Cloud Security Engineer

PeopleTec•Huntsville, AL

About The Position

PeopleTec is seeking a hands-on Cloud Security Engineer to support its Huntsville, Alabama location. The role designs, implements, and integrates security solutions across Microsoft Azure, AWS, and hybrid-cloud environments, with a focus on identity and access management, Zero Trust, vulnerability management, DevSecOps, and security automation. The engineer works with technical teams to develop secure, scalable solutions and transition capabilities into operations. Flexible remote, hybrid, and onsite arrangements are available based on program requirements; occasional travel may be required. The position engineers cloud security architectures and controls; implements security monitoring, detection, and response capabilities; and integrates security into infrastructure, applications, containers, and CI/CD workflows. It also develops documentation, standards, procedures, and operational transition materials, and supports validation and knowledge transfer as capabilities move from engineering into operational ownership. PeopleTec is an employee-owned small business founded in Huntsville, Alabama. The company describes its culture as people-focused and offers continuing-education opportunities, training programs, and a “People First” benefits package. PeopleTec is an Equal Employment Opportunity employer and participates in E-Verify.

Requirements

At least two years of professional experience designing, implementing, or securing Microsoft Azure, AWS, or hybrid-cloud environments.
At least two years of experience engineering, implementing, integrating, or configuring enterprise security technologies such as EDR/XDR, SIEM, SOAR, CSPM, WAF, or vulnerability management platforms.
Experience designing and configuring WAF solutions to protect internet-facing applications and services.
Experience implementing and integrating CSPM and cloud security capabilities within Microsoft Azure and/or AWS.
Experience engineering security controls for vulnerability management, infrastructure hardening, logging, threat detection, and security automation in enterprise cloud environments.
Working knowledge of IAM, Zero Trust principles, least-privilege access, and cloud security best practices.
Experience with cloud-native and enterprise security technologies such as Microsoft Defender XDR, Microsoft Sentinel, AWS GuardDuty, AWS Security Hub, Azure WAF, or comparable platforms.
Experience developing technical documentation, configuration standards, procedures, and transition artifacts for handing engineered capabilities into operational environments.
Must be able to obtain and maintain a DoD IAT Level II or higher certification, such as Security+, CISSP, or equivalent.
Must be a U.S. citizen.
Must be able to obtain and maintain a DoD Secret security clearance.
Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related technical field; four years of relevant cybersecurity experience may be considered in lieu of a degree.

Nice To Haves

Five or more years of relevant cloud security experience is preferred.
Five or more years of relevant cybersecurity and/or cloud security engineering experience.
Active U.S. DoD Secret clearance or higher.
Experience designing and securing enterprise Microsoft Azure and/or AWS environments using cloud-native security services.
Experience with Microsoft Entra ID, Conditional Access, MFA, PIM, and RBAC.
Experience scripting or automating security capabilities using PowerShell, Python, KQL, or similar technologies.
Experience with IaC, including Terraform, Bicep, ARM templates, or AWS CloudFormation.
Experience developing security automation and integrating security controls into CI/CD pipelines.
Knowledge of DevSecOps principles and secure software development practices.
Working knowledge of Kubernetes and security considerations for containerized environments.
Familiarity with DoD cybersecurity requirements, including RMF, STIGs, and applicable NIST security controls.
Experience developing engineering documentation, operational procedures, and technical transition packages.
Experience supporting the transition of technical capabilities from engineering/development teams to operations teams.
Experience working in Agile/Scrum engineering environments.
Strong analytical and troubleshooting skills, including the ability to resolve complex cloud security and integration issues.
Strong written and verbal communication skills for conveying cybersecurity requirements, architecture decisions, technical risks, and remediation recommendations to technical and non-technical stakeholders.
Ability to work collaboratively across cybersecurity, engineering, infrastructure, operations, and program teams.
Demonstrated commitment to continued technical growth and professional development.

Responsibilities

Design, develop, configure, and integrate cloud security capabilities, including EDR/XDR, CSPM, SIEM, SOAR, WAF, vulnerability management, and cloud-native security services.
Engineer scalable security architectures and technical controls for Microsoft Azure, AWS, and hybrid-cloud environments.
Design and implement security logging, detection rules, telemetry collection, dashboards, and automated security capabilities for security monitoring and response.
Design and configure WAF architectures, policies, and baseline rule sets to protect internet-facing applications and services.
Engineer and integrate CSPM capabilities to identify cloud security vulnerabilities, configuration weaknesses, and compliance gaps.
Design and implement identity and access security controls, including RBAC, Conditional Access, MFA, privileged access, service identities, and least-privilege models.
Engineer vulnerability management capabilities and processes for identifying, prioritizing, remediating, and validating vulnerabilities across cloud infrastructure, applications, and workloads.
Develop scripts, automation, and IaC for repeatable security deployments, configuration management, compliance validation, and security control implementation.
Integrate security requirements and controls into cloud infrastructure, operating systems, applications, containers, and supporting services.
Integrate cybersecurity capabilities into CI/CD pipelines and DevSecOps workflows to enable automated security testing and validation throughout the development lifecycle.
Develop and maintain cloud security architectures, technical procedures, system diagrams, configuration standards, engineering documentation, and operational runbooks.
Define technical requirements, configuration baselines, acceptance criteria, and transition artifacts for moving security capabilities into operational environments.
Test and validate security capabilities before operational transition, confirming they meet cybersecurity, performance, and compliance requirements.
Conduct knowledge transfer and technical transition activities with operations personnel as capabilities mature and are prepared for operational ownership.
Collaborate with cloud, infrastructure, application, cybersecurity, and operations teams to identify security requirements and engineer appropriate technical solutions.