Cloud Security Engineer - AWS GovCloud & DoD Compliance

Socket.dev; Los Angeles (CA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Equity

Health care

PTO & holidays

401(k) matching

Parental leave

Free lunch

Job summary

Apex Technology, Inc. in the Los Angeles area seeks a Cloud Security Engineer, AWS GovCloud, to design, implement, and operate secure cloud environments supporting DoD and IC missions. The role emphasizes NIST, FedRAMP, RMF compliance and multi-cloud strategies.

You will work with DevSecOps and engineering teams to automate security controls, manage IAM/RBAC, and monitor incidents. On-site five days a week at Playa Vista, CA, you will shape secure cloud architectures and risk reporting.

Qualifications

• Must be a U.S. citizen.
• Bachelor's degree in Cybersecurity, Information Assurance, Computer Science or 5+ years cloud security experience.
• 5-9+ years in cloud security engineering with multi-cloud exposure.
• Strong analytical and collaboration skills.

Responsibilities

• Design and implement secure cloud architectures across AWS GovCloud, Azure, and/or Google Cloud, applying least privilege, encryption, segmentation, and data protection.
• Implement and maintain cloud security frameworks, ensuring compliance with NIST 800-53 Rev. 5, FedRAMP, DoD IL-2/4/5, RMF, and SCCA.
• Configure and manage IAM, RBAC, JIT, Key Vaults, and Zero Trust across cloud environments.
• Engineer, deploy, and optimize cloud-native security tools including Defender for Cloud, Azure Sentinel, AWS GovCloud services, CSPM/CWPP, and Elastic SIEM.
• Conduct vulnerability assessments, penetration testing simulations, and security reviews against STIGs, CIS, and NIST controls.
• Develop, maintain SSP, SAR, POA&M, and risk/compliance reporting for cloud operations.
• Identify IoCs, threat intelligence, and incidents; perform root-cause analysis and preventive actions.
• Perform periodic security reviews/audits for Azure, AWS, hybrid clouds to ensure compliance.
• Collaborate with DevSecOps and development teams to integrate security into CI/CD and IaC (Terraform, CloudFormation).
• Monitor cloud environments, respond to alerts, and drive continuous security improvements.
• Provide training on secure cloud design patterns.
• On-site 5 days a week at our Playa Vista, CA office.

Skills

Cloud platforms

IAM RBAC

Zero Trust

SIEM

Automation tools

Terraform

Python scripting

GRC compliance

Education

Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science

Tools

Terraform

CloudFormation

Elastic SIEM

Nessus

Microsoft Defender

Job description

Apex Technology, Inc. in the Los Angeles area seeks a Cloud Security Engineer, AWS GovCloud, to design, implement, and operate secure cloud environments supporting DoD and IC missions. The role emphasizes NIST, FedRAMP, RMF compliance and multi-cloud strategies.

You will work with DevSecOps and engineering teams to automate security controls, manage IAM/RBAC, and monitor incidents. On-site five days a week at Playa Vista, CA, you will shape secure cloud architectures and risk reporting.