Cloud Logging Integration Engineer Microsoft Sentinel & AWS​/Azure Security Telemetry; Remote

Job Title Cloud Logging Integration Engineer Microsoft Sentinel & AWS/Azure Security Telemetry (Remote Contract) -

Duration 1 year

Start Date ASAP

Location Plano, TX

Our Client: A global leader in enterprise technology and mobility solutions, Our Client is seeking a Cloud Logging Integration Engineer. This role offers the chance to architect mission‑critical security telemetry infrastructure across AWS and Azure, directly strengthening enterprise‑wide threat visibility and resilience.

Cloud Logging Integration Engineer

Contract 1 year +

Plano, Texas, United States

Remote (Hybrid Preferred)

Join a high‑impact Cybersecurity Division where your expertise in cloud‑native logging architecture will directly shape enterprise security posture. You'll design, build, and troubleshoot Microsoft Sentinel log ingestion pipelines while integrating complex AWS and Azure data sources into a unified security telemetry platform. This is a hands‑on engineering role for someone who thrives at the intersection of cloud infrastructure, automation, and security operations—building the pipelines that power real‑time threat detection  you can clearly articulate how you've designed and maintained log‑injection pipelines end‑to‑end, this role is built for you.

• Develop, deploy, and maintain Elastic Logstash configurations and Microsoft Sentinel log ingestion pipelines
• Build and manage Azure resources including DCRs, DCEs, custom log tables, transformation rules, and Log Analytics work spaces
• Architect AWS log collection solutions using S3, ECS/Fargate, SQS, SNS, Lambda, EFS, Cloud Watch, IAM, EC2, VPC, and KMS
• Write KQL queries to validate ingestion and troubleshoot data‑quality issues
• Diagnose and resolve ingestion failures, connector issues, and authentication problems across AWS and Azure
• Manage infrastructure as code using Terraform/Terragrunt and automate deployments via Git Hub Actions
• Lead code reviews and manage source‑code lifecycle through Git Hub repositories
• Build integrations using KQL, JSON, Python, Syslog, SQL, and REST APIs

• A track record of designing enterprise‑scale security telemetry architectures
• Experience integrating diverse cloud and security data sources into Microsoft Sentinel
• Hands‑on expertise across both AWS and Azure logging ecosystems
• Strong CI/CD automation experience for infrastructure and telemetry deployments

• 5+ years in Cloud Engineering; 3+ years with AWS and Azure
• 2+ years with Microsoft Sentinel or enterprise SIEM platforms
• 2+ years with Terraform and Elastic Logstash (or similar)
• 1+ years with KQL, Python, and SQL
• Active AWS or Azure certification (e.g., AWS Security Specialty, Azure Security Engineer Associate)

• Strong troubleshooting skills across cloud infrastructure, authentication, and data quality
• Familiarity with Entra , RBAC/IAM, and Logic Apps
• Bachelor's degree in Computer Science, IT, Cybersecurity, or equivalent experience

• Candidates must be able to clearly explain how they've designed and maintained log‑injection pipelines—this is a core screening criterion.
• A traditional data engineering background is acceptable, but practical experience in cloud security, SIEM/Sentinel, and log‑pipeline integration is essential.

• EPO/PPO Medical Plan (Anthem)
• HMO/PPO Dental programs (Anthem)
• Vision - VSP (Met Life)
• 401K VOYA Retirement vesting program

Calance is a global IT company with operations in the United States, Canada, and India. Over the years, Calance has grown organically and has acquired numerous successful IT Services firms along the way. As a result, the company today is a mix of diverse cultures, talents, and expertise that collaborate globally to bring our best capabilities and thinking to clients. Calance also offers benefits which includes Medical, Dental, Vision care, and 401K.

Pay Range - $/hr W2

Calance homepage: