{"id":4174657,"url":"https://alion.io/job/ipolarity-remote-microsoft-sentinel-engineer-or-architect","title":"[Remote] Microsoft Sentinel Engineer or Architect","company":{"id":3806650,"name":"IPolarity","domain":"ipolarityllc.com","url":"https://alion.io/company/ipolarity-llc","size_band":null,"is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bicep","optional":false},{"name":"CI/CD","optional":false},{"name":"DLP","optional":false},{"name":"Git","optional":false},{"name":"GitHub","optional":false},{"name":"IAM","optional":false},{"name":"Machine Learning","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-11-12T14:32:46Z","employer_posted_date":null,"last_verified_at":"2026-11-12T14:32:46Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"Note: The job is a remote job and is open to candidates in USA. IPolarity is seeking a Senior Microsoft Sentinel Engineer / Architect to lead the design, implementation, optimization, and automation of enterprise security solutions. The role focuses on Sentinel, Azure security, detection engineering, threat hunting, and security automation, partnering with security operations and engineering teams to strengthen security visibility and response capabilities.\n\nResponsibilities\nServe as the senior technical lead and architect for Microsoft Sentinel, including workspace architecture, deployment, configuration, data onboarding, normalization, analytics, monitoring, and optimization\nDesign and develop advanced Microsoft Sentinel detection capabilities using KQL, including custom analytics rules, scheduled queries, threat hunting queries, workbooks, dashboards, and security content\nDevelop and maintain SOAR capabilities using Sentinel automation rules, Logic Apps, Azure Functions, and other automation technologies to streamline incident detection, investigation, enrichment, and response\nIntegrate Sentinel with Microsoft and third-party security platforms using REST APIs, webhooks, connectors, custom integrations, and automated workflows\nEngineer security solutions across Microsoft Azure, including Defender for Cloud, Azure Policy, Entra ID, Conditional Access, Key Vault, network security controls, logging, monitoring, and identity security\nImplement and administer Microsoft Purview, including Data Loss Prevention (DLP), sensitivity labels, information protection, insider risk management, auditing, and compliance-related security controls\nIdentify manual and repetitive security processes and design end-to-end automation that improves operational efficiency, consistency, scalability, and response times\nDevelop and maintain security infrastructure and content using Infrastructure as Code, including Terraform, Bicep, or ARM templates\nImplement security engineering practices through Git, Azure DevOps, or GitHub, including version control, peer review, automated testing, and CI/CD pipelines for security content and automation\nSupport security incident investigations, threat hunting, intrusion analysis, vulnerability management, and incident response across cloud, network, endpoint, identity, and application environments\nReview security controls and monitoring capabilities to identify gaps, improve detection coverage, reduce false positives, and strengthen protection against advanced cyber threats\nEstablish engineering standards and best practices for SIEM/SOAR architecture, detection engineering, security automation, logging, and cloud security\nCollaborate with Security Operations teams to improve incident triage, investigation workflows, response automation, and security operations metrics\nProvide technical guidance and mentorship to security engineers and other technical teams\n\nSkills\n10+ years of experience as a Cloud Security Engineer, Information Security Engineer, Security Architect, or DevSecOps Engineer\n5+ years of hands-on Microsoft Sentinel engineering and architecture experience, including:\nSentinel workspace deployment and architecture\nData source onboarding and normalization\nCustom analytics rules\nKQL development\nThreat hunting\nWorkbooks and dashboards\nAutomation rules\nSOAR playbooks\nAdvanced proficiency with Kusto Query Language (KQL) for detection engineering, threat hunting, investigation, analytics, and workbook development\nStrong hands-on experience securing Microsoft Azure environments, including:\nMicrosoft Defender for Cloud\nAzure Policy\nMicrosoft Entra ID\nConditional Access\nAzure networking/security controls\nKey Vault\nAzure logging and monitoring\nHands-on experience implementing and administering Microsoft Purview, including:\nDLP policies\nSensitivity labels\nInformation Protection\nInsider Risk Management\nAudit and compliance capabilities\nDemonstrated experience identifying manual, repeatable security processes and automating them end to end across Microsoft and non-Microsoft security platforms\nExperience integrating security platforms through REST APIs, webhooks, connectors, and custom automation\nStrong scripting and development skills with Python and PowerShell\nHands-on experience with Azure Logic Apps and Azure Functions\nExperience with Infrastructure as Code, including Terraform, Bicep, and/or ARM\nExperience managing security automation and content through Git, Azure DevOps, GitHub, and CI/CD pipelines\n5+ years of experience with network, cloud, and computer system security, including:\nUser access controls\nRBAC\nSSO\nFile permissions\nFirewall policies\nAudit logging\nNetwork security controls\n5+ years of experience with enterprise security technologies, including:\nSIEM/SOAR\nFirewalls\nIntrusion Detection/Prevention Systems\nEndpoint Protection\nWeb Application Firewalls\nVulnerability Scanning\nData Loss Prevention\nLog Management\nContent Filtering\n5+ years of experience developing and deploying security solutions designed to defend against advanced cyber threats\n5+ years of experience reviewing, monitoring, and troubleshooting security systems to ensure security controls are operating effectively\n5+ years of experience investigating security incidents and intrusions, conducting technical investigations, performing threat analysis, and supporting incident response\nMicrosoft security certifications such as SC-200, SC-100, AZ-500, or related certifications\nExperience with Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, and Defender for Office 365\nExperience integrating Microsoft Sentinel with third-party SIEM, SOAR, EDR, IAM, vulnerability management, and network security platforms\nExperience with MITRE ATT&CK, threat modeling, detection-as-code, and security content lifecycle management\nExperience operating security platforms in large-scale enterprise or regulated environments\nStrong understanding of Zero Trust architecture, identity security, cloud security, and modern SOC operations\nStrong communication skills with the ability to translate security requirements into scalable technical solutions\n\nBenefits\n100% Remote or Dallas TX or Wilmington, DE\n\nCompany Overview\nIPolarity is an IT company that provides web designing, cloud computing, and machine learning services. It was founded in 2011, and is headquartered in Piscataway, New Jersey, USA, with a workforce of 51-200 employees. Its website is https://www.ipolarityllc.com/.\n\nCompany H1B Sponsorship\nIPolarity has a track record of offering H1B sponsorships, with 61 in 2026, 67 in 2025, 65 in 2024, 45 in 2023, 81 in 2022, 85 in 2021, 121 in 2020. Please note that this does not guarantee sponsorship for this specific role.","description_format":"text","description_chars":6719,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Enterprise Apps Implementation Partners","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-11-12T15:36:55Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":28,"reasons":["seen:0","win:early"],"computed_at":"2026-11-12T18:19:48Z"},"pay":null,"html_url":"https://alion.io/job/ipolarity-remote-microsoft-sentinel-engineer-or-architect","json_url":"https://alion.io/job/ipolarity-remote-microsoft-sentinel-engineer-or-architect.json","meta":{"generated_at":"2026-11-12T18:19:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":38516,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3806650},"rest":"https://alion.io/mcp/rest/get_company?id=3806650"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fipolarity-remote-microsoft-sentinel-engineer-or-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fipolarity-remote-microsoft-sentinel-engineer-or-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fipolarity-remote-microsoft-sentinel-engineer-or-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ipolarity-remote-microsoft-sentinel-engineer-or-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fipolarity-remote-microsoft-sentinel-engineer-or-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4174657}},{"tool":"search_jobs","arguments":{"company":"ipolarityllc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4174657},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}