Cloud SaaS Security Specialist

Centers for Medicare & Medicaid Services; United States; On-site; USD 100,000 - 140,000; Full time

Job summary

Centers for Medicare & Medicaid Services (CMS) seeks an IT Cybersecurity Specialist (Security) at GS-2210-13 to secure SaaS platforms and cloud-hosted business applications used across CMS.

The role requires applying FISMA/NIST RMF, developing automated workflows for security findings, and implementing SSPM/CASB technologies. This position emphasizes attention to detail, customer service, oral communication, and problem solving to protect CMS information assets.

Qualifications

• Experience securing SaaS platforms and cloud-hosted applications using SSPM or CASB to identify misconfigurations, policy violations, and security risks.
• Experience applying FISMA, FedRAMP, or NIST RMF to assess and monitor cloud environments.
• Developing and integrating automated workflows, scripts, or security tools to manage security findings across cloud or SaaS environments.
• Demonstrated ability to meet broad competencies: attention to detail, customer service, oral communication, and problem solving.

Responsibilities

• Secure SaaS platforms and cloud-hosted business applications used across CMS.
• Apply federal cybersecurity frameworks to assess compliance posture of cloud environments.
• Develop and integrate automated workflows to manage security findings across cloud environments.

Skills

SaaS security

CASB

SSPM

NIST RMF

Automation scripts

Cloud security

FedRAMP

Attention to Detail

Customer Service

Oral Communication

Problem Solving

Tools

Microsoft 365

Salesforce

ServiceNow

Job description

Centers for Medicare & Medicaid Services (CMS) seeks an IT Cybersecurity Specialist (Security) at GS-2210-13 to secure SaaS platforms and cloud-hosted business applications used across CMS.

The role requires applying FISMA/NIST RMF, developing automated workflows for security findings, and implementing SSPM/CASB technologies. This position emphasizes attention to detail, customer service, oral communication, and problem solving to protect CMS information assets.