Senior Security Engineer (Space Communications)

Responsibilities

• Build security from the ground up - You're not inheriting someone else's technical debt.
• Secure the impossible - Our phased array antennas track hundreds of satellites simultaneously across multiple orbits.
• Own the whole stack - From RF protocols to Kubernetes clusters.
• Deploy enterprise SIEM solutions that can handle terabytes of satellite communications data while maintaining detailed audit trails for the most stringent compliance requirements.
• Pioneer security for space communications - When you're building infrastructure that doesn't exist anywhere else, the security playbooks don't exist yet.
• Create automated compliance pipelines that don't slow down deployment cycles - Build comprehensive security documentation and reporting standards that satisfy FedRAMP and NIST 800-171 requirements without breaking engineering velocity.

Requirements

• 5+ years of production experience with infrastructure as code (Terraform, AWS CDK).
• Ability to obtain and maintain TS/SCI clearance.
• Strong knowledge of NIST 800-171, CUI, and FedRAMP frameworks.
• Familiarity with government cloud environments (AWS GovCloud, Azure Government) and CI/CD deployment pipelines that need to work across air-gapped networks.
• Proficiency in one or more general-purpose languages (Python, Go, Rust, etc.).
• Experience implementing defensive controls for endpoints, SaaS apps, and infrastructure that operates in environments where traditional security assumptions don't apply.

Qualifications

• Basic Qualifications:
  • 5+ years of production experience with infrastructure as code (Terraform, AWS CDK).
  • Ability to obtain and maintain TS/SCI clearance.
  • Strong knowledge of NIST 800-171, CUI, and FedRAMP frameworks.
  • Familiarity with government cloud environments (AWS GovCloud, Azure Government) and CI/CD deployment pipelines that need to work across air-gapped networks.
  • Proficiency in one or more general-purpose languages (Python, Go, Rust, etc.).
  • Experience implementing defensive controls for endpoints, SaaS apps, and infrastructure that operates in environments where traditional security assumptions don't apply.
• Preferred Qualifications:
  • Experience building large-scale log ingestion and storage pipelines that can handle massive data volumes from distributed ground stations.
  • Hands-on experience with SIEM (Splunk, QRadar, Sentinel, Panther) and endpoint security solutions (CrowdStrike, SentinelOne) in production environments.
  • Strong Linux experience in production environments - Our ground stations run custom distributions.
  • Knowledge of DFARS compliance and government contracting security requirements - You've worked where "move fast and break things" meets "don't break national security".
  • Familiarity with EMASS or similar government assessment tools.

Additional Requirements

• This position requires successfully obtaining and maintaining a Top Secret Security Clearance as a condition of employment.

Additional Information

• If you need a reasonable accommodation as part of your application for employment or interviews with us, please let us know.
• To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State.
• Northwood Space is an Equal Opportunity Employer; employment with Northwood Space is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.