IT Cybersecurity Specialist (Security)

Centers for Medicare & Medicaid Services; Maryland; Hybrid; USD 116,000 - 158,000; Full time

Job summary

Centers for Medicare & Medicaid Services (CMS) is seeking an IT Cybersecurity Specialist to secure cloud apps behind American healthcare. You will help secure SaaS platforms and cloud-hosted apps across CMS, building governance frameworks, automating security workflows, and assessing cloud environments protecting systems serving millions of Americans.

Responsibilities include designing enterprise-wide security standards, integrating security tools, and briefing CMS leadership on risk and

Qualifications

• Experience securing SaaS platforms and cloud-hosted applications (Microsoft 365, Salesforce, ServiceNow) using SSPM or CASB technologies.
• Background applying federal cybersecurity frameworks (FISMA, FedRAMP, NIST RMF) to assess and monitor cloud compliance posture.
• Experience developing and integrating automated workflows, scripts, or security tools to manage security findings across cloud or SaaS environments.

Responsibilities

• Plan, develop, and implement enterprise-wide SaaS security governance frameworks, policies, standards, and baselines for secure adoption, operation, and continuous monitoring of cloud-hosted applications
• Design and implement automated security workflows, scripts, and integration pipelines connecting SaaS security tools to enterprise monitoring and ticketing systems
• Provide technical consultation and briefings to CMS senior leadership, application owners, vendors, and Federal partners on SaaS security risks and remediation strategies
• Conduct security posture, vulnerability, and configuration assessments of SaaS platforms, prioritizing findings by risk
• Evaluate SaaS platforms, third-party providers, and application integrations against Federal cybersecurity requirements

Skills

Attention to Detail

Customer Service

Oral Communication

Problem-Solving

Tools

SSPM

CASB

Microsoft 365

Salesforce

ServiceNow

Job description

Learn more about working at CMS. Visit our CMS LinkedIn Careers page to hear from leadership and explore our hiring priorities: https://www.linkedin.com/company/centers-for-medicare-&-medicaid-services/life/a8009813-3bf5-4d64-bd6f-ca176c2c0a97

About the Role

READY TO SECURE THE CLOUD APPS BEHIND AMERICAN HEALTHCARE? Join the Office of Information Technology as an IT Cybersecurity Specialist securing the SaaS platforms and cloud-hosted applications used across CMS. At CMS, you'll build security governance frameworks, automate security workflows, and assess cloud environments protecting systems that serve 150+ million Americans. Your work could safeguard the cloud infrastructure of American healthcare. Are you ready to get started?

Responsibilities

• Plan, develop, and implement enterprise-wide SaaS security governance frameworks, policies, standards, and baselines for secure adoption, operation, and continuous monitoring of cloud-hosted applications
• Design and implement automated security workflows, scripts, and integration pipelines connecting SaaS security tools to enterprise monitoring and ticketing systems
• Provide technical consultation and briefings to CMS senior leadership, application owners, vendors, and Federal partners on SaaS security risks and remediation strategies
• Conduct security posture, vulnerability, and configuration assessments of SaaS platforms, prioritizing findings by risk
• Evaluate SaaS platforms, third-party providers, and application integrations against Federal cybersecurity requirements

Qualifications

• Experience securing SaaS platforms and cloud-hosted applications (Microsoft 365, Salesforce, ServiceNow) using SSPM or CASB technologies
• Background applying federal cybersecurity frameworks (FISMA, FedRAMP, NIST RMF) to assess and monitor cloud compliance posture
• Experience developing and integrating automated workflows, scripts, or security tools to manage security findings across cloud or SaaS environments

Required Skills

• Attention to Detail
• Customer Service
• Oral Communication
• Problem-Solving

Pay range and compensation package

Salary: $115,711 - $158,322/year (varies by location)

Locations: Woodlawn, MD | Dallas, TX (Telework eligible)

Resume required (2 page limit).

#Cybersecurity #CloudSecurity #SaaS #FedRAMP #NIST #FISMA #FederalJobs #CMS