Cloud Security Engineer — DoD Regulated, Multi-Cloud

Apex Technology, Inc.; Manhattan Beach (CA); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Shared upside equity

World-class Playa Vista office

Comprehensive healthcare and 401(k)

Job summary

Apex Technology, Inc. is seeking a Cloud Security Engineer to design, implement, and optimize secure cloud environments supporting U.S. government, DoD, and intelligence missions.

You will ensure compliance with NIST 800-53, FedRAMP, RMF, and DoD IL-4/IL-5 while protecting data across AWS GovCloud, Azure, and hybrid clouds. The role requires hands-on security in regulated settings, collaboration with DevSecOps, and experience implementing Zero Trust, IAM, encryption, and automated security

Qualifications

• U.S. citizen required.
• Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, or 5+ years equivalent experience in cloud security engineering.
• 5–9+ years in cloud security engineering, with hands-on work in AWS GovCloud, Azure, Google GCP, or multi-cloud environments.

Responsibilities

• Design and implement secure cloud architectures across AWS GovCloud, Azure, and/or Google Cloud.
• Maintain compliance with NIST 800-53, FedRAMP, RMF, DoD IL-2/4/5, RMF and SCCA requirements.
• Configure IAM/RBAC, JIT access, Key Vaults, and Zero Trust across cloud environments.
• Deploy cloud-native security tools like Defender for Cloud, Azure Sentinel, and AWS GovCloud services.

Skills

Cloud platforms

IAM/RBAC

Encryption

Network security

Cloud-native security

Scripting

Education

Security Certifications (CISSP, AWS Security-Specialty, etc.)

Tools

Terraform

CloudFormation

Python scripting

Microsoft Defender

Elastic/SIEM

Job description

Apex Technology, Inc. is seeking a Cloud Security Engineer to design, implement, and optimize secure cloud environments supporting U.S. government, DoD, and intelligence missions.

You will ensure compliance with NIST 800-53, FedRAMP, RMF, and DoD IL-4/IL-5 while protecting data across AWS GovCloud, Azure, and hybrid clouds. The role requires hands-on security in regulated settings, collaboration with DevSecOps, and experience implementing Zero Trust, IAM, encryption, and automated security