Principal DevSecOps Architect

This is a fully remote position, open to applicants in Virginia, +1 more state.

📋 Description

• Facilitate collaboration between the Information Security Office and the Chief Technology Office by defining and breaking down requirements and solutions for security compliance.

• Create architectural blueprints and strategic plans for deploying security in software, networks, and infrastructure within both cloud and on-premises settings.

• Design and execute cybersecurity roadmaps and security frameworks for infrastructure in cloud and on-premises environments.

• Evaluate vulnerabilities and security threats through comprehensive security and architectural assessments.

• Collaborate with DevOps teams to embed automated security controls into Infrastructure-as-Code templates, including Terraform and Helm.

• Establish security practices, standards, and access protocols across engineering teams.

• Convert security requirements into engineering specifications aligned with the BlackSky architecture.

• Analyze system, application, and service interactions, assessing the implications of security controls on risk, staffing, and timelines.

• Ensure the production of complete and precise engineering security documentation.

• Oversee the development and implementation of security controls across security, software development, infrastructure, systems engineering, program, and product teams.

• Manage project organization and tracking, risk management, escalation, task prioritization, and alignment with business goals.

• Work with managers and technical teams to resolve customer concerns and devise solutions.

• Develop models and analyze data to assess trade-offs and aid decision-making.

• Carry out other job-related responsibilities as assigned.

⛳️ Requirements

• At least 12 years of relevant work experience, with a minimum of five years dedicated to leading projects in DevSecOps or infrastructure security architecture.

• Bachelor's degree in an engineering discipline.

• Proven experience in architecting complex software systems and deployments to meet cybersecurity compliance standards.

• In-depth knowledge of NIST 800-171, NIST 800-53, NIST 800-207, FIPS 140-2, FedRAMP, and ISO/IEC 27001:2022.

• Experience in creating security architecture roadmaps for organizations.

• Familiarity with agile development methodologies, enterprise design patterns, and coding standards.

• Hands-on experience with Kubernetes and on-premises software system deployments.

• Experience throughout the software engineering lifecycle, from product conceptualization to operations and maintenance, using tools such as JIRA and Git.

• Knowledge of Systems Engineering best practices and tools, including effective communication, management, and documentation of system architectures, interfaces, and both functional and non-functional requirements.

• Strong communication skills across Engineering, Sales, Customers, and Product Management stakeholders.

• Proficient in DevSecOps tools, technologies, and environments.

• Must be eligible to obtain and maintain a US Security Clearance; US Citizenship is required.

• Must comply with applicable U.S. Government space technology export regulations.

• Preferred: Active ISSAP or CISSP certification.

• Preferred: 15 years of relevant experience.

• Preferred: Experience with compliance standards such as NIST 800-171, ISO/IEC 27001:2022, or FedRAMP.

• Preferred: Experience securing on-premises air-gapped environments.

• Preferred: Previous experience in software engineering and architecture, particularly for space or defense applications.

• Preferred: Practical experience with DevOps and Kubernetes infrastructure.

• Preferred: Master’s degree in engineering.

🏝️ Benefits

• Comprehensive medical, dental, vision, disability, group term life and AD&D, and voluntary life and AD&D insurance coverage.

• BlackSky fully covers employee-only premiums for medical, dental, and vision, and provides a $100 monthly contribution towards out-of-pocket costs.

• 15 days of paid time off (PTO).

• 11 company-designated holidays.

• Four Floating Holidays (pro-rated based on hire date).

• One day of paid volunteer leave each year.

• Parental leave benefits.

• 401(k) options for pre-tax and Roth deferrals with employer matching.

• Flexible Spending Accounts available.

• Employee Stock Purchase Program.

• Access to Employee Assistance and Travel Assistance Programs.

• Employer matching for charitable donations.

• Opportunities for professional development.

• Choice of Mac or PC for work purposes.

• Exciting company merchandise.