Hybrid Sentinel Architect – Contract

at Insight Investment

• Job title: Sentinel Architect – Contract
• Job type: Contract
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: No Education Requirement
• Tech skills: AWS, Azure, Cloud, Google Cloud Platform
• Location requirements: Hybrid, London, United Kingdom

About the role

• Sentinel Architect designing and deploying Microsoft Sentinel solutions for Insight Investment. Building SIEM architecture and integrating security tools for enhanced web application support.

Responsibilities

• Design, build, and implement a Microsoft Sentinel deployment for a new application environment.
• Develop and configure data connectors, workbooks, analytics rules, and playbooks to meet security monitoring requirements.
• Integrate Sentinel with existing security tools and ensure seamless log ingestion from relevant sources.
• Define and implement alerting, dashboards, and reporting aligned with SOC processes.
• Work closely with application owners, security teams, and stakeholders to ensure requirements are captured and delivered.
• Document the deployment architecture, configurations, and operational procedures for handover to the SOC team.
• Provide knowledge transfer and training to internal teams on Sentinel usage and best practices.

Requirements

• Proven experience in Microsoft Sentinel deployment and configuration in enterprise environments.
• Strong understanding of SIEM concepts, log ingestion, and security monitoring use cases.
• Hands-on experience with Kusto Query Language (KQL) for creating queries, analytics rules, and dashboards.
• Familiarity with Azure services (e.g., Log Analytics, Azure Monitor) and security integration.
• Ability to work independently and deliver within tight timelines.
• Excellent communication and documentation skills.
• Experience designing Sentinel architecture from scratch, including workspace design, data retention strategy, and cost optimisation.
• Familiarity with onboarding multiple log sources (cloud, on-prem, third-party) and handling complex data normalization.
• Experience with SOAR automation and playbook development in Sentinel.
• Exposure to cloud security monitoring across Azure, AWS, or GCP.
• Relevant certifications (e.g., SC-200: Microsoft Security Operations Analyst, AZ-500).
• Ability to deliver comprehensive documentation and knowledge transfer for long-term maintainability.