Onsite Azure Sentinel Engineer – GovCloud Security

Experis; Marietta (GA); On-site; USD 140,000 - 170,000; Full time

Job summary

Experis is seeking an Azure Cloud Sentinel Engineer to support a federal government program in Marietta, GA. The role is 100% onsite with a contract-to-hire path, focusing on hands-on detection engineering in a GovCloud Azure environment.

You will own Microsoft Sentinel end-to-end: onboarding data sources, tuning KQL analytics, building automated playbooks, and hunting threats alongside the SOC. A strong background in Azure security and zero-trust practices is required.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 5+ years cybersecurity experience with substantial hands-on Microsoft Sentinel administration and engineering.
• Hands-on within last 12 months with: Microsoft Sentinel, Azure Log Analytics, KQL, Azure Logic Apps, Defender suite, Azure security/identity services.
• PAM and IAM concepts.
• CI/CD security and application security scanning.
• Configuring and securing enterprise Azure environments.
• Knowledge of Zero Trust architecture and cloud security best practices.
• US Citizen or Green Card holder with 3+ years US residence and work history; federal background check required; on-site in Marietta, GA five days/week.

Responsibilities

• Design, implement, and maintain Microsoft Sentinel SIEM/SOAR.
• Onboard and manage security data sources into Azure Log Analytics (Syslog, CEF, REST APIs, threat intel).
• Write and tune KQL queries, analytics rules, alerts, and workbooks.
• Build automated response playbooks with Azure Logic Apps.
• Perform threat hunting, incident investigation, and response with SOC teams.
• Implement Azure security controls aligned to Zero Trust.
• Assess vulnerabilities, analyze attacker TTPs, and drive remediation.
• Support governance, compliance, and audit activity across FedRAMP and FISMA requirements.

Skills

Microsoft Sentinel administration

KQL (Kusto)

Azure Logic Apps

Microsoft Defender suite

Azure security services

PAM and IAM concepts

Threat hunting

Zero Trust architecture

Education

Bachelor’s degree in Cybersecurity/CS/IT

Tools

Azure Log Analytics

Syslog/CEF data onboarding

REST APIs integration

Threat intelligence feeds

Job description

Experis is seeking an Azure Cloud Sentinel Engineer to support a federal government program in Marietta, GA. The role is 100% onsite with a contract-to-hire path, focusing on hands-on detection engineering in a GovCloud Azure environment.

You will own Microsoft Sentinel end-to-end: onboarding data sources, tuning KQL analytics, building automated playbooks, and hunting threats alongside the SOC. A strong background in Azure security and zero-trust practices is required.