Government Cloud Security Engineer
xAI · Austin, TX; New York, NY; Palo Alto, CA; Washington, DC
About this role
**SpaceXSI — Government Cloud Security Engineer** SpaceXSI is building Super Intelligence to help humanity understand the universe. In this hands-on role, you’ll design, implement, and maintain robust security controls across Federal environments (including hybrid and multi-cloud scenarios). You’ll strengthen the security posture, protect critical workloads, and collaborate with engineering, DevOps, and compliance teams to embed security throughout the development lifecycle—while achieving and maintaining compliance with government regulations such as **FedRAMP** and **CMMC**. --- **Responsibilities** - Design, implement, and manage security architecture for federal and DoD deployments across cloud and on-premises environments, aligned to **FedRAMP High**, **DoD IL5/IL6**, and **NIST SP 800-53** - Implement and operate security tooling and services such as **SIEM/log pipelines**, **EDR**, **vulnerability scanners**, **container runtime security**, and **policy-as-code** enforcement - Build secure containerized, **Kubernetes-managed** environments using **Zero Trust** principles - Secure **Linux hosts**, **Kubernetes clusters**, virtualization, and databases (including **PKI/TLS**, **SSH/bastion access**, and **OS-level auditing**) - Design and enforce **IAM** (SSO/federation, phishing-resistant MFA, **RBAC**, **just-in-time** privileged access, and periodic access reviews) - Partner with network teams to secure firewalls, VPN/IPsec, DNS, load balancers/reverse proxies, VLAN/subnet segmentation, and routing/switching ACLs - Protect data encryption at rest and in transit (including **envelope encryption** and **key management**) - Harden operating systems, network devices, databases, and container platforms against **DISA STIGs** and **CIS Benchmarks**; run credentialed vulnerability/compliance scanning to maintain compliance - Perform detection, threat hunting, incident response, and root cause analysis; work with the SOC; maintain/exercise the incident response plan; meet federal incident reporting requirements (e.g., **CISA**, **DoD**) - Own continuous monitoring end to end (monthly vulnerability scanning/reporting, deviation requests, and driving POA&M items through remediation and closure) - Support **ATO packages** and assessments (SSP/control documentation, **3PAO** and DISA assessor evidence requests, significant change requests) - Partner with developers and architects to build **DevSecOps** practices (secure CI/CD pipelines, secure defaults, and security review of Infrastructure as Code, container images, and Kubernetes deployments before release) --- **Basic Qualifications** - Active U.S. security clearance (e.g., **Secret**, **Top Secret**) or eligibility to obtain one - **3+ years** hands-on experience in cloud security, cybersecurity, DevSecOps, or infrastructure engineering with a security focus --- **Preferred Skills & Experience** - **AZ-500** or **SC-100**, or other relevant certifications (e.g., **CISSP**, **CCSP**, AWS Security Specialty, **GIAC** such as GCLD/GCIH) - Hands-on experience with **Azure security services** (Defender, Sentinel, Entra ID, Azure Policy, Key Vault, Purview) and on-prem Linux/Kubernetes/network infrastructure (e.g., Palo Alto, Cisco, Juniper) - Detection & response engineering and SOC operations experience - Container/Kubernetes security, software supply chain security (image signing, hardened base images), or AI/ML workload protection - Experience supporting **FedRAMP High** or **DoD I
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.