The Senior Azure Monitoring and Logging Engineer will design, centralize, and enforce a governed enterprise Azure logging architecture across all subscriptions and application environments. This role ensures secure log ingestion, cost-optimized retention, compliance enforcement via policy, and seamless integration with SIEM/Splunk platforms.

Key Deliverables & Responsibilities:

· Logging Gap Audit:

Conduct a comprehensive logging audit across cross-subscription Azure infrastructure, tenant activities, and workload logs.

· Centralized Log Architecture:

Centralize Azure Activity logs, Entra ID logs, and resource-level telemetry into structured Log Analytics Workspaces.

· Agent & DCR Deployment:

Deploy Azure Monitor Agent (AMA) and configure Data Collection Rules (DCR) for targeted, efficient telemetry gathering.

· Automated Governance:

Draft and enforce Azure Policy with DeployIfNotExists (DINE) remediation to guarantee auto-enablement of diagnostic settings across recent/existing resources.

· Security & Archival Controls:

Configure retention tiers, Azure Private Link, Managed Identities, fine-grained RBAC, and secure log streaming to Splunk/SIEM.

· Alerting & Sign-Off:

Develop actionable KQL-based alert rules, validate operational security controls, and deliver comprehensive operational runbooks.

Required Core Skills & Technical Expertise

· Azure Monitoring Suite:





Expertise in Azure Monitor, Log Analytics Workspaces, Azure Monitor Agent (AMA), Diagnostic Settings, and Data Collection Rules (DCR).

· Kusto Query Language (KQL):

Advanced KQL authoring for complex log querying, dashboarding, and alerting rules.

· Azure Policy & Governance:

Deep working knowledge of Azure Policy, initiative definitions, and DeployIfNotExists (DINE) automated remediation.

· Security & Connectivity:

Proficiency with Entra ID, Azure RBAC, Managed Identities, Azure Private Link, and secure SIEM/Splunk integration.

· Automation & Cost Control:

Hands-on scripting using PowerShell, Azure CLI, Terraform, Bicep, or Python, with focus on log retention cost optimization.

Preferred Candidate Profile & Qualifications

· Experience:

5+ years in Azure cloud engineering with recent delivery of centralized enterprise logging frameworks.

· Certifications:

Microsoft Certified: Azure Solutions Architect, Azure Security Engineer, or DevOps Engineer Expert.

· Domain Expertise:

Regulated industry experience (banking/finance preferred) with strict data residency and audit standards.

· Screening Criteria:

Candidates will be screened specifically for multi-subscription policy enforcement, cross-workspace security, KQL proficiency, and storage cost controls.

📌 Senior Azure Monitoring and Logging Engineer (Toronto)
🏢 Vsync Solutions
📍 Toronto