Platform - Security Automation Engineer

Lanteris Space LLC; Palo Alto (CA); Remote; USD 117,000 - 195,000; Full time

Benefits offered by this job

Paid time off

Health insurance

401(k)

Job summary

Lanteris Space LLC, a subsidiary of Intuitive Machines, seeks a Security Automation Engineer to design, implement, and maintain security controls across our platform infrastructure in Palo Alto or remote in the US. You will work with Cilium/Tetragon for runtime security, Kyverno for policy enforcement, and Wiz for cloud security posture management, translating security goals into automated controls.

You will help ensure ITAR/NIST compliance, manage vulnerability remediation workflows, and

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related discipline; four additional years of experience may substitute for a degree.
• Minimum 5 years of relevant security engineering or DevSecOps experience.
• Experience with Kubernetes security including network policies, pod security standards, and admission controllers.
• Experience with two or more tools like Cilium/Tetragon, Kyverno, or similar policy enforcement tools.
• Experience with vulnerability management tools and remediation tracking.
• Experience implementing security controls in CI/CD pipelines.
• Experience with container security best practices.
• Experience with AWS cloud security environments.
• Scripting in Python, Bash, or Go; understanding compliance frameworks (CMMC/NIST 800-171).

Responsibilities

• Design and implement runtime security controls using Cilium and Tetragon.
• Develop Kyverno policies for Kubernetes admission control and security enforcement.
• Configure Wiz for cloud security posture management and compliance monitoring in AWS.
• Lead vulnerability management programs including scanning, remediation tracking, and reporting.
• Enforce software supply-chain security controls including SBOM generation and artifact verification.
• Automate security workflows and CI/CD security processes.
• Monitor security events from Cilium, Tetragon, Wiz, and other tools.
• Collaborate with development teams to integrate security into CI/CD pipelines.
• Ensure compliance with ITAR, CMMC Level 2, and NIST 800-171 requirements.
• Create security documentation and participate in incident response.

Skills

Kubernetes security implementation

Cilium/Tetragon

Kyverno

Vulnerability management

CI/CD security

Container security

AWS cloud security

Scripting (Python Bash Go)

Compliance frameworks (CMMC NIST 800-|

Education

Bachelor's degree in CS/Cybersecurity or related field

Tools

Cilium

Tetragon

Kyverno

Wiz

SBOM tools (e.g., Sigstore)

Job description

Lanteris Space LLC, a wholly owned subsidiary of Intuitive Machines, is hiring a Security Automation Engineer to design, implement, and maintain security controls and automation across our platform infrastructure. This role can be based in our Palo Alto, CA office or remotely in the US. You will work with Cilium/Tetragon for runtime security, Kyverno for policy enforcement, Wiz for cloud security posture management, and implement vulnerability management and software supply-chain security practices. As a member of our platform team, you’ll enforce security policies in Kubernetes environments, automate security controls, ensure CMCC Level 2 and ITAR compliance, manage vulnerability remediation workflows, and protect the software supply chain that supports spacecraft development and mission operations. Intuitive Machines is a leading space infrastructure company that builds spacecraft, connects networks, and operates infrastructure-as-a-service for commercial, civil, and national security customers. With a proven track record across the space domain, the Company, through organic growth and portfolio expansion, has built over 300 spacecraft, delivered over 260 kilograms of payload to the lunar surface, and provided precision navigation expertise that has guided spacecraft across our solar system.

Principal Responsibilities

• Design and implement runtime security controls using Cilium for network policies and Tetragon for eBPF-based security observability and enforcement
• Develop and maintain Kyverno policies for Kubernetes admission control, resource validation, and security policy enforcement
• Configure and manage Wiz for cloud security posture management, vulnerability scanning, and compliance monitoring across AWS environments
• Implement and maintain vulnerability management programs including scanning, prioritization, remediation tracking, and reporting
• Design and enforce software supply-chain security controls including container image signing, SBOM generation, and artifact verification
• Automate security workflows including vulnerability remediation, policy enforcement, and compliance reporting
• Monitor security events and alerts from Cilium, Tetragon, Wiz, and other security tools
• Collaborate with development teams to integrate security controls into CI/CD pipelines
• Ensure compliance with CMMC Level 2, ITAR, and NIST 800-171 security requirements
• Conduct security assessments of infrastructure and applications, providing remediation guidance
• Create and maintain security documentation including runbooks, policies, and incident response procedures
• Participate in security incident response and post-incident analysis

