Cloud Security Engineer

This hands-on role focuses on designing, implementing, and integrating security solutions across Microsoft Azure, AWS, and hybrid-cloud environments. Key areas include identity and access management, Zero Trust, vulnerability management, DevSecOps, and security automation. The engineer will collaborate with technical teams to develop secure, scalable solutions and transition capabilities into operations. Flexible remote, hybrid, and onsite work arrangements are available, based on program requirements. Occasional travel may be required., * Design, develop, configure, and integrate cloud security capabilities, including EDR/XDR, CSPM, SIEM, SOAR, WAF, vulnerability management, and cloud-native security services.

• Engineer scalable security architectures and technical controls for Microsoft Azure, AWS, and hybrid-cloud environments.
• Design and implement security logging, detection rules, telemetry collection, dashboards, and automated security capabilities required to support effective security monitoring and response.
• Design and configure Web Application Firewall (WAF) architectures, policies, and baseline rule sets to protect internet-facing applications and services.
• Engineer and integrate Cloud Security Posture Management (CSPM) capabilities to identify cloud security vulnerabilities, configuration weaknesses, and compliance gaps.
• Design and implement identity and access security controls, including Role-Based Access Control (RBAC), Conditional Access, Multi-Factor Authentication (MFA), privileged access, service identities, and least-privilege access models.
• Engineer vulnerability management capabilities and processes supporting the identification, prioritization, remediation, and validation of vulnerabilities across cloud infrastructure, applications, and workloads.
• Develop scripts, automation, and Infrastructure as Code (IaC) to support repeatable security deployments, configuration management, compliance validation, and security control implementation.
• Integrate security requirements and controls into cloud infrastructure, operating systems, applications, containers, and supporting services.
• Integrate cybersecurity capabilities into CI/CD pipelines and DevSecOps workflows to enable automated security testing and validation throughout the development lifecycle.
• Develop and maintain cloud security architectures, technical procedures, system diagrams, configuration standards, engineering documentation, and operational runbooks.
• Define technical requirements, configuration baselines, acceptance criteria, and transition artifacts necessary to move security capabilities from engineering into operational environments.
• Support testing and validation of security capabilities prior to operational transition, ensuring solutions meet defined cybersecurity, performance, and compliance requirements.
• Conduct knowledge transfer and technical transition activities with operations personnel as capabilities mature and are prepared for operational ownership.
• Collaborate with cloud engineers, infrastructure engineers, application teams, cybersecurity personnel, and operations teams to identify security requirements and engineer appropriate technical solutions.

• Minimum of two (2) years of professional experience designing, implementing, or securing Microsoft Azure, Amazon Web Services (AWS), or hybrid-cloud environments; five (5) or more years of relevant cloud security experience is preferred.
• Minimum of two (2) years of experience engineering, implementing, integrating, or configuring enterprise security technologies such as EDR/XDR, SIEM, SOAR, CSPM, WAF, or vulnerability management platforms.
• Experience designing and configuring Web Application Firewall (WAF) solutions to protect internet-facing applications and services.
• Experience implementing and integrating Cloud Security Posture Management (CSPM) and cloud security capabilities within Microsoft Azure and/or AWS.
• Experience engineering security controls supporting vulnerability management, infrastructure hardening, logging, threat detection, and security automation within enterprise cloud environments.
• Working knowledge of identity and access management (IAM), Zero Trust principles, least-privilege access, and cloud security best practices.
• Experience with cloud-native and enterprise security technologies such as Microsoft Defender XDR, Microsoft Sentinel, AWS GuardDuty, AWS Security Hub, Azure Web Application Firewall, or comparable platforms.
• Experience developing technical documentation, configuration standards, procedures, and transition artifacts supporting the handoff of engineered capabilities into operational environments.
• Must be able to obtain and maintain a DoD IAT Level II or higher certification (e.g., Security+, CISSP, or equivalent).
• Must be a U.S. Citizen.
• Must be able to obtain and maintain a DoD Secret security clearance.

Education Requirements :

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related technical field. Four (4) years of relevant cybersecurity experience may be considered in lieu of a degree.

Desired Skills :

• Five (5) or more years of relevant cybersecurity and/or cloud security engineering experience.
• Active U.S. DoD Secret clearance or higher.
• Experience designing and securing enterprise Microsoft Azure and/or AWS environments using cloud-native security services.
• Experience with Microsoft Entra ID, Conditional Access, Multi-Factor Authentication (MFA), Privileged Identity Management (PIM), and Role-Based Access Control (RBAC).
• Experience scripting or automating security capabilities using PowerShell, Python, Kusto Query Language (KQL), or similar technologies.
• Experience with Infrastructure as Code (IaC), including Terraform, Bicep, ARM templates, or AWS CloudFormation.
• Experience developing security automation and integrating security controls into CI/CD pipelines.
• Knowledge of DevSecOps principles and secure software development practices.
• Working knowledge of Kubernetes and security considerations for containerized environments.
• Familiarity with DoD cybersecurity requirements, including Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), and applicable NIST security controls.
• Experience developing engineering documentation, operational procedures, and technical transition packages.
• Experience supporting the transition of technical capabilities from engineering/development teams to operations teams.
• Experience working in Agile/Scrum engineering environments.
• Strong analytical and troubleshooting skills with the ability to resolve complex cloud security and integration issues.
• Strong written and verbal communication skills with the ability to communicate cybersecurity requirements, architecture decisions, technical risks, and remediation recommendations to technical and non-technical stakeholders.
• Collaborative team player with the ability to work effectively across cybersecurity, engineering, infrastructure, operations, and program teams.
• Demonstrated commitment to continued technical growth and professional development.

PeopleTec, Inc. is an employee-owned small business founded in Huntsville, AL that provides exceptional customer support by employing and retaining a highly skilled workforce.

Culture: The name “PeopleTec” was deliberately chosen to remind us of our core value system - our people. Our company’s foundation was built on placing our employees and customers first. With an award-winning atmosphere, we have matured into a company that boasts the best and brightest across multiple technical fields.

Career: At PeopleTec, we value your long-term goals. Whether it’s through our continuing-education opportunities, our robust training programs, or our “People First” benefits package, PeopleTec truly believes that our best investments are our people.