# Government Cloud Security Engineer

**Company**: SpaceXSI
**Location**: Austin, TX
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $100,000 - $198,000 USD
**Category**: Security
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/xai/jobs/5294116007?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/government-cloud-security-engineer-b406250d-cc3/

## Description

SpaceXSI is seeking a skilled Government Cloud Security Engineer to design, implement, and maintain robust security controls across its Federal environments, including hybrid and multi-cloud scenarios.

In this hands-on role, you will build, strengthen, and maintain the company's security posture, protect critical workloads, and collaborate with engineering, DevOps, and compliance teams to embed security throughout the development lifecycle.

**Responsibilities:**

- Design, implement, and manage security architecture for federal and DoD deployments across cloud and on-premises environments, aligned to FedRAMP High, DoD IL5/IL6, and NIST SP 800-53 controls

- Implement and operate security tooling and services such as SIEM and log pipelines, EDR, vulnerability scanners, container runtime security, and policy-as-code enforcement

- Build secure containerized, Kubernetes-managed environments leveraging Zero Trust principles

- Secure Linux hosts, Kubernetes clusters, virtualization, and databases, including PKI and TLS, SSH and bastion access, and OS-level auditing

- Design and enforce identity and access management, including SSO and federation, phishing-resistant MFA, RBAC, just-in-time privileged access, and periodic access reviews

- Partner with network teams to secure firewalls, VPN and IPsec, DNS, load balancers and reverse proxies, VLAN and subnet segmentation, and routing and switching ACLs

- Protect data encryption at rest and in transit, including envelope encryption and key management

- Harden operating systems, network devices, databases, and container platforms against DISA STIGs and CIS Benchmarks, and run credentialed vulnerability and compliance scanning to keep them compliant over time

- Perform detection, threat hunting, incident response, and root cause analysis, working with the SOC, maintain and exercise the incident response plan, and meet federal incident reporting requirements (e.g., CISA, DoD)

- Own continuous monitoring end to end, including monthly vulnerability scanning and reporting, deviation requests, and driving POA&M items through remediation and closure

- Support ATO packages and assessments, including System Security Plan (SSP) and control implementation documentation, 3PAO and DISA assessor evidence requests, and significant change requests

- Partner with developers and architects to build DevSecOps practices, including secure CI/CD pipelines, secure defaults, and security review of Infrastructure as Code, container images, and Kubernetes deployments before they ship

**Basic Qualifications:**

- Active U.S. security clearance (e.g., Secret, Top Secret) or eligibility to obtain one

- 3+ years of hands-on experience in cloud security, cybersecurity, DevSecOps, or infrastructure engineering with a security focus

**Preferred Skills and Experience:**

- Microsoft Certified: Azure Security Engineer Associate (AZ-500) or Cybersecurity Architect (SC-100), or other relevant certifications such as CISSP, CCSP, AWS Security Specialty, or GIAC (e.g., GCLD, GCIH)

- Hands-on experience with Azure security services (Defender, Sentinel, Entra ID, Azure Policy, Key Vault, Purview) and with on-prem Linux, Kubernetes, and network infrastructure (Palo Alto, Cisco, Juniper)

- Experience with detection and response engineering and SOC operations

- Knowledge of container and Kubernetes security, software supply chain security (image signing, hardened base images), or AI/ML workload protection

- Experience supporting FedRAMP High or DoD IL5/IL6 authorizations, including continuous monitoring and assessor interactions

- Hands-on expertise in building and maintaining secure infrastructure from the ground up in both cloud or on-prem environments

- Proficiency in scripting/automation (PowerShell, Azure CLI, Bicep/ARM templates, Terraform)

- Strong understanding of identity federation, zero-trust principles, encryption, network security, and vulnerability management

- Familiarity with compliance frameworks (NIST, CMMC, STIGs, etc.) and regulatory requirements

- Excellent problem-solving, analytical, and communication skills

- Strong verbal and written communication skills and the ability to stay composed under pressure

**Compensation and Benefits:**

$100,000 - $198,000 USD

Base salary is just one part of our total rewards package at SpaceXSI, which also includes equity, comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short & long-term disability insurance, life insurance, and various other discounts and perks.

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- cloud security
- cybersecurity
- DevSecOps
- infrastructure engineering
- U.S. security clearance

### Nice to have
- Azure security services
- Linux
- Kubernetes
- network infrastructure
- detection and response engineering
- SOC operations
- container and Kubernetes security
- software supply chain security
- AI/ML workload protection
- FedRAMP High
- DoD IL5/IL6
- scripting/automation
- identity federation
- zero-trust principles
- encryption
- network security
- vulnerability management
- compliance frameworks

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/xai/jobs/5294116007?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)