Cloud Logging Integration Engineer
Toyota Tsusho Systems · Remote
About TTS-US
Founded in 2011, Toyota Tsusho Systems US, Inc. (TTS-US) is a Toyota group company that develops IT solutions wherever global businesses operate. Transforming into a technology and mobility company, TTS-US, with its eight TTS affiliates worldwide, is establishing a secure and resilient Toyota global value chain. The creative capacity to forge limitless business opportunities is one of the strengths of Toyota Tsusho Systems.
Position Summary
We are seeking a highly motivated and experienced Cloud Logging Integration Engineer with 5+ years of experience in Cloud Engineering to join our dynamic team. This position is ideal for a candidate with hands-on experience designing, deploying, automating, and troubleshooting cloud-native logging and security telemetry architectures across AWS and Microsoft Azure environments.
The successful candidate will be responsible for designing and supporting Microsoft Sentinel log ingestion solutions, developing cloud infrastructure using Terraform/Terragrunt, automating deployments through GitHub Actions, and implementing data parsing, filtering, transformation, and normalization using Elastic Logstash or similar technologies.
Requirements
Essential Functions
- Develop, deploy, and maintain Elastic Logstash configurations and Microsoft Sentinel log ingestion pipelines.
- Develop and maintain supporting Azure resources, including Data Collection Rules (DCRs), Data Collection Endpoints (DCEs), custom log tables, transformation rules, and Log Analytics workspaces.
- Develop, deploy, and manage AWS architecture for log collection using services including S3, ECS/Fargate, SQS, SNS, Lambda, EFS, CloudWatch, IAM, EC2, VPC, and KMS.
- Develop KQL queries to validate data ingestion and troubleshoot logging and data-quality issues.
- Troubleshoot ingestion failures, connector issues, authentication problems, and data-quality concerns across AWS and Azure logging architectures.
- Develop and manage AWS and Azure infrastructure using Terraform/Terragrunt.
- Automate infrastructure deployments through GitHub Actions.
- Manage the source-code development lifecycle, including pull requests and code reviews, using GitHub repositories and integrated development environments (IDEs).
- Develop and maintain integrations using KQL, JSON, Python, Syslog, SQL, and REST APIs.
- Support the reliability, scalability, and performance of cloud-based security telemetry and logging solutions.
Minimum Qualifications
Required Education & Experience
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent professional experience.
- 5+ years of experience in Cloud Engineering.
- 3+ years of experience working with AWS and Azure cloud environments.
- 2+ years of experience with Microsoft Sentinel or enterprise SIEM platforms.
- 2+ years of experience with Terraform.
- 2+ years of experience with Elastic Logstash or a similar technology.
- 1+ years of experience with KQL, Python, and SQL.
- Strong knowledge of Microsoft Sentinel log onboarding and data ingestion, including parsing, filtering, transformation, and troubleshooting using Elastic Logstash or similar technologies.
- Strong knowledge of AWS services, including S3, ECS/Fargate, IAM, KMS, SNS, SQS, Lambda, EFS, EC2, VPC, and CloudWatch.
- Strong knowledge of Microsoft Azure, including Tenant/Subscription/Resource Group architecture, Microsoft Sentinel, Log Analytics, Azure Monitor, DCRs, DCEs, Logic Apps, Entra ID, and RBAC/IAM.
- Experience developing Infrastructure as Code using Terraform/Terragrunt and implementing automated deployments through GitHub Actions.
- Experience using GitHub for source control and IDEs for development.
- Development experience with KQL, JSON, Python, Syslog, SQL, and REST API-based integrations.
- Proven experience as a Data Engineer or in a similar role focused on data solutions.
- Must possess at least one active AWS or Microsoft Azure certification, such as:
- AWS Certified CloudOps Engineer – Associate
- AWS Certified DevOps Engineer – Professional
- AWS Certified Solutions Architect – Associate or Professional
- AWS Certified Security – Specialty
- Microsoft Azure Administrator Associate
- Microsoft Azure Security Engineer Associate
- Azure Solutions Architect Expert
Preferred Qualifications
- Experience designing and supporting enterprise-scale security telemetry and logging architectures.
- Experience integrating diverse cloud and security data sources into Microsoft Sentinel.
- Hands-on experience with both AWS and Azure logging architectures.
- Experience automating cloud infrastructure and security telemetry deployments through CI/CD pipelines.
- Strong troubleshooting skills across cloud infrastructure, authentication, log ingestion, and data-quality issues.
Position Type/Expected Hours of Work
- This is a Contract position.
- Occasional evening and weekend work may be required as job duties demand.
- Working hours and specific schedule will be determined based on business requirements.
Travel
- Travel requirements will be determined based on business needs.