Senior SIEM Engineering Consultant (Microsoft Sentinel)

Location: Remote from Virginia, United States; willingness to support domestic or international on-site engagements is required.

Salary: $140,000–$180,000 per year

Company

hirify.global is the federal segment of Everforth, delivering cloud, AI, data, cybersecurity, and enterprise transformation solutions for defense, intelligence, and federal civilian agencies.

What you will do

• Design, deploy, maintain, and optimize Microsoft Sentinel environments, Log Analytics workspaces, and data connectors.
• Build ingestion pipelines, KQL queries, analytics rules, dashboards, workbooks, and incident response workflows.
• Develop Python, PowerShell, and Bash automation, including Logic Apps playbooks for alert enrichment and remediation.
• Deploy Sentinel across Azure, AWS, GCP, hybrid, and on-premises environments using Terraform, Ansible, CI/CD, and infrastructure-as-code.
• Integrate Sentinel with Microsoft Defender, identity providers, firewalls, EDR platforms, and other telemetry sources.
• Lead design reviews, troubleshoot system health and performance issues, document operational practices, and mentor engineering teams.

Requirements

• Deep hands-on expertise with Microsoft Sentinel, Azure Monitor, Log Analytics, KQL, and data connectors.
• Strong experience in SIEM engineering, log ingestion and normalization, detection engineering, threat detection, and incident response workflows.
• Strong scripting and automation skills with Python, PowerShell, or Bash.
• Experience designing, deploying, and optimizing production-scale SIEM environments and Azure security architectures.
• U.S. Passport required.
• Must be eligible to obtain a U.S. Security Clearance.

Nice to have

• Experience with Splunk, Elastic, QRadar, OpenSearch, ArcSight, Graylog, or Datadog.
• Experience with Kubernetes, Docker, OpenShift, Terraform, Ansible, CI/CD, and cloud-native security services.
• Experience with Microsoft Defender, Entra ID, CrowdStrike, detection frameworks, and large-scale security workflows.
• Relevant Microsoft, Azure, AWS, Docker, Kubernetes, Terraform, Ansible, or Elastic certifications.

Culture & Benefits

• Remote work arrangement with support for domestic and international on-site engagements.
• Mission-driven work serving defense, intelligence, and federal civilian agencies.
• Focus on technical excellence, innovation, accountability, and professional development.
• General employee benefits are provided.