SaaS Cloud Security Specialist | FedRAMP & NIST Telework

Centers for Medicare & Medicaid Services; Maryland; Hybrid; USD 116,000 - 158,000; Full time

Job summary

Centers for Medicare & Medicaid Services (CMS) is seeking an IT Cybersecurity Specialist to secure cloud apps behind American healthcare. You will help secure SaaS platforms and cloud-hosted apps across CMS, building governance frameworks, automating security workflows, and assessing cloud environments protecting systems serving millions of Americans.

Responsibilities include designing enterprise-wide security standards, integrating security tools, and briefing CMS leadership on risk and

Qualifications

• Experience securing SaaS platforms and cloud-hosted applications (Microsoft 365, Salesforce, ServiceNow) using SSPM or CASB technologies.
• Background applying federal cybersecurity frameworks (FISMA, FedRAMP, NIST RMF) to assess and monitor cloud compliance posture.
• Experience developing and integrating automated workflows, scripts, or security tools to manage security findings across cloud or SaaS environments.

Responsibilities

• Plan, develop, and implement enterprise-wide SaaS security governance frameworks, policies, standards, and baselines for secure adoption, operation, and continuous monitoring of cloud-hosted applications
• Design and implement automated security workflows, scripts, and integration pipelines connecting SaaS security tools to enterprise monitoring and ticketing systems
• Provide technical consultation and briefings to CMS senior leadership, application owners, vendors, and Federal partners on SaaS security risks and remediation strategies
• Conduct security posture, vulnerability, and configuration assessments of SaaS platforms, prioritizing findings by risk
• Evaluate SaaS platforms, third-party providers, and application integrations against Federal cybersecurity requirements

Skills

Attention to Detail

Customer Service

Oral Communication

Problem-Solving

Tools

SSPM

CASB

Microsoft 365

Salesforce

ServiceNow

Job description

Centers for Medicare & Medicaid Services (CMS) is seeking an IT Cybersecurity Specialist to secure cloud apps behind American healthcare. You will help secure SaaS platforms and cloud-hosted apps across CMS, building governance frameworks, automating security workflows, and assessing cloud environments protecting systems serving millions of Americans.

Responsibilities include designing enterprise-wide security standards, integrating security tools, and briefing CMS leadership on risk and