Minimum Requirements

• US Citizen or permanent resident
• Bachelor's degree in Computer Science, Cybersecurity, or related discipline, four additional years of experience may be substituted for a degree
• Minimum of 5 years of relevant industry experience in security engineering or DevSecOps
• Experience with Kubernetes security including network policies, pod security standards, and admission controllers
• Experience with at least two of the following: Cilium/Tetragon, Kyverno, or similar policy/security enforcement tools
• Experience with vulnerability management tools and processes including scanning, assessment, and remediation tracking
• Experience implementing security controls in CI/CD pipelines
• Experience in container security best practices
• Experience with cloud security in AWS environments
• Scripting and automation skills in Python, Bash, or Go
• Understanding of compliance frameworks (CMMC, NIST 800-171, or similar)

Preferred Qualifications

• Security certifications such as CISSP, CCSP, CKS (Certified Kubernetes Security Specialist), or CEH
• Experience with Wiz or similar cloud security posture management (CSPM) platforms
• Experience with Cilium for Kubernetes networking and Tetragon for runtime security enforcement
• Experience with Kyverno or OPA (Open Policy Agent) for policy-as-code
• Experience implementing software supply-chain security including SLSA framework, Sigstore, or similar
• Experience with container image scanning tools (Trivy, Black Duck, Snyk, Aqua)
• Experience in aerospace, defense, or government sectors with ITAR or CUI environments
• Experience implementing CMMC Level 2 or FedRAMP security controls
• Experience with eBPF-based security tools and observability
• Experience with SBOM (Software Bill of Materials) generation and analysis
• Kubernetes certifications (CKA, CKAD, CKS)
• Experience with GitOps security practices (ArgoCD, Flux)
• Experience with AWS security services (GuardDuty, Security Hub, Inspector, Config)
• Experience with observability and SIEM tools (Grafana, Splunk, Cribl)
• Experience with zero-trust architecture and micro-segmentation
• Experience with security automation frameworks and orchestration

Salary

• The base pay for this position within Colorado is: $102,000.00 - $170,000.00 annually.
• The base pay for this position within New Jersey is: $102,000.00 - $170,000.00 annually.
• The base pay for this position within Delaware is: $102,000.00 - $170,000.00 annually.
• The base pay for this position within the Washington, DC metropolitan area is: $113,000.00 - $188,000.00 annually.
• The base pay for this position within California is: $117,000.00 - $195,000.00 annually.

Benefits

• We offer a comprehensive package of benefits including paid time off, health and welfare insurance, and 401(k) to eligible employees.
• More information on our benefits will be shared with candidates as they move forward in the recruitment process.

Application Window

The application window is three days from the date the job is posted and will remain posted until a qualified candidate has been identified for hire. If the job is reposted regardless of reason, it will remain posted three days from the date the job is reposted and will remain reposted until a qualified candidate has been identified for hire.

Equal Opportunity and Diversity

Lanteris Space Systems values diversity in the workplace and is an equal opportunity/affirmative action employer.

All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.

Intuitive Machines is building the infrastructure for your boldest missions and the next era of space operations. Our foundation is proven and built for scale, resilience, and mission continuity, extending across LEO, GEO, lunar, interplanetary, and deep space. That’s why commercial leaders and government organizations, such as NASA rely, on Intuitive Machines to sustain continuous mission operations and extend their space capabilities further and faster..

Intuitive Machines is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.

We comply with disability laws and make reasonable accommodations for applicants with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, or to otherwise participate in the hiring process.

INTUITIVE MACHINES EMPLOYMENT CANDIDATE PRIVACY NOTICE AND CONSENT