Microsoft Sentinel Architect Jobs (NOW HIRING)

Job Summary

Golden Cloud Services LLC (GCS) is seeking an experienced Microsoft Sentinel Architect to support a proposed federal Microsoft Sentinel implementation project.

This is a remote contract position contingent upon federal contract award.

The Microsoft Sentinel Architect will provide technical expertise for the design, implementation, configuration, testing, and operationalization of Microsoft Sentinel within a Microsoft Azure and Microsoft 365 environment.

The ideal candidate will have extensive SIEM/SOAR experience with significant hands-on Microsoft Sentinel implementation experience. The candidate should be comfortable designing enterprise security-monitoring solutions, integrating Microsoft security services, developing detection and automation capabilities, troubleshooting security integrations, and producing professional technical documentation.

Responsibilities

• Design, deploy, configure, and optimize Microsoft Sentinel within a Microsoft Azure and Microsoft 365 environment.
• Assess existing Azure and Microsoft 365 security environments and recommend appropriate Sentinel architecture and configurations.
• Configure and optimize Azure Log Analytics workspaces.
• Configure and validate Microsoft Sentinel data connectors.
• Integrate relevant Microsoft 365, Microsoft Entra ID, Microsoft Defender, Microsoft Intune, Azure, and endpoint security data sources.
• Develop and tune Microsoft Sentinel analytics and detection rules.
• Develop Kusto Query Language (KQL) queries for security monitoring, detection, investigation, and reporting.
• Configure Microsoft Sentinel incidents, alerts, workbooks, and dashboards.
• Design and implement Sentinel automation rules and SOAR playbooks.
• Support endpoint and cloud-service onboarding into the security-monitoring environment.
• Apply SIEM/SOAR, Zero Trust, identity, logging, and security-monitoring best practices.
• Support testing, validation, troubleshooting, and operational acceptance of the Sentinel environment.
• Develop solution-design, configuration, operational, and as-built technical documentation.
• Provide technical knowledge transfer and administrator training.
• Collaborate with GCS management, cybersecurity personnel, system administrators, and customer technical stakeholders throughout implementation.

Required Qualifications

• 5+ years of professional SIEM/SOAR experience.
• 2+ years of hands-on Microsoft Sentinel experience.
• Demonstrated experience designing or implementing Microsoft Sentinel in production environments.
• Strong Microsoft Azure and Microsoft 365 security experience.
• Hands-on experience with Azure Log Analytics.
• Hands-on experience with Kusto Query Language (KQL).
• Experience configuring Microsoft Sentinel data connectors, analytics rules, incidents, workbooks, automation rules, and playbooks.
• Experience integrating Microsoft Sentinel with services such as Microsoft Entra ID, Microsoft Defender, Microsoft Intune, Microsoft 365, and Azure.
• Strong understanding of cybersecurity monitoring, incident detection, identity and access management, vulnerability management, and security operations.
• Familiarity with federal cybersecurity frameworks and requirements, including NIST and the Risk Management Framework (RMF).
• Ability to develop professional technical architecture, configuration, operational, and as-built documentation.
• Strong written and verbal communication skills.

Preferred Qualifications

• Previous federal government or Department of Defense IT/cybersecurity experience.
• Experience implementing Microsoft Sentinel in government or other highly regulated environments.
• Experience with Microsoft Defender XDR.
• Experience developing security automation using Azure Logic Apps, PowerShell, APIs, or related technologies.
• Experience with Zero Trust security architectures.
• Familiarity with FedRAMP, FISMA, NIST 800-series guidance, and federal cloud-security requirements.
• Experience providing technical training and knowledge transfer.

Certifications

Candidates should identify all current Microsoft, Azure, cloud, and cybersecurity certifications on their resume.

Relevant certifications may include:

• Microsoft Certified: Cybersecurity Architect Expert
• Microsoft Certified: Security Operations Analyst Associate
• Microsoft Certified: Azure Security Engineer Associate
• Microsoft Certified: Azure Solutions Architect Expert
• CISSP
• CompTIA Security+
• Other relevant Microsoft security, Azure, SIEM, or cybersecurity certifications

Federal Proposal / Key Personnel Documentation

This position may be proposed as Key Personnel on a federal government contract.

Candidates must be willing to provide documentation supporting their qualifications, including:

• Current professional resume
• Employment and project history
• Dates demonstrating required SIEM/SOAR experience
• Microsoft Sentinel implementation experience
• Current professional certifications
• Availability
• Desired contract/hourly rate

Candidate information will only be used for the applicable federal proposal with the candidate's authorization.

Position Details

Location: Remote – United States

Employment Type: Contract / 1099

Compensation: $100–$140 per hour, depending on qualifications, Microsoft Sentinel experience, certifications, and relevant federal experience.

Schedule: Project-based. Actual hours will be determined by project requirements.

Project Duration: Anticipated up to 12 months, subject to final contract requirements.

Start Date: Contingent upon federal contract award.

Important Notice

This position is contingent upon Golden Cloud Services LLC receiving the applicable federal contract award.

This job posting does not constitute a guarantee of employment, contract engagement, start date, project duration, or minimum number of hours.