Federal Cloud Security Engineer: FedRAMP & DoD IL5/IL6

SpaceX Super Intelligence; Washington (District of Columbia); On-site; USD 100,000 - 198,000; Full time

Job summary

SpaceXSI is seeking a Government Cloud Security Engineer to design, implement, and maintain robust security controls across Federal environments, including hybrid and multi-cloud setups. This hands-on role requires building a strong security posture, threat detection, and collaboration with engineering, DevOps, and compliance teams to embed security throughout the development lifecycle.

You will drive FedRAMP High and DoD IL5/IL6 compliance efforts, implement SIEM/EDR and IAM controls, and lead

Qualifications

• 3+ years of hands-on experience in cloud security, cybersecurity, DevSecOps, or infrastructure engineering with a security focus.
• Active U.S. security clearance (e.g., Secret, Top Secret) or eligibility to obtain one.
• Experience supporting FedRAMP High or DoD IL5/IL6 authorizations, including continuous monitoring and assessor interactions.

Responsibilities

• Design, implement, and manage security architecture for federal and DoD deployments across cloud and on-prem environments, aligned to FedRAMP High, DoD IL5/IL6, and NIST SP 800-53 controls.
• Implement and operate security tooling and services such as SIEM and log pipelines, EDR, vulnerability scanners, container runtime security, and policy-as-code enforcement.
• Build secure containerized, Kubernetes-managed environments leveraging Zero Trust principles.
• Secure Linux hosts, Kubernetes clusters, virtualization, and databases, including PKI and TLS, SSH and bastion access, and OS-level auditing.
• Design and enforce identity and access management, including SSO and federation, phishing-resistant MFA, RBAC, just-in-time privileged access, and periodic access reviews.
• Partner with network teams to secure firewalls, VPN and IPsec, DNS, load balancers and reverse proxies, VLAN and subnet segmentation, and routing and switching ACLs.
• Protect data encryption at rest and in transit, including envelope encryption and key management.
• Harden operating systems, network devices, databases, and container platforms against DISA STIGs and CIS Benchmarks, and run credentialed vulnerability and compliance scanning to keep them compliant over time.
• Perform detection, threat hunting, incident response, and root cause analysis, working with the SOC, maintain and exercise the incident response plan, and meet federal incident reporting requirements (e.g., CISA, DoD).
• Own continuous monitoring end to end, including monthly vulnerability scanning and reporting, deviation requests, and driving POA&M items through remediation and closure.

Skills

Security clearance US

Cloud security

DevSecOps

Infrastructure security

PowerShell

Azure CLI

Terraform

Tools

Azure Defender/Sentinel

Azure Key Vault

CIS/ STIGs

FedRAMP

DoD IL5/IL6

Job description

SpaceXSI is seeking a Government Cloud Security Engineer to design, implement, and maintain robust security controls across Federal environments, including hybrid and multi-cloud setups. This hands-on role requires building a strong security posture, threat detection, and collaboration with engineering, DevOps, and compliance teams to embed security throughout the development lifecycle.

You will drive FedRAMP High and DoD IL5/IL6 compliance efforts, implement SIEM/EDR and IAM controls, and lead