Cyber Security Cloud Engineer

National Carwash Solutions

. Implement and maintain security controls across Azure and AWS, including identity and access management, network segmentation, encryption and key management, logging, and workload protection .

Posted 10/17/2026full-timeRemote • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in implementing and maintaining security controls across cloud platforms, particularly Azure and AWS, with a strong focus on identity and access management, compliance, and incident response. Proficient in utilizing security frameworks and tools to ensure robust cybersecurity measures and support secure product development.

Highest-signal resume keywords

Cloud Security ImplementationIdentity And Access ManagementIncident Response And TriageSecurity Compliance And AuditingInfrastructure As Code

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Azure SecurityAWS SecurityIAMNetwork SecurityEncryption And Key ManagementCI/CD SecuritySAST/DASTTerraformPowerShellPython

Soft Skills

Clear CommunicationMentoring

Tools & Technologies

Microsoft Defender For CloudMicrosoft SentinelAWS GuardDutySecurity HubCloudTrailCSPM/CNAPPAzure DevOpsGitHubGitLabSIEM

Certifications & Qualifications

CISSPCCSPAWS Certified Security – SpecialtyMicrosoft Certified: Azure Security Engineer Associate (AZ-500)

Industry Keywords

PCI-DSS ComplianceNIST Cybersecurity FrameworkThreat ModelingVulnerability ManagementData Loss PreventionAI SecurityMergers And AcquisitionsContainer SecurityKubernetes SecurityIoT Security

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityIoTKubernetesPythonTerraform

About the role

Key responsibilities & impact

Implement and maintain security controls across Azure and AWS, including identity and access management, network segmentation, encryption and key management, logging, and workload protection
Deploy and operate CSPM/CNAPP, infrastructure-as-code guardrails, policy-as-code, and automated compliance checks
Operate and tune Microsoft Defender for Cloud, Microsoft Sentinel, Entra ID Protection, AWS GuardDuty, Security Hub, CloudTrail, and IAM Access Analyzer
Integrate cloud telemetry into enterprise SIEM detection and response workflows
Execute detection engineering and incident response for cloud-hosted and identity-centric threats
Conduct alert triage, investigation, root cause analysis, containment, and remediation coordination
Support cybersecurity due diligence for acquisitions and document target-environment gaps
Execute secure identity, Microsoft 365, workload, network, endpoint, and legacy-infrastructure migrations for acquired companies
Maintain integration playbooks and security baselines with status reporting
Implement security controls across CI/CD pipelines, including SAST/DAST, software composition analysis, secrets scanning, container image scanning, and SBOM generation
Support secure product development through threat modeling, secure design reviews, secure coding standards, API security, and vulnerability management
Track product security metrics, maintain developer documentation, and manage remediation SLAs
Implement data protection, DLP, identity governance, and access controls for AI initiatives
Maintain security controls across Microsoft 365, identity, Windows and Apple endpoints, and cloud platforms
Produce evidence, metrics, and documentation for PCI-DSS compliance, NIST CSF alignment, audits, executive reviews, and customer security assessments
Mentor engineers, serve as escalation point for complex cloud and identity security issues, and report control status, gaps, risks, and remediation progress
Participate periodically in after-hours incident response or maintenance windows
Travel occasionally to NCS facilities and acquired-company locations

Requirements

What you’ll need

5 or more years of progressive experience in IT, with broad exposure to infrastructure, networking, identity, and enterprise systems
3 or more years of hands-on experience in a dedicated cybersecurity role, including securing production workloads in Microsoft Azure and/or AWS
Demonstrated experience implementing security controls within an established enterprise security framework
Hands-on experience with cloud security services and patterns on at least one major platform (Azure or AWS), with familiarity with the other
Experience with IAM, network security, encryption and key management, logging, and workload protection
Experience with infrastructure as code, such as Terraform, Bicep, or CloudFormation
Experience with CI/CD platforms, such as Azure DevOps, GitHub, or GitLab
Experience with application security tooling, including SAST/DAST, SCA, secrets scanning, and container scanning
Working knowledge of the NIST Cybersecurity Framework
Experience supporting PCI-DSS compliance and audit or assessment processes
Clear, professional written and verbal communication
Preferred: current industry-recognized security certifications such as CISSP, CCSP, AWS Certified Security – Specialty, or Microsoft Certified: Azure Security Engineer Associate (AZ-500)
Preferred: experience with mergers, acquisitions, or divestitures, including tenant-to-tenant migrations and identity consolidation
Preferred: experience securing AI/ML platforms and services
Preferred: experience with CSPM/CNAPP platforms, container and Kubernetes security, and secrets management
Preferred: experience implementing or maturing product or application security programs
Preferred: experience securing embedded, IoT, or payment-enabled products
Preferred: scripting and automation proficiency with PowerShell, Python, or similar
Preferred: experience in manufacturing, distribution, or field service environments
Eligible to work in the United States; work visa sponsorship is not currently available

Benefits

Comp & perks

Professional development
Training
Flexibility
Opportunities for advancement
Comprehensive health coverage
Dental coverage
Vision coverage