Principal Cyber Security Engineer, Strategy and Architecture

About the role

As a Lead Cyber Security Engineer, you will support the Security Engineering and Operations organization, working closely with the Deputy CISO to implement security strategies and guide the overall direction of the security organization. This role involves leading the organization’s roadmap, resolving blockers with engineering authorities, and delivering technical solutions that advance strategic objectives.

You will operate across multiple cybersecurity technical and functional groups, translating strategic vision into practical work while collaborating with engineering and operational security teams. The ideal candidate is a hands-on engineer, mentor, and multi-functional facilitator capable of contributing directly to programs.

Responsibilities

• Strategic & Multi-Functional Leadership:
  • Serve as a technical liaison between the CISO organization and other senior leadership domains to anticipate future security needs.
  • Collaborate across security functions to ensure alignment, scalability, and efficiency.
  • Participate in enterprise security architecture discussions and translate outcomes into domain-specific engineering requirements and repeatable patterns.
• Technical Leadership & Execution:
  • Provide hands-on technical leadership in designing, developing, and validating secure system architectures, communications networks, and security controls.
  • Guide the implementation of secure network design, segmentation strategies, encryption mechanisms, identity and access controls, and monitoring systems.
  • Establish methodologies for documenting technical decisions to mature security-impacting services efficiently.
  • Identify operational process improvements and tooling gaps within the Security organization.
  • Bridge the gap between security operations and engineering to ensure operational realities inform engineering decisions.
  • Encourage the responsible adoption of AI capabilities across the Security organization.
  • Develop mechanisms to enforce security policies, procedures, and compliance with frameworks like NIST, ISO 27001, GDPR, and CCPA.
• Team Development & Enablement:
  • Mentor and develop security engineers across multiple teams, providing technical support, training, and professional growth guidance.
  • Build trust-based relationships with engineering teams, product owners, executives, and external partners.
  • Use critical thinking to navigate complex problem-sets and prioritize system and network events with real-world business impacts.

Requirements

• Bachelor’s or Master’s degree in Electrical Engineering, Computer Engineering, Computer Science, Cybersecurity, or a related technical field.
• 10+ years of experience in security engineering, systems engineering, network engineering, or similar roles.
• Strong judgment and ability to analyze risk in applying security controls for real-world risk reduction.
• Experience navigating trade-offs between security, performance, and reliability.
• Knowledge of secure system design, communications networks, cybersecurity controls, and threat modeling.
• Experience working across organizational boundaries, including security, infrastructure, networking, and product engineering.
• Familiarity with modern network protocols, routing, wireless communications, encryption, and network security architecture.
• Hands-on experience managing and operating enterprise security tools (e.g., firewalls, IDS/IPS, PKI, SIEM/SOAR, EDR/NDR, CSPM/CNAPP, zero-trust).
• Excellent communication skills with the ability to influence collaborators at multiple levels.
• US Citizenship required.
• Ability to travel up to 20%.
• Hybrid role based in Carlsbad, CA, Tempe, AZ, Reston, VA, or Marlborough, MA.

Preferred Qualifications

• A growth mindset and willingness to learn new skills and tools.
• Ability to influence without direct authority.
• Systems-level thinking and architectural insight.
• Strong problem-solving, analytical reasoning, and risk-based judgment.
• Experience establishing structure and consistency across decentralized teams.
• Understanding of satellite (or similar) communications networks.
• Experience in environments subject to regulatory frameworks such as FedRAMP, CMMC, HIPAA, PCI-DSS, or SOC 2.
• Familiarity with zero-trust architecture principles and practical implementation challenges.
• Relevant certifications (e.g., CISSP, CISM, GIAC, SABSA) are valued but not required.

Pay

Salary range: $230,000.00 – $363,000.00 annually. For specific work locations within San Jose, the San Francisco Bay area, and the New York City metropolitan area, the base pay range is $285,500.00 – $428,500.00 annually.

Base pay may vary depending on job-related knowledge, skills, and experience. Additional cash or stock incentives may be provided as part of the compensation package.

Benefits

Viasat offers a range of medical, financial, and other benefits focused on holistic health and wellness. Learn more at https://careers.viasat.com/benefits.