AWS GovCloud Cloud Security Engineer (DoD/Regulated)

Apex; Los Angeles (CA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Equity in Apex

Healthcare 100% paid

PTO 15–20 days + holidays

401(k) with match

Parental leave

Office lunch

Office in Playa Vista

Job summary

Apex is seeking a Cloud Security Engineer to design, implement, and optimize secure cloud environments across AWS GovCloud, Azure, and GCP. You will ensure compliance with NIST 800-53, FedRAMP, RMF, and DoD IL-4/IL-5 while protecting sensitive data and enabling secure modernization.

The role requires hands-on security in multi-cloud setups, configuration of IAM/RBAC, Zero Trust, and threat monitoring using Defender, Sentinel, and SIEM platforms.

Qualifications

• U.S. citizen required.
• Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, or related field; or 5+ years of equivalent experience.
• 5+ years of cloud security engineering experience in multi-cloud environments.
• Hands-on experience with AWS GovCloud, Azure Government, and GCP.

Responsibilities

• Design secure cloud architectures across AWS GovCloud, Azure, and GCP with least-privilege, encryption, and segmentation.
• Maintain compliance with NIST, FedRAMP, RMF, and DoD IL requirements.
• Configure IAM/RBAC, JIT access, Key Vaults, and Zero Trust across clouds.
• Operate cloud security tools (Defender, Sentinel, CSPM/CWPP) and SIEM platforms for detection and response.
• Conduct vulnerability assessments, pen tests, and security reviews against STIGs/CIS/NIST controls.
• Develop and maintain SSP, SAR, POA&Ms and risk/compliance reporting.

Skills

Analytical thinking

Communication skills

Collaboration

Problem solving

Education

Bachelor’s degree in Cybersecurity/Info Assurance/CS or related field

5+ years experience in cloud security engineering

Tools

AWS GovCloud

Azure Government

GCP

Terraform

Python scripting

Microsoft Defender for Cloud

Azure Sentinel

Nessus

Job description

Apex is seeking a Cloud Security Engineer to design, implement, and optimize secure cloud environments across AWS GovCloud, Azure, and GCP. You will ensure compliance with NIST 800-53, FedRAMP, RMF, and DoD IL-4/IL-5 while protecting sensitive data and enabling secure modernization.

The role requires hands-on security in multi-cloud setups, configuration of IAM/RBAC, Zero Trust, and threat monitoring using Defender, Sentinel, and SIEM platforms.