Cloud Security Engineer

PeopleTec, Inc. is hiring a Cloud Security Engineer to design, implement, and integrate security solutions across Azure, AWS, and hybrid-cloud environments. The role focuses on cloud security architecture, identity and access management, security monitoring, vulnerability management, DevSecOps, and transitioning engineered capabilities into operations.

Responsibilities:

• Design, develop, configure, and integrate cloud security capabilities, including EDR/XDR, CSPM, SIEM, SOAR, WAF, vulnerability management, and cloud-native security services
• Engineer scalable security architectures and technical controls for Microsoft Azure, AWS, and hybrid-cloud environments
• Design and implement security logging, detection rules, telemetry collection, dashboards, and automated security capabilities required to support effective security monitoring and response
• Design and configure Web Application Firewall (WAF) architectures, policies, and baseline rule sets to protect internet-facing applications and services
• Engineer and integrate Cloud Security Posture Management (CSPM) capabilities to identify cloud security vulnerabilities, configuration weaknesses, and compliance gaps
• Design and implement identity and access security controls, including Role-Based Access Control (RBAC), Conditional Access, Multi-Factor Authentication (MFA), privileged access, service identities, and least-privilege access models
• Engineer vulnerability management capabilities and processes supporting the identification, prioritization, remediation, and validation of vulnerabilities across cloud infrastructure, applications, and workloads
• Develop scripts, automation, and Infrastructure as Code (IaC) to support repeatable security deployments, configuration management, compliance validation, and security control implementation
• Integrate security requirements and controls into cloud infrastructure, operating systems, applications, containers, and supporting services
• Integrate cybersecurity capabilities into CI/CD pipelines and DevSecOps workflows to enable automated security testing and validation throughout the development lifecycle
• Develop and maintain cloud security architectures, technical procedures, system diagrams, configuration standards, engineering documentation, and operational runbooks
• Define technical requirements, configuration baselines, acceptance criteria, and transition artifacts necessary to move security capabilities from engineering into operational environments
• Support testing and validation of security capabilities prior to operational transition, ensuring solutions meet defined cybersecurity, performance, and compliance requirements
• Conduct knowledge transfer and technical transition activities with operations personnel as capabilities mature and are prepared for operational ownership
• Collaborate with cloud engineers, infrastructure engineers, application teams, cybersecurity personnel, and operations teams to identify security requirements and engineer appropriate technical solutions

Requirements:

• Minimum of two (2) years of professional experience designing, implementing, or securing Microsoft Azure, Amazon Web Services (AWS), or hybrid-cloud environments
• Minimum of two (2) years of experience engineering, implementing, integrating, or configuring enterprise security technologies such as EDR/XDR, SIEM, SOAR, CSPM, WAF, or vulnerability management platforms
• Experience designing and configuring Web Application Firewall (WAF) solutions to protect internet-facing applications and services
• Experience implementing and integrating Cloud Security Posture Management (CSPM) and cloud security capabilities within Microsoft Azure and/or AWS
• Experience engineering security controls supporting vulnerability management, infrastructure hardening, logging, threat detection, and security automation within enterprise cloud environments
• Working knowledge of identity and access management (IAM), Zero Trust principles, least-privilege access, and cloud security best practices
• Experience with cloud-native and enterprise security technologies such as Microsoft Defender XDR, Microsoft Sentinel, AWS GuardDuty, AWS Security Hub, Azure Web Application Firewall, or comparable platforms
• Experience developing technical documentation, configuration standards, procedures, and transition artifacts supporting the handoff of engineered capabilities into operational environments
• Must be able to obtain and maintain a DoD IAT Level II or higher certification (e.g., Security+, CISSP, or equivalent)
• Must be a U.S. Citizen
• Must be able to obtain and maintain a DoD Secret security clearance
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related technical field. Four (4) years of relevant cybersecurity experience may be considered in lieu of a degree
• Experience designing and securing enterprise Microsoft Azure and/or AWS environments using cloud-native security services
• Experience with Microsoft Entra ID, Conditional Access, Multi-Factor Authentication (MFA), Privileged Identity Management (PIM), and Role-Based Access Control (RBAC)
• Experience scripting or automating security capabilities using PowerShell, Python, Kusto Query Language (KQL), or similar technologies
• Experience with Infrastructure as Code (IaC), including Terraform, Bicep, ARM templates, or AWS CloudFormation
• Experience developing security automation and integrating security controls into CI/CD pipelines
• Knowledge of DevSecOps principles and secure software development practices
• Working knowledge of Kubernetes and security considerations for containerized environments
• Familiarity with DoD cybersecurity requirements, including Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), and applicable NIST security controls
• Experience developing engineering documentation, operational procedures, and technical transition packages
• Experience supporting the transition of technical capabilities from engineering/development teams to operations teams
• Experience working in Agile/Scrum engineering environments
• Strong analytical and troubleshooting skills with the ability to resolve complex cloud security and integration issues
• Strong written and verbal communication skills with the ability to communicate cybersecurity requirements, architecture decisions, technical risks, and remediation recommendations to technical and non-technical stakeholders
• Collaborative team player with the ability to work effectively across cybersecurity, engineering, infrastructure, operations, and program teams
• Demonstrated commitment to continued technical growth and professional development
• five (5) or more years of relevant cloud security experience
• Five (5) or more years of relevant cybersecurity and/or cloud security engineering experience
• Active U.S. DoD Secret clearance or higher