Cloud Security Engineer – GovCloud & DoD Compliance

Apex - Satellite Platforms; Los Angeles (CA); On-site; USD 150,000 - 200,000; Full time

Benefits offered by this job

Equity in Apex

Company-paid health care

PTO 15-20 days + holidays

401(k) with match

Parental leave

Daily catered lunch

Job summary

Apex Technology, Inc. is seeking a Cloud Security Engineer to design, implement, and optimize secure cloud environments supporting U.S. government missions.

You will ensure compliance with NIST, FedRAMP, RMF, and DoD IL-4/IL-5 while enabling SOC2, ISO 27001, and PCI-DSS controls across AWS GovCloud, Azure, and hybrid setups. The role requires on-site presence in Playa Vista, CA, hands-on cloud security expertise, and collaboration with DevSecOps to embed security into CI/CD pipelines.

Qualifications

• Experience securing cloud platforms in regulated environments.
• Hands-on work in AWS GovCloud, Azure, Google GCP, or multi-cloud environments.

Responsibilities

• Design secure cloud architectures across AWS GovCloud, Azure, and Google Cloud.
• Maintain compliance with NIST, FedRAMP, RMF, and DoD IL requirements.
• Configure IAM/RBAC, JIT access, and Zero Trust across cloud environments.
• Deploy security tools for threat detection and incident response.
• Conduct vulnerability assessments and security reviews.
• Develop SSP/SAR/POA&M documents and assess risk/compliance.

Skills

Cloud security

IAM/RBAC

Encryption

Network security

SCC

Compliance frameworks

CI/CD security

Security automation

Threat detection

Education

Bachelor’s degree in Cybersecurity/Information Assurance/CS

Tools

Terraform

Python scripting

PowerShell

Microsoft Defender

Azure Sentinel

NESSUS

BURP SUITE

Job description

Apex Technology, Inc. is seeking a Cloud Security Engineer to design, implement, and optimize secure cloud environments supporting U.S. government missions.

You will ensure compliance with NIST, FedRAMP, RMF, and DoD IL-4/IL-5 while enabling SOC2, ISO 27001, and PCI-DSS controls across AWS GovCloud, Azure, and hybrid setups. The role requires on-site presence in Playa Vista, CA, hands-on cloud security expertise, and collaboration with DevSecOps to embed security into CI/CD pipelines.