Government Cloud Security Engineer — FedRAMP/DoD

Maven Ventures; Palo Alto (CA); On-site; USD 100,000 - 198,000; Full time

Benefits offered by this job

Equity

401(k)

Medical, Vision, Dental

Job summary

SpaceXSI is seeking a Government Cloud Security Engineer to design, implement, and maintain security controls across federal environments, including hybrid and multi-cloud deployments.

In this hands-on role, you will build, strengthen, and maintain our security posture, protect critical workloads, and collaborate with engineering, DevOps, and compliance teams to embed security throughout the development lifecycle.

Qualifications

• 3+ years of hands-on experience in cloud security, cybersecurity, DevSecOps, or infrastructure engineering with a security focus.
• Experience supporting FedRAMP High or DoD IL5/IL6 authorizations, including continuous monitoring.

Responsibilities

• Design, implement, and manage security architecture for federal and DoD deployments across cloud and on-premises environments, aligned to FedRAMP High, DoD IL5/IL6, and NIST SP 800-53 controls
• Implement and operate security tooling and services such as SIEM and log pipelines, EDR, vulnerability scanners, container runtime security, and policy-as-code enforcement
• Build secure containerized, Kubernetes-managed environments leveraging Zero Trust principles
• Secure Linux hosts, Kubernetes clusters, virtualization, and databases, including PKI and TLS, SSH and bastion access, and OS-level auditing
• Design and enforce identity and access management, including SSO and federation, phishing-resistant MFA, RBAC, just-in-time privileged access, and periodic access reviews
• Partner with network teams to secure firewalls, VPN and IPsec, DNS, load balancers and reverse proxies, VLAN and subnet segmentation, and routing and switching ACLs
• Protect data encryption at rest and in transit, including envelope encryption and key management
• Harden operating systems, network devices, databases, and container platforms against DISA STIGs and CIS Benchmarks, and run credentialed vulnerability and compliance scanning
• Perform detection, threat hunting, incident response, and root cause analysis, working with the SOC, maintain and exercise the incident response plan, and meet federal incident reporting requirements
• Own continuous monitoring end to end, including monthly vulnerability scanning and reporting, deviation requests, and driving POA&M items through remediation and closure
• Support ATO packages and assessments, including SSP and control implementation documentation, 3PAO and DISA assessor evidence requests
• Partner with developers and architects to build DevSecOps practices, including secure CI/CD pipelines, secure defaults, and security review of IaC, container images, and Kubernetes deployments

Skills

Cloud security

Cybersecurity

DevSecOps

Security architecture

Scripting/automation

Zero Trust

IAM and MFA

FedRAMP/CMMC

Vulnerability management

Security tooling

Tools

Azure Defender

Azure Sentinel

Entra ID

Key Vault

Purview

Linux

Kubernetes

Palo Alto / Cisco / Juniper

Job description

SpaceXSI is seeking a Government Cloud Security Engineer to design, implement, and maintain security controls across federal environments, including hybrid and multi-cloud deployments.

In this hands-on role, you will build, strengthen, and maintain our security posture, protect critical workloads, and collaborate with engineering, DevOps, and compliance teams to embed security throughout the development lifecycle.