FedRAMP & DoD Cloud Security Engineer

SpaceX Super Intelligence; New York (NY); On-site; USD 100,000 - 198,000; Full time

Benefits offered by this job

Equity

Medical, vision, and dental coverage

401(k) retirement plan

Disability insurance

Life insurance

Employee discounts

Job summary

SpaceXSI is seeking a Government Cloud Security Engineer to design, implement, and maintain security controls across federal environments, including hybrid and multi-cloud setups. You will build and operate security tooling, secure containerized Kubernetes environments, and enforce identity, encryption, and access controls in collaboration with engineering and compliance teams.

You will drive continuous monitoring, incident response, and regulatory alignment (FedRAMP, NIST, CIS).

Qualifications

• Active U.S. security clearance (e.g., Secret, Top Secret) or eligibility to obtain one.
• 3+ years of hands-on experience in cloud security, cybersecurity, DevSecOps, or infrastructure engineering with a security focus.

Responsibilities

• Design, implement, and manage security architecture for federal and DoD deployments across cloud and on-premises environments, aligned to FedRAMP High, DoD IL5/IL6, and NIST SP 800-53 controls
• Implement and operate security tooling and services such as SIEM and log pipelines, EDR, vulnerability scanners, container runtime security, and policy-as-code enforcement
• Building secure containerized, Kubernetes-managed environments leveraging Zero Trust principles
• Secure Linux hosts, Kubernetes clusters, virtualization, and databases, including PKI and TLS, SSH and bastion access, and OS-level auditing
• Design and enforce identity and access management, including SSO and federation, phishing-resistant MFA, RBAC, just-in-time privileged access, and periodic access reviews
• Partner with network teams to secure firewalls, VPN and IPsec, DNS, load balancers and reverse proxies, VLAN and subnet segmentation, and routing and switching ACLs
• Protect data encryption at rest and in transit, including envelope encryption and key management
• Harden operating systems, network devices, databases, and container platforms against DISA STIGs and CIS Benchmarks, and run credentialed vulnerability and compliance scanning to keep them compliant over time
• Perform detection, threat hunting, incident response, and root cause analysis, working with the SOC, maintain and exercise the incident response plan, and meet federal incident reporting requirements (e.g., CISA, DoD)
• Own continuous monitoring end to end, including monthly vulnerability scanning and reporting, deviation requests, and driving POA&M items through remediation and closure
• Support ATO packages and assessments, including System Security Plan (SSP) and control implementation documentation, 3PAO and DISA assessor evidence requests, and significant change requests
• Partner with developers and architects to build DevSecOps practices, including secure CI/CD pipelines, secure defaults, and security review of Infrastructure as Code, container images, and Kubernetes deployments before they ship

Skills

Cloud security

DevSecOps

Threat detection

Identity and access management

Zero-trust

Compliance frameworks

Tools

Azure security services

Kubernetes security

SIEM tools

Vulnerability scanners

Terraform

CI/CD security

Job description

SpaceXSI is seeking a Government Cloud Security Engineer to design, implement, and maintain security controls across federal environments, including hybrid and multi-cloud setups. You will build and operate security tooling, secure containerized Kubernetes environments, and enforce identity, encryption, and access controls in collaboration with engineering and compliance teams.

You will drive continuous monitoring, incident response, and regulatory alignment (FedRAMP, NIST, CIS).