Jobs → Engineering → Microsoft Sentinel Engineer / Architect

About the Role We are looking for a very senior, architect-level Microsoft Sentinel expert to lead the design, implementation, and automation of enterprise security solutions. Key Responsibilities • Lead the design, implementation, and automation of enterprise security solutions • Utilize advanced KQL for detection engineering and investigations • Work with Azure Security components including Defender for Cloud, Entra ID, Conditional Access, and Key Vault • Implement Microsoft Purview solutions including DLP, Sensitivity Labels, and Insider Risk Management • Develop and maintain security automation using Python and PowerShell scripting • Utilize Logic Apps and Azure Functions for workflow automation • Implement Infrastructure as Code using Terraform, Bicep, or ARM • Manage CI/CD pipelines with Git, Azure DevOps, or GitHub Requirements • 10+ years in Cloud Security, InfoSec, Security Architecture, or DevSecOps • 5+ years hands-on experience with Microsoft Sentinel (workspace architecture, analytics rules, SOAR playbooks, threat hunting) • Advanced KQL skills for detection engineering and investigations • Experience with Azure Security: Defender for Cloud, Entra ID, Conditional Access, Key Vault, Azure Policy • Experience with Microsoft Purview: DLP, Sensitivity Labels, Insider Risk Management • Proficiency in Python and PowerShell scripting • Experience with Logic Apps and Azure Functions • Experience with IaC: Terraform, Bicep, or ARM • Experience with CI/CD: Git, Azure DevOps, GitHub • Knowledge of SIEM/SOAR, EDR, WAF, IDS/IPS, and Incident Response Preferred • SC-200, SC-100, AZ-500 certifications • Experience with Defender XDR, MITRE ATT&CK, Detection-as-Code • Knowledge of Zero Trust architecture • Excellent communication skills