Microsoft Sentinel Architect (26-02120) -

100% Remote.

Location

Remote.

Duration

12 Month

Job Description

seeking an experienced Azure Cloud Sentinel Engineer to support a key government client. This role is responsible for designing, implementing, and managing Microsoft Sentinel and Azure security solutions to detect, investigate, and respond to cyber threats while ensuring compliance with government security requirements.

Key Responsibilities

• Design, implement, and maintain Microsoft Sentinel SIEM/SOAR solutions.
• Ingest and manage security data sources into Azure Log Analytics (Syslog, CEF, APIs, Threat Intelligence feeds).
• Develop and tune KQL queries, analytics rules, alerts, and dashboards.
• Build automated response playbooks using Azure Logic Apps and Microsoft Copilot for Security.
• Perform threat hunting, incident investigation, and response activities with SOC teams.
• Implement and manage Azure security controls aligned with Zero Trust principles.
• Assess vulnerabilities, analyze attacker TTPs, and support remediation efforts.
• Support cloud security governance, compliance, and audit activities, including FedRAMP and FISMA requirements.
• Provide security architecture guidance and contribute to cloud security strategy initiatives.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 5+ years of cybersecurity experience, including 5+ years of hands-on Microsoft Sentinel administration and engineering.
• Strong experience with:
• Microsoft Sentinel, Azure Log Analytics, Kusto Query Language (KQL), Azure Logic Apps, Microsoft Defender Suite, Azure Security and Identity Services, Privileged Access Management (PAM), CI/CD security and application security scanning, Experience configuring and securing enterprise Azure environments.
• Knowledge of Zero Trust architecture and cloud security best-practices.

Preferred Qualifications

• Azure Government (GovCloud) experience.
• Experience supporting FISMA, FedRAMP, and NIST compliance frameworks.
• Relevant certifications such as:
• CISSP, CCSP, Microsoft Azure Security Engineer Associate, Microsoft Cybersecurity Architect Expert,
• Experience collaborating with government clients, auditors, and executive stakeholders.
• Additional Technical Expertise
• Microsoft Defender XDR: Defender for Endpoint, Office 365, Identity, and Cloud Apps; Data Protection: Microsoft Purview, MIP, DLP, Key Vault
• Identity & Access Management: Entra ID (Azure AD), PIM, Conditional Access, Azure Lighthouse, Zero Trust
• Cloud Security: Azure Security Services, M365 Security, Multi-Cloud IAM

Ideal candidates will have a strong background in Microsoft Sentinel, Azure security technologies, and government cloud environments, with the ability to enhance security operations through advanced detection, automation, and compliance-driven security practices.

Job Responsibilities

• Design, implement, and maintain Microsoft Sentinel SIEM/SOAR solutions.
• Ingest and manage security data sources into Azure Log Analytics (Syslog, CEF, APIs, Threat Intelligence feeds).
• Develop and tune KQL queries, analytics rules, alerts, and dashboards.
• Build automated response playbooks using Azure Logic Apps and Microsoft Copilot for Security.
• Perform threat hunting, incident investigation, and response activities with SOC teams.
• Implement and manage Azure security controls aligned with Zero Trust principles.
• Assess vulnerabilities, analyze attacker TTPs, and support remediation efforts.
• Support cloud security governance, compliance, and audit activities, including FedRAMP and FISMA requirements.
• Provide security architecture guidance and contribute to cloud security strategy initiatives.

About Us

InterSources Inc, a Certified Diverse Supplier, was founded in 2007 and offers innovative solutions to help clients with Digital Transformations across various domains and industries. Our history spans over 19 years and today we are an Award-Winning Global Software Consultancy solving complex problems with technology. We recognize that our employees and our clients are our strengths as the diverse talents and opportunities they bring to the table enable us to grow as a global platform and they are causally linked with our success. We provide strategic and technical advice, and we have expertise in areas covering Artificial Intelligence, Cloud Migration, Custom Software Development, Data Analytics Infrastructure & Cloud Solutions, Cyber Security Services, etc. We make reasonable accommodations for clients and employees and we do not discriminate based on any protected attribute including race, religion, color, national origin, gender sexual orientation, gender identity, age, or marital status. We also are a Google Cloud partner company. We align strategy with execution and provide secure service solutions by developing and using the latest technologies that thrive our resources to deliver industry-leading capabilities to our clients and customers, making it convenient for our clients to do business with InterSources Inc. Our teams also drive growth by refining technology-driven client experiences that put the users first, providing an unparalleled experience. This results in strengthening the core technologies of clients, enabling them to scale with flexibility, create seamless digital experiences and build lifelong relationships.