Cloud Security Engineer

About the role

As a Cloud Security Engineer at Impulse , you will help secure infrastructure across a multi-cloud environment (Azure Government, AWS, and/or GCP) supporting sensitive aerospace and defense workloads.
This role is focused on hands-on implementation—hardening cloud environments, improving security posture, and integrating security into engineering workflows. You’ll work closely with DevOps, IT, and IA teams to ensure systems maintain CMMC/NIST SP 800-171 requirements while remaining scalable and developer friendly.

Secure and harden cloud resources across Azure, AWS, and/or GCP
Conduct security assessments, threat modeling, and internal audits on cloud infrastructure
Monitor and improve cloud security posture using tools like Defender for Cloud or CSPM platforms
Implement and maintain IAM controls (RBAC, least privilege, conditional access)
Integrate security checks into CI/CD pipelines (DevSecOps)
Build and maintain secure infrastructure using Terraform
Automate security operations using scripting and infrastructure as code
Support CMMC / NIST 800-171 efforts, including control implementation and evidence collection
Assist with logging, monitoring, and detection integration (SIEM/XDR)
Collaborate with other teams to resolve security issues and improve overall security posture

4+ years of experience in cloud, security, DevOps, or infrastructure roles
Hands-on experience with at least one cloud provider (Azure preferred)
Experience using Terraform or similar IaC tools
Familiarity with securing CI/CD pipelines
Solid understanding of IAM, secrets management, and security best practices
Working knowledge of CMMC, NIST SP 800-171, or similar frameworks