Cloud Security Engineer

PeopleTec, Inc.•Huntsville, AL

About The Position

PeopleTec is seeking a hands-on Cloud Security Engineer to support its Huntsville, Alabama location. The role designs, implements, and integrates security solutions across Microsoft Azure, AWS, and hybrid-cloud environments, with focus areas including identity and access management, Zero Trust, vulnerability management, DevSecOps, and security automation. The engineer collaborates with technical teams to develop secure, scalable solutions and transition capabilities into operations. Flexible remote, hybrid, and onsite work arrangements are available based on program requirements; occasional travel may be required.

Requirements

At least two years of professional experience designing, implementing, or securing Microsoft Azure, AWS, or hybrid-cloud environments.
At least two years of experience engineering, implementing, integrating, or configuring enterprise security technologies such as EDR/XDR, SIEM, SOAR, CSPM, WAF, or vulnerability management platforms.
Experience designing and configuring WAF solutions for internet-facing applications and services.
Experience implementing and integrating CSPM and cloud security capabilities in Microsoft Azure and/or AWS.
Experience engineering security controls for vulnerability management, infrastructure hardening, logging, threat detection, and security automation in enterprise cloud environments.
Working knowledge of IAM, Zero Trust principles, least-privilege access, and cloud security best practices.
Experience with cloud-native and enterprise security technologies such as Microsoft Defender XDR, Microsoft Sentinel, AWS GuardDuty, AWS Security Hub, Azure WAF, or comparable platforms.
Experience developing technical documentation, configuration standards, procedures, and transition artifacts for handing engineered capabilities into operations.
Must be able to obtain and maintain a DoD IAT Level II or higher certification, such as Security+, CISSP, or equivalent.
Must be a U.S. citizen.
Must be able to obtain and maintain a DoD Secret security clearance.
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related technical field; four years of relevant cybersecurity experience may be considered in lieu of a degree.

Nice To Haves

Five or more years of relevant cloud security experience.
Five or more years of relevant cybersecurity and/or cloud security engineering experience.
Active U.S. DoD Secret clearance or higher.
Experience designing and securing enterprise Microsoft Azure and/or AWS environments using cloud-native security services.
Experience with Microsoft Entra ID, Conditional Access, MFA, PIM, and RBAC.
Experience scripting or automating security capabilities using PowerShell, Python, KQL, or similar technologies.
Experience with IaC, including Terraform, Bicep, ARM templates, or AWS CloudFormation.
Experience developing security automation and integrating security controls into CI/CD pipelines.
Knowledge of DevSecOps principles and secure software development practices.
Working knowledge of Kubernetes and security considerations for containerized environments.
Familiarity with DoD cybersecurity requirements, including RMF, STIGs, and applicable NIST security controls.
Experience developing engineering documentation, operational procedures, and technical transition packages.
Experience supporting transition of technical capabilities from engineering/development teams to operations teams.
Experience working in Agile/Scrum engineering environments.
Strong analytical and troubleshooting skills, including resolving complex cloud security and integration issues.
Strong written and verbal communication skills for communicating cybersecurity requirements, architecture decisions, technical risks, and remediation recommendations to technical and non-technical stakeholders.
Collaborative team skills and ability to work effectively across cybersecurity, engineering, infrastructure, operations, and program teams.
Demonstrated commitment to continued technical growth and professional development.

Responsibilities

Design, develop, configure, and integrate cloud security capabilities, including EDR/XDR, CSPM, SIEM, SOAR, WAF, vulnerability management, and cloud-native security services.
Engineer scalable security architectures and technical controls for Microsoft Azure, AWS, and hybrid-cloud environments.
Design and implement security logging, detection rules, telemetry collection, dashboards, and automated security capabilities for monitoring and response.
Design and configure WAF architectures, policies, and baseline rule sets to protect internet-facing applications and services.
Engineer and integrate CSPM capabilities to identify cloud security vulnerabilities, configuration weaknesses, and compliance gaps.
Design and implement identity and access security controls, including RBAC, Conditional Access, MFA, privileged access, service identities, and least-privilege access models.
Engineer vulnerability management capabilities and processes for identifying, prioritizing, remediating, and validating vulnerabilities across cloud infrastructure, applications, and workloads.
Develop scripts, automation, and IaC for repeatable security deployments, configuration management, compliance validation, and security control implementation.
Integrate security requirements and controls into cloud infrastructure, operating systems, applications, containers, and supporting services.
Integrate cybersecurity capabilities into CI/CD pipelines and DevSecOps workflows to automate security testing and validation throughout the development lifecycle.
Develop and maintain cloud security architectures, technical procedures, system diagrams, configuration standards, engineering documentation, and operational runbooks.
Define technical requirements, configuration baselines, acceptance criteria, and transition artifacts for moving security capabilities from engineering into operations.
Test and validate security capabilities before operational transition to ensure cybersecurity, performance, and compliance requirements are met.
Conduct knowledge transfer and technical transition activities with operations personnel as capabilities mature and are prepared for operational ownership.
Collaborate with cloud, infrastructure, application, cybersecurity, and operations teams to identify security requirements and engineer appropriate technical solutions.