GovCloud & DoD Cloud Security Engineer

Apex Space, Inc.; Los Angeles, Northern (CA, KY); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Equity in Apex

Comprehensive healthcare

PTO 15+ days

401(k) with employer matching

Parental leave

Daily catered lunch

Office in Playa Vista

Impactful aerospace projects

Job summary

Apex Space, Inc. is seeking a Cloud Security Engineer to design, implement, maintain, and optimize secure cloud environments supporting U.S. government missions.

You will protect classified data across AWS GovCloud, Azure, and hybrid/multi-cloud setups while ensuring compliance with NIST, FedRAMP, RMF, and DoD IL requirements. The role requires hands-on security in regulated environments, collaboration with DevSecOps, and strong governance for SSP/SAR/POA&M artifacts.

Qualifications

• Must have 5+ years in cloud security engineering or equivalent.
• Experience in AWS GovCloud, Azure Government, or multi-cloud environments.
• Hands-on with IAM/RBAC, encryption, and network security in cloud environments.
• Familiarity with compliance frameworks (NIST, FedRAMP, RMF) and security tooling.

Responsibilities

• Design secure cloud architectures across AWS GovCloud, Azure, and Google Cloud.
• Maintain compliance with NIST 800-53, FedRAMP, RMF, and DO D ILs.
• Manage IAM, RBAC, JIT access, Key Vaults, and ZTA across clouds.
• Deploy security tools (Defender for Cloud, Sentinel, SIEM) for threat detection.

Skills

IAM/RBAC

Zero Trust

Cloud Security

Threat Monitoring

Incident Response

Regulatory Compliance

CI/CD Security

Education

Bachelor's degree in Cybersecurity/Information Assurance/CS

Tools

Terraform

CloudFormation

Microsoft Defender for Cloud

Azure Sentinel

Nessus

Elastic SIEM

Job description

Apex Space, Inc. is seeking a Cloud Security Engineer to design, implement, maintain, and optimize secure cloud environments supporting U.S. government missions.

You will protect classified data across AWS GovCloud, Azure, and hybrid/multi-cloud setups while ensuring compliance with NIST, FedRAMP, RMF, and DoD IL requirements. The role requires hands-on security in regulated environments, collaboration with DevSecOps, and strong governance for SSP/SAR/POA&M artifacts.