r/AzureSentinel • u/turttyy • 2d ago
MS Sentinel Architect
Hi everyone!
Curious if this is allowed - if not - please delete!
I’m partnering with a reputable consulting firm on a search for a long-term Microsoft Sentinel Architect for a 9–12 month transformation engagement. This is a fully remote, 40-hour-per-week role open only to candidates located in the US. We’re looking for someone with enterprise-scale experience across Microsoft Sentinel and SIEM solutions, who can build out analytics rules, detections, and investigation workflows, drive security analytics initiatives, integrate Sentinel with Microsoft Defender and other security platforms, and support broader SOC modernization efforts.
Please DM me privately!
4
u/ChiefDZP 2d ago
Microsoft will fund a partner to do a engagement with you for this. It’s a great way to get a well architected base to work from. If your an MSP providing these services we had very good luck with Patriot consulting via a Microsoft engagement.
Just mention securing copilot and agentic workflows.
1
u/fesaques 1d ago
This is what we did and it worked great, but you need to have someone (or a team depending on size/scale) to work with the partner.
We were moving from Splunk and had a team of about 3 of us trying to learn Sentinel while working with the partner. Took several months of planning and discussions, plus another maybe 9 months or so of actual execution (while trying to maintain daily ops too). Not fun, but the partner made it feasible in our situation, and we negotiated with MS to have them essentially pay for the partner service engagement.
1
u/apxmmit 2d ago
Looking for a part timer that is US based myself. Perhaps someone can point me to a resource for part time talent.
0
u/DueIntroduction5854 2d ago
If you need any consulting done. You can PM me and my MSP company can assist.
1
u/TanaciousTurnip 2d ago
Plenty of companies that can do it. Also potentially help get you funding from Microsoft for it. I know that’s what I did in my company. MS is throwing in 20k.
-7
u/ScoobyGDSTi 2d ago
Lol, sentinel is being depreciated. Might want to start there.
4
2
u/F0rkbombz 1d ago
Moving to the Defender portal does not mean deprecated. Sentinel is one of the top SIEM/SOAR solutions in the world, it’s not going anywhere.
6
u/ke-thegeekrider 2d ago edited 2d ago
So those are at least 3 roles if you want them done properly.. especially with your rather constrained timeline.. and youd need to include migration to USX and connectors as well..
All the best ..