Aerospace Cybersecurity Architect — Cloud & NIST Controls

Apex Space, Inc.; Los Angeles (CA); Hybrid; USD 180,000 - 230,000; Full time

Benefits offered by this job

Equity

Best-in-class healthcare

Generous PTO

401(k) plan with matching

Parental leave

Daily catered lunch

Office in Playa Vista

Team events

Job summary

Apex Space, Inc. is seeking a Cybersecurity Architect to own security design across our cloud, on-prem, and development environments. This hands-on role collaborates with IT, Engineering, and Operations to embed security from the start.

You will translate NIST SP 800-171 and CMMC Level 2 controls into concrete designs, integrate CrowdStrike, Tenable, and SIEM, and support ATO activities with comprehensive architecture guidance. Applicants must hold a TS/SCI clearance and US citizenship.

Qualifications

• Active TS/SCI clearance at hire time.
• US citizenship is required.
• 5+ years hands-on security engineering or architecture experience.
• Strong knowledge of AWS security, identity, network and endpoint security.

Responsibilities

• Create security architecture for Apex corporate and development environments.
• Translate NIST SP 800-171 and CMMC Level 2 requirements into technical designs and steps.
• Work with CrowdStrike, Tenable, SIEM, and endpoint tools to identify and remediate gaps.
• Support ATO and security activities with architecture docs and guidance.
• Coordinate with network/infrastructure teams on Palo Alto architecture and data flows.
• Define CUI boundaries, diagrams, and data flows as systems evolve.

Skills

Security architecture design

Cloud security

Network security

Endpoint security

Vulnerability management

Tools

CrowdStrike Falcon

Tenable

SIEM

Palo Alto

Terraform

Kubernetes

AWS GovCloud

Entra ID

Elastic

CyberArk

Job description

Apex Space, Inc. is seeking a Cybersecurity Architect to own security design across our cloud, on-prem, and development environments. This hands-on role collaborates with IT, Engineering, and Operations to embed security from the start.

You will translate NIST SP 800-171 and CMMC Level 2 controls into concrete designs, integrate CrowdStrike, Tenable, and SIEM, and support ATO activities with comprehensive architecture guidance. Applicants must hold a TS/SCI clearance and US citizenship.