SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Apex manufactures satellite buses at scale for commercial space missions, enabling earth observation, communications, and other critical applications. The company combines software, vertical integration, and hardware design to serve the rapidly growing commercial spacecraft market.
We are seeking a Cloud Security Engineer to design, implement, maintain, and optimize secure cloud environments supporting U.S. government, DoD, and intelligence community missions. This role is critical to protecting classified and sensitive data in AWS, Azure, and hybrid/multi-cloud infrastructures while ensuring compliance with federal standards including NIST 800-53, FedRAMP, RMF, and DoD Impact Levels (IL-4/IL-5).
Key responsibilities include:
- Design and implement secure cloud architectures across AWS GovCloud, Azure, and Google Cloud, applying least privilege, encryption, network segmentation, and data protection best practices
- Implement and maintain cloud security frameworks ensuring compliance with NIST 800-53 Rev. 5, FedRAMP, DoD IL-2/4/5, RMF, and SCCA requirements
- Configure and manage IAM, RBAC, JIT access, Key Vaults, and Zero Trust Architecture principles
- Engineer, deploy, and optimize cloud-native security tools including Microsoft Defender for Cloud, Azure Sentinel, AWS GovCloud security services, CSPM/CWPP solutions, and SIEM platforms
- Conduct vulnerability assessments, penetration testing, security configuration reviews against STIGs and CIS benchmarks, and continuous monitoring
- Develop and maintain System Security Plans, Security Assessment Reports, Plans of Action & Milestones, and compliance reporting
- Identify, analyze, and respond to security incidents, perform root-cause analysis, and implement preventive controls
- Perform periodic security audits and reviews to ensure sustained compliance
- Collaborate with DevSecOps, infrastructure, and development teams to integrate security into CI/CD pipelines and support secure cloud migrations
- Assess cloud architectures, propose security improvements, and serve as subject-matter expert on cloud security tools and best practices
- Develop, enforce, and maintain cloud security policies, standards, and automated guardrails supporting secure CI/CD and infrastructure-as-code practices
- Provide guidance and training to engineering teams on secure cloud design patterns
Required qualifications: Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or related field (or 5+ years equivalent professional experience). 5–9+ years hands-on cloud security engineering experience with AWS GovCloud, Azure, Google Cloud, or multi-cloud environments. Must be U.S. citizen. Strong analytical, problem-solving, communication, and collaboration skills for mission-critical environments. Deep knowledge of cloud platforms, IAM/RBAC, encryption, network security, cloud-native security services, SIEM, vulnerability scanners, threat intelligence, and automation tools. Experience with compliance frameworks (NIST, FedRAMP, RMF) and tools like Azure Sentinel, Nessus, Burp Suite, Microsoft Defender. Understanding of network security, encryption, logging/monitoring, container/Kubernetes security, infrastructure-as-code, and scripting (Python, PowerShell). Preferred certifications: CISSP, AWS Certified Security-Specialty, AWS Certified Solutions Architect, Microsoft Certified Security/Compliance/Identity.
On-site requirement: 5 days per week at Playa Vista, CA office.
