Security System Architect

Telesat; Ottawa; On-site; CAD 120,000 - 180,000; Full time

Job summary

Telesat seeks a Security System Architect to secure next‑generation satellite and ground systems. You will lead cybersecurity across the product lifecycle, bridging system architecture with security practices and working with engineers, stakeholders, and external partners.

You will define secure development guidelines, perform threat modeling, and drive risk assessments to ensure resilient, secure space, ground, and cloud solutions.

Qualifications

• Bachelor's degree or equivalent in a related field.
• 10+ years in cybersecurity or system/product security.
• Experience in aerospace, satellite, telecommunications or mission-critical environments.
• Experience securing embedded, networked, and cloud-native systems.
• Certifications are a plus.

Responsibilities

• Lead threat modeling and security risk assessments across product lifecycles.
• Define and maintain secure-by-design development architecture for satellite, ground, network and cloud systems.
• Collaborate with Segment Domain Architects and product cybersecurity teams to embed security requirements.
• Support DevSecOps integration and automated security tooling in CI/CD pipelines.
• Guide architectural decisions to improve resilience and security of space and ground systems.

Skills

Security architecture

Threat modeling

DevSecOps practices

Stakeholder management

Security risk assessments

Education

Bachelor's degree in Computer Science, Cybersecurity, Electrical Engineering, or related field

Tools

Kubernetes

VMs

Container security

Service mesh architectures

PKI / certificate lifecycle

SAST/DAST/SCA

SIEM platforms

Job description

Telesat (Nasdaq and TSX: TSAT) is a leading global satellite operator, providing reliable and secure satellite-delivered communications solutions worldwide to broadcast, telecommunications, corporate and government customers for over 55 years. Backed by a legacy of engineering excellence, reliability and industry-leading customer service, Telesat has grown to be one of the largest and most successful global satellite operators.

Telesat Lightspeed, our revolutionary Low Earth Orbit (LEO) satellite network, scheduled to begin service in 2027, will revolutionize global broadband connectivity for enterprise and Government users by delivering a combination of high capacity, security, resiliency and affordability with ultra-low latency and fiber-like speeds. Telesat is headquartered in Ottawa, Canada, and has offices and facilities around the world. Follow Telesat on X and LinkedIn or visit www.telesat.com

We are seeking an experienced and highly motivated Security System Architect to secure next-generation satellite systems and support ground infrastructure. Reporting to the Senior Director, System Architecture and Release Train, you will lead the integration of cybersecurity across the product lifecycle, ensuring security is embedded from concept and design through deployment and operations.

As a member of the System Architecture team,astheSecurityChampionyou will work closely with Segment Domain Architects, engineering teams, and Product Cybersecurity stakeholders to ensure cybersecurity requirements are effectively incorporated into system architectures and product designs. Acting as the bridge between system architecture and cybersecurity, you will champion secure-by-design principles, assess cyber risks, and guide architectural decisions that enhance the resilience and security of space, ground, network, and cloud-based systems.

Key Responsibilities

• Asystem architect with a deephands-onunderstanding ofdevelopmentprocesses and the ability to enhance them to easily identify security risks within the productsandremediate or mitigate the risks without compromising functionality and performance.
• For satellite, ground segment, network, and cloud-based systems, defineand maintain:
  • common cybersecurity development architecture,
  • assist in translating security requirements into actionable items for the development teams,
  • ensure that the development teams have a consistent understanding of the required security paradigms, and can consider them at the needed development stages,
  • develop guidelines on best adoption practices and design principles in response to guidance from Product Cybersecurity and Governance, Risk and Compliance teams.
• Act as a bridge between the development teamsand thecybersecurityteam. Partner with Segment Domain Architects to integrate security requirements into end-to-end system architectures and technical roadmaps.
• Lead threat modeling, security risk assessments, and architecture reviews throughout the product lifecycle.
• Evaluate vulnerabilities, support remediation efforts, and assess the effectiveness of implemented security controls.
• Implementsecurity verification strategies and review results from penetration testing, code analysis, fuzzing, and other security assessments.
• SupportDevSecOps practices and integration of automated security tooling into development and CI/CD pipelines.
• Support the Operations teams in development of security monitoring, incident response, and recovery strategies for mission-critical systems.
• Support technical interactions with customers, partners, and vendors on cybersecurity-related topics.

Education & Experience

• Bachelor's degree in Computer Science, Cybersecurity, Electrical Engineering, or a related field.
• 10+ years of experience in cybersecurity, system architecture with proven product development experience, product security, or embedded systems security.
• Experience in aerospace, satellite communications, telecommunications, defense, or other mission-critical environments.
• Experience securing embedded, networked, and cloud-native systems.
• Certifications are considered an asset.

Knowledge, Skills & Abilities

• Strong understanding ofvarious software systems architectures, secure communications, and cryptographic technologies.
• Experience with satellite, terminaland ground system architectures and their associated cybersecurity challenges.
• Knowledge of cybersecurity frameworks such as NIST 800-53, ISO/IEC 27001, and related compliance requirements.
• Experience with security assessment tools and practices, including SAST, DAST, SCA, vulnerability management, and SIEM platforms.
• Experiencewith Kubernetes,VMs,container security, service mesh architectures, PKI,Security devices,and certificate lifecycle management.
• Understanding of the cybersecurity threat landscape affecting space and telecommunications systems.
• Strong analytical, communication, and stakeholder management skills with the ability to influence architectural decisions across multidisciplinary teams.

This role plays a critical part in ensuring the security, resilience, and mission assurance of our next-generation satellite and ground systems while enabling secure innovation across the Development organization.

What Success Looks Like

• Security is embedded into all major architecturaland designdecisions from concept throughtodeployment.
• Mission-critical satellite and ground systems are designed with resilience against evolving cyber threats.
• Engineering teams consistently adopt secure-by-design and DevSecOps practices.
• Security requirements are effectively balanced with operational performance, mission objectives, and delivery timelines.
• The organization maintains acost-effective,strong security posture while enabling innovation across next-generation space systems.

Organizational Impact

This role serves as the cybersecurity architectural authority for satellitepayloadandground system development, ensuring that security is treated as a foundational design requirement and strategic differentiator.Acts as a bridge between the Product cybersecurity team and the development teams.The Security System Architect will play a critical role in protecting mission integrity, safeguarding customer trust, and enabling secure growth of the organization's space and communications capabilities.

The successful candidate must be able to work in Canada and obtain clearance under the Canadian Controlled Goods program (CGP).

At Telesat, we take pride in being an equal opportunity employer that values equality in the workplace. We are committed to providing the best candidate experience possible including any required accommodations at every stage of our interview process. All qualified applicants that have been selected for an interview that require accommodations, are advised to inform the Telesat Talent team accordingly. We will work with you to meet your needs. All accommodation information provided will be treated as confidential.