Information Security Architect 4

United Launch Alliance; Town of Florida (NY); On-site; USD 131,834 - 219,724; Full time

Benefits offered by this job

401(k) match + employer contribution

Discretionary annual incentive bonus

Generous paid time off

Flexible work environments

Job summary

United Launch Alliance information security architect 4 role seeks to design, implement, and sustain secure architectures across on‑prem, cloud and hybrid environments for Aerospace & Defense programs. The position partners with system owners, GRC teams, and stakeholders to ensure CNSSI 1253, NIST SP 800-53/171/172, and ISO/IEC 27001:2022 compliance while enabling scalable, resilient security.

This role emphasizes Zero Trust, data protection, secure AI/ML pipelines, and containerized

Qualifications

• Bachelor's degree in a STEM field from an accredited institution.
• 6+ years of related experience.
• Hands-on experience with secure cloud architectures (AWS, Azure).
• Experience with security frameworks and controls (NIST SP 800-53/171/172, CNSSI 1253, ISO 27001).
• Experience with security tooling (SIEM/EDR/CNAPP) and IaC.

Responsibilities

• Design and implement security architectures for on-prem, cloud, and hybrid environments.
• Develop and maintain STIGs, baselines, and IaC-based secure configurations.
• Support Zero Trust initiatives including identity and micro-segmentation.
• Collaborate with GRC and RMF teams on SSPs and continuous monitoring.
• Identify and remediate vulnerabilities and misconfigurations.
• Contribute to incident response with technical analysis.

Skills

Secure cloud architecture

Security tooling (SIEM/EDR/CNAPP)

Network security & IAM

Education

Bachelor's degree in STEM

Tools

SIEM

EDR/XDR

IaC frameworks

CNAPP

Vulnerability scanners

Job description

Job Overview & Responsibilities

As an Information Security Architect 4 you will support mission‑critical Aerospace & Defense programs by designing, implementing, and sustaining secure technical architectures across on‑premises, cloud, and hybrid environments. The role integrates deep cybersecurity engineering knowledge with practical experience in secure cloud infrastructure, automation, and emerging AI technologies.

The architect will work closely with system owners, GRC teams, and mission stakeholders to ensure compliance with frameworks such as CNSSI 1253, NIST SP 800‑171, NIST SP 800‑172, and ISO/IEC 27001:2022 while enabling scalable, resilient, and modern security capabilities.

Key Responsibilities

• Design and implement security architectures for on‑prem, cloud (AWS, Azure), hybrid, and edge environments supporting A&D mission systems.
• Engineer secure configurations aligned with CNSSI 1253, 800‑53/171/172, and ISO 27001:2022 controls.
• Develop and maintain security technical implementation guides (STIGs), hardening standards, baselines, and IaC‑based secure configurations.
• Support the build‑out of Zero Trust capabilities, including identity, micro‑segmentation, continuous monitoring, and data‑centric security models.
• Support implementation of security tooling such as SIEM, EDR/XDR, vulnerability scanning, compliance automation, and cloud native security services.
• Architect secure data pipelines, API integrations, and containerized workloads using Kubernetes/OpenShift or similar platforms.
• Design security controls for AI, ML, and LLM‑based systems, focusing on data privacy, model integrity, secure MLOps, and adversarial threat mitigation.
• Implement cloud security technologies such as KMS, IAM, Key Vault/Secrets Manager, network security groups, CNAPP, and other cloud native security tools.
• Collaborate with GRC and RMF teams to support SSP development, POA&M remediation, system authorizations, and continuous monitoring.
• Identify and remediate vulnerabilities, misconfigurations, and architectural risks across complex mission systems.
• Participate in incident response efforts by providing technical expertise and performing deep‑dive engineering analysis.

Required Education

Bachelor's degree

Required Years of Experience

Minimum of 6 years of related work experience

Basic Qualifications

• Bachelor's degree in a STEM (Science, Technology, Engineering, Mathematics) field from an accredited college or university (four years of directly related exempt work experience may be used to satisfy the bachelor's degree requirement).
• Experience building or maintaining secure cloud architecture (AWS, Azure).
• Understanding of NIST SP 800‑53, 800‑171/172, CNSSI 1253, and/or ISO 27001 technical security controls.
• Hands‑on experience with security tools such as SIEM, EDR, CNAPP, vulnerability scanners, or infrastructure‑as‑code frameworks.
• Strong understanding of network security, identity management, and system hardening principles in a hybrid on‑site/cloud environment.

Preferred Qualifications

• Experience supporting A&D, DoD, IC, or other highly regulated environments.
• Experience designing and securing AI/ML workloads, LLM integrations, or model deployment pipelines.
• Certifications such as CISSP, CCSP, CEH, GSEC, GCSA, AWS/Azure Security Specialty, or equivalent.
• Experience with Kubernetes security, container hardening, and supply‑chain security practices.
• Knowledge of secure DevSecOps processes, CI/CD pipelines, and automated compliance tooling.

Salary

Summary Salary Range (for ULA – Denver, ULA – Cape Canaveral, ULA – Decatur, ULA – Vandenberg AFB only): $131,834.00 – $219,724.00. Salaries are based upon a candidate's experience and qualifications, as well as internal equity, market and business considerations. Employees may be eligible for a discretionary annual bonus in addition to base pay.

Benefits

• 401(k) match plus an additional employer contribution.
• Discretionary annual incentive bonus for eligible employees.
• Generous paid time off.
• Flexible work environments.

Additional Information

Additionally, most salaried ULA team members work a “9/80” schedule, meaning they enjoy every other Friday off. Benefits and work schedules may vary for union‑represented hourly positions and are described in the applicable collective bargaining agreement.

The application period for the job is estimated to be 20 days from the job posting date; however, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.

Security Clearance & International Traffic In Arms Regulations (ITAR)

This position requires use of information which is subject to the International Traffic In Arms Regulations (ITAR). Therefore, all applicants must be U.S. Persons as defined in ITAR 22 CFR 120.62 (e.g., U.S. Citizen, Lawful Permanent Resident, or protected individual). See 8 U.S.C. § 1101(a)(20) and 8 U.S.C. § 1324b(a)(3) for additional information.

Equal Opportunity & E‑Verify

ULA is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment. ULA is a participant in the federal E‑Verify Program.