skills

Cloud Engineering

AWS

Azure

Microsoft Sentinel

Terraform

Elastic Logstash

KQL

Python

SQL

Log Ingestion

Education

Bachelor's degree

Tools

Terraform

Terragrunt

GitHub Actions

Job description

Division: CybersecurityLocation: Plano, TexasWork Model: RemoteEmployment Type: ContractExperience Required: 5+ Years in Cloud EngineeringCertification: At Least One Active AWS or Microsoft Azure Certification Required

The role focuses on Microsoft Sentinel log ingestion, Elastic Logstash, cloud infrastructure automation, Infrastructure as Code (IaC), and security telemetry integration.

Key Responsibilities

Design, deploy, and maintain cloud-native logging pipelines using Microsoft Sentinel and Elastic Logstash.Implement log ingestion, parsing, filtering, transformation, and normalization processes.Develop and maintain Azure Data Collection Rules (DCRs), Data Collection Endpoints (DCEs), custom log tables, transformation rules, and Log Analytics workspaces.Integrate cloud and security data sources into Microsoft Sentinel and troubleshoot ingestion, connector, authentication, and data-quality issues.Design and manage AWS log collection architectures using S3, ECS/Fargate, SQS, SNS, Lambda, EFS, CloudWatch, IAM, EC2, VPC, and KMS.Manage Azure resources supporting security monitoring and log ingestion, including Azure Monitor, Log Analytics, Logic Apps, Entra ID, and RBAC/IAM.Automate cloud infrastructure deployments using Terraform/Terragrunt and GitHub Actions.

Required Qualifications

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent professional experience.

5+ years of experience in Cloud Engineering.3+ years of hands-on experience with AWS and Azure cloud environments.2+ years of experience with Microsoft Sentinel or enterprise SIEM platforms.2+ years of experience with Terraform.2+ years of experience with Elastic Logstash or similar technologies.1+ years of experience with KQL, Python, and SQL.

Strong experience with Microsoft Sentinel log onboarding, ingestion pipelines, parsing, filtering, transformation, and troubleshooting.Strong knowledge of AWS and Azure cloud architecture, services, security, and logging infrastructure.Experience with Terraform/Terragrunt, GitHub Actions, source control, pull requests, and code reviews.Development experience with KQL, JSON, Python, Syslog, SQL, and REST API integrations.Proven experience in Data Engineering or a similar role focused on data solutions.Strong analytical, troubleshooting, and problem-solving skills.

Mandatory Certification Requirement

Candidates must possess at least one active AWS or Microsoft Azure certification, such as:

AWS Certified CloudOps Engineer – AssociateAWS Certified DevOps Engineer – ProfessionalAWS Certified Solutions Architect – Associate or ProfessionalAWS Certified Security – SpecialtyMicrosoft Certified: Azure Administrator AssociateMicrosoft Certified: Azure Security Engineer AssociateMicrosoft Certified: Azure Solutions Architect Expert

Preferred Qualifications

Experience designing and supporting enterprise-scale security telemetry and cloud logging architectures.Experience integrating multiple cloud and security data sources into Microsoft Sentinel.Hands-on experience with logging infrastructure across AWS and Azure.Experience implementing automated cloud infrastructure deployments using CI/CD pipelines.Strong troubleshooting expertise across cloud services, identity and access management, log ingestion, and data quality.Experience optimizing security logging solutions for performance, scalability, and operational reliability.

Tools & Technologies

Cloud Platforms: AWS, Microsoft AzureSIEM & Logging: Microsoft Sentinel, Elastic Logstash, Azure Monitor, Log AnalyticsAzure Services: DCRs, DCEs, Logic Apps, Entra ID, RBAC/IAMAWS Services: S3, ECS/Fargate, SQS, SNS, Lambda, EFS, CloudWatch, IAM, EC2, VPC, KMSInfrastructure as Code: Terraform, TerragruntDevOps & CI/CD: GitHub, GitHub Actions, Pull Requests, Code ReviewsProgramming & Integration: KQL, Python, SQL, JSON, Syslog, REST APIs

Requirements

Required Qualifications

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent professional experience.

5+ years of experience in Cloud Engineering.

3+ years of hands-on experience with AWS and Azure cloud environments.

2+ years of experience with Microsoft Sentinel or enterprise SIEM platforms.

2+ years of experience with Terraform.

2+ years of experience with Elastic Logstash or similar technologies.

1+ years of experience with KQL, Python, and SQL.

Strong experience with Microsoft Sentinel log onboarding, ingestion pipelines, parsing, filtering, transformation, and troubleshooting.

Strong knowledge of AWS and Azure cloud architecture, services, security, and logging infrastructure.

Experience with Terraform/Terragrunt, GitHub Actions, source control, pull requests, and code reviews.

Development experience with KQL, JSON, Python, Syslog, SQL, and REST API integrations.

Proven experience in Data Engineering or a similar role focused on data solutions.

Strong analytical, troubleshooting, and problem-solving skills.

Mandatory Certification Requirement

Candidates must possess at least one active AWS or Microsoft Azure certification, such as:

AWS Certified Solutions Architect – Associate or Professional

AWS Certified Security – Specialty

Microsoft Certified: Azure Security Engineer Associate

Microsoft Certified: Azure Solutions Architect Expert

Preferred Qualifications

Experience designing and supporting enterprise-scale security telemetry and cloud logging architectures.

Experience integrating multiple cloud and security data sources into Microsoft Sentinel.

Hands-on experience with logging infrastructure across AWS and Azure.

Experience implementing automated cloud infrastructure deployments using CI/CD pipelines.

Strong troubleshooting expertise across cloud services, identity and access management, log ingestion, and data quality.

Experience optimizing security logging solutions for performance, scalability, and operational reliability.

Tools & Technologies

SIEM & Logging: Microsoft Sentinel, Elastic Logstash, Azure Monitor, Log Analytics

AWS Services: S3, ECS/Fargate, SQS, SNS, Lambda, EFS, CloudWatch, IAM, EC2, VPC, KMS

Infrastructure as Code: Terraform, Terragrunt

DevOps & CI/CD: GitHub, GitHub Actions, Pull Requests, Code Reviews

Programming & Integration: KQL, Python, SQL, JSON, Syslog, REST APIs

Skills

API Integration AWS Cloud Services Azure Cloud Services Cloud Logging Integration Data Pipeline Development Datadog Google Cloud Platform (GCP) Log Ingestion and Parsing Log Management Monitoring and Alerting Python Scripting SIEM Integration Splunk SQL Troubleshooting and Root Cause Analysis