Government Cloud Security Engineer (FedRAMP/DoD IL5/IL6)

DevHub, Inc.; Austin (TX); On-site; USD 100,000 - 198,000; Full time

Job summary

SpaceXSI in Austin, TX seeks a Government Cloud Security Engineer to design, implement, and maintain robust security controls across federal environments, blending cloud and on-prem workloads while meeting FedRAMP, DoD IL5/IL6, and NIST SP 800-53 requirements.

You will build security tooling, enforce Zero Trust, manage IAM, conduct threat hunting and incident response, and partner with DevOps, compliance, and infrastructure teams to strengthen the security posture.

Qualifications

• Active U.S. security clearance or eligibility to obtain one.
• 3+ years of hands-on experience in cloud security, cybersecurity, DevSecOps, or infrastructure engineering with a security focus.
• Certifications in Azure/CISSP/CCSP/AWS Security Specialty recommended.
• Experience supporting FedRAMP High or DoD IL5/IL6 authorizations, including continuous monitoring.
• Hands-on expertise building secure cloud and on‑prem environments.
• Scripting/automation with PowerShell, Azure CLI, Bicep/ARM, Terraform.
• Strong knowledge of identity federation, zero-trust, encryption, vulnerability management.
• Familiarity with NIST, CMMC, STIGs and regulatory requirements.

Responsibilities

• Design, implement, and manage security architecture for federal and DoD deployments in cloud and on-prem environments.
• Implement and operate security tooling: SIEM, EDR, vulnerability scanners, container runtime security, policy-as-code.
• Build secure containerized, Kubernetes-managed environments with Zero Trust.
• Secure Linux hosts, Kubernetes, virtualization, and databases with PKI, TLS, SSH, and auditing.
• Design and enforce IAM including SSO, federation, MFA, RBAC, and just-in-time access.
• Collaborate with network teams to secure firewalls, VPN, DNS, load balancers, and ACLs.
• Protect data encryption at rest and in transit; manage envelope encryption and keys.
• Perform detection, threat hunting, incident response, and update incident response plans.

Skills

Cloud security

DevSecOps

Infrastructure security

Threat hunting

Incident response

Scripting/automation

Communication

Education

Microsoft Certified: Azure Security Engineer Associate (AZ-500)

Cybersecurity Architect (SC-100)

CISSP

CCSP

AWS Security Specialty

GIAC certifications (GCLD, GCIH)

Tools

Azure Defender

Azure Sentinel

Entra ID

Azure Policy

Key Vault

Purview

Palo Alto

Cisco

Juniper

Job description

SpaceXSI in Austin, TX seeks a Government Cloud Security Engineer to design, implement, and maintain robust security controls across federal environments, blending cloud and on-prem workloads while meeting FedRAMP, DoD IL5/IL6, and NIST SP 800-53 requirements.

You will build security tooling, enforce Zero Trust, manage IAM, conduct threat hunting and incident response, and partner with DevOps, compliance, and infrastructure teams to strengthen the security posture.