Principal DevSecOps Architect

Join BlackSky, a leader in secure real-time geospatial intelligence and satellite missions. As a Principal DevSecOps Architect, you will shape and drive the cybersecurity of our software systems and satellite ground segment deployments. This hands-on role requires a multi-faceted individual with a cybersecurity and infrastructure background who can work across diverse stakeholder sets to achieve cybersecurity standards compliance. You will develop robust architectural blueprints, assess vulnerabilities, and establish engineering-wide security practices. This position offers competitive compensation, 100% health insurance, flexible work schedules, and more.

• Drive alignment between the Information Security Office and the Chief Technology Office by developing and decomposing requirements and solutions to achieve security compliance of engineering deployments.
• Develop robust architectural blueprints and plans for software, network, and infrastructure deployment security for systems hosted within cloud and on-premises environments ensuring adherence to industry best practices and regulatory compliance.
• Support the Engineering organization by assessing vulnerabilities and security risks through security and architectural reviews, and partner with the DevOps teams to integrate automated security controls directly into Infrastructure-as-Code (IAC) templates.

• Effective communication skills to represent security, architectural, and engineering concepts and decisions across varied stakeholders including Engineering, Sales, Customers, Product Management
• Intimate knowledge of software security standards including NIST 800-171, NIST 800-53, NIST 800-207, FIPS 140-2, FedRAMP, and ISO/IEC 27001:2022
• Experience with the software engineering life cycle from product concept through operations and maintenance and toolchains used to manage this process (JIRA, Git, etc.)
• Must be eligible to obtain and maintain a US Security Clearance (this requires US Citizenship)
• Experience with Kubernetes and on-premises deployments of software systems
• Versed in Systems Engineering best practices and tools including communicating, managing, and documenting system architectures, documenting interfaces, documenting and validation of functional and non-functional requirements
• Familiarity with software engineering best practices and process including agile development, enterprise design patterns, and coding standards
• Experience building security architecture roadmaps for businesses
• A minimum of 12 years of related work experience with at least five (5) years focused on leading projects in DevSecOps or infrastructure security architecture
• Proficient in DevSecOps tooling, technologies, and environments
• Experience in architecting complex software systems and deployments for cybersecurity compliance
• Bachelor’s degree in an engineering field
• Active ISC2 Information Systems Security Architecture Professional (ISSAP) or Certified Information Systems Security Professional (CISSP) certification
• A minimum of 15 years of related work experience with at least five (5) years in focused on leading projects in DevSecOps or infrastructure security architecture
• Experience upgrading software systems and guiding engineering teams to achieve NIST 800-171, ISO/IEC 27001:2022, or FedRAMP Compliance
• Experience securing software systems for on-premises air-gapped environments
• Former software engineering and software architecture experience for production systems, especially for space or defense applications
• Hands on experience with DevOps and Kubernetes infrastructure and deployments
• Master’s degree in engineering