Remote Cloud Security Engineer - FedRAMP & Automation

Bubbleware Technology; Kansas City, Northern (MO, KY); Hybrid; USD 100,000 - 108,000; Full time

Job summary

Bubbleware Technology is seeking an experienced Cybersecurity Engineer to design, automate, and maintain security capabilities across cloud, hybrid, and on-premises systems. It is a hands-on role collaborating with cloud, DevSecOps, application teams, and compliance personnel to strengthen platform security.

The ideal candidate has 5–10 years in cybersecurity, cloud security, or DevSecOps, with AWS and Azure security experience, and a background in infrastructure‑as‑code and CI/CD security.

Qualifications

• 5-10 years of relevant cybersecurity, cloud, DevSecOps, or security engineering experience.
• Hands-on experience developing, deploying, or securing containerized applications.
• Experience developing production-quality automation or software using at least one language such as: Python, PowerShell, Bash, Go.
• Experience using Git or comparable source-control systems with standard code review and testing practices.
• Hands-on AWS security experience.
• Working knowledge of Microsoft Azure security and cloud services.
• Experience integrating security tools into CI/CD pipelines using GitLab, GitHub, Jenkins, Azure DevOps, or comparable platforms.
• Experience with infrastructure-as-code technologies such as Terraform, CloudFormation, or similar tools.
• Familiarity with system and application hardening practices.
• Working knowledge of federal cybersecurity frameworks and requirements, including: NIST SP 800-53, FISMA, FedRAMP.
• Experience with vulnerability management, security monitoring, detection engineering, or centralized logging.

Responsibilities

• Develop and maintain security automation using Python, PowerShell, Bash, Go, or similar technologies.
• Build security controls and hardened configurations into cloud infrastructure and infrastructure-as-code.
• Implement and maintain security checks within CI/CD pipelines, including: Static application security testing; Dependency scanning; Policy-as-code controls.
• Develop hardened operating system, container, and cloud service baselines.
• Help design and implement secure identity, access management, encryption, key management, and centralized logging.
• Engineer secure connectivity between cloud and on‑premises environments.
• Develop and maintain security monitoring, detection rules, alerting, and log integrations.
• Automate vulnerability scanning, remediation tracking, ticketing, prioritization, and escalation.
• Develop automated incident response processes and technical playbooks.
• Support investigation, containment, recovery, and root cause analysis for security incidents.
• Turn vulnerability and incident findings into long‑term engineering improvements.
• Maintain technical documentation, runbooks, security designs, and reference architectures.
• Provide technical evidence and documentation supporting Federal security and authorization requirements.
• Participate in code reviews and technical design reviews.
• Mentor less experienced engineers and assist with knowledge transfer to client teams.
• Participate in scheduled after‑hours or on‑call support when required.

Skills

Cybersecurity

Cloud security

DevSecOps

Automation

Python

PowerShell

Bash

Go

AWS security

Azure security

CI/CD

Vulnerability management

Logging

Education

Associate degree

Tools

Terraform

CloudFormation

Git

GitHub

Jenkins

Azure DevOps

Job description

Bubbleware Technology is seeking an experienced Cybersecurity Engineer to design, automate, and maintain security capabilities across cloud, hybrid, and on-premises systems. It is a hands-on role collaborating with cloud, DevSecOps, application teams, and compliance personnel to strengthen platform security.

The ideal candidate has 5–10 years in cybersecurity, cloud security, or DevSecOps, with AWS and Azure security experience, and a background in infrastructure‑as‑code and CI/CD security.