Platform - Security Automation Engineer

Intuitive Machines, LLC; Palo Alto (CA); On-site; USD 117,000 - 195,000; Full time

Benefits offered by this job

Health insurance

401(k)

Paid time off

Job summary

Lanteris Space LLC, a subsidiary of Intuitive Machines, hires a Security Automation Engineer to design, implement, and maintain security controls across our platform infrastructure. You will work with Cilium/Tetragon for runtime security, Kyverno for policy enforcement, and Wiz for cloud posture management, ensuring ITAR and NIST compliance.

The role can be based in Palo Alto, CA or remotely in the United States, collaborating with platform teams to automate security and protect the software

Qualifications

• Minimum 5 years in security engineering or DevSecOps.

Responsibilities

• Design and implement runtime security controls using Cilium for network policies and Tetragon for enforcement.
• Configure and manage Wiz for cloud security posture management across AWS.
• Automate security workflows including vulnerability remediation and policy enforcement.
• Collaborate with development teams to integrate security into CI/CD pipelines.
• Ensure compliance with CMMC Level 2, ITAR, and NIST 800-171.

Skills

Kubernetes security

Cilium/Tetragon

Kyverno

Cloud security posture management

Vulnerability management

CI/CD security

Container security

Python/Bash/Go scripting

ITAR/NIST 800-171 compliance

Education

Bachelor's degree in Computer Science or related field

Tools

Cilium

Tetragon

Kyverno

Wiz

Job description

Platform - Security Automation Engineer### Platform - Security Automation EngineerApply: Palo Alto, CA: Remote (United States): Full time: Posted Yesterday: R24432## Please review the job details below.Lanteris Space LLC, a wholly owned subsidiary of Intuitive Machines, is hiring a Security Automation Engineer to design, implement, and maintain security controls and automation across our platform infrastructure. This role can be based in our Palo Alto, CA office or remotely in the US. You will work with Cilium/Tetragon for runtime security, Kyverno for policy enforcement, Wiz for cloud security posture management, and implement vulnerability management and software supply-chain security practices.As a member of our platform team, you'll enforce security policies in Kubernetes environments, automate security controls, ensure CMCC Level 2 and ITAR compliance, manage vulnerability remediation workflows, and protect the software supply chain that supports spacecraft development and mission operations.Intuitive Machines is a leading space infrastructure company that builds spacecraft, connects networks, and operates infrastructure-as-a-service for commercial, civil, and national security customers. With a proven track record across the space domain, the Company, through organic growth and portfolio expansion, has built over 300 spacecraft, delivered over 260 kilograms of payload to the lunar surface, and provided precision navigation expertise that has guided spacecraft across our solar system.**Principal Responsibilities*** Design and implement runtime security controls using Cilium for network policies and Tetragon for eBPF-based security observability and enforcement* Develop and maintain Kyverno policies for Kubernetes admission control, resource validation, and security policy enforcement* Configure and manage Wiz for cloud security posture management, vulnerability scanning, and compliance monitoring across AWS environments* Implement and maintain vulnerability management programs including scanning, prioritization, remediation tracking, and reporting* Design and enforce software supply-chain security controls including container image signing, SBOM generation, and artifact verification* Automate security workflows including vulnerability remediation, policy enforcement, and compliance reporting* Monitor security events and alerts from Cilium, Tetragon, Wiz, and other security tools* Collaborate with development teams to integrate security controls into CI/CD pipelines* Ensure compliance with CMMC Level 2, ITAR, and NIST 800-171 security requirements* Conduct security assessments of infrastructure and applications, providing remediation guidance* Create and maintain security documentation including runbooks, policies, and incident response procedures* Participate in security incident response and post-incident analysis**Minimum Requirements*** US Citizen or permanent resident* Bachelor's degree in Computer Science, Cybersecurity, or related discipline, four additional years of experience may be substituted for a degree* Minimum of 5 years of relevant industry experience in security engineering or DevSecOps* Experience with Kubernetes security including network policies, pod security standards, and admission controllers* Experience with at least two of the following: Cilium/Tetragon, Kyverno, or similar policy/security enforcement tools* Experience with vulnerability management tools and processes including scanning, assessment, and remediation tracking* Experience implementing security controls in CI/CD pipelines* Experience in container security best practices* Experience with cloud security in AWS environments* Scripting and automation skills in Python, Bash, or Go* Understanding of compliance frameworks (CMMC, NIST 800-171, or similar)**Preferred Qualifications*** Security certifications such as CISSP, CCSP, CKS (Certified Kubernetes Security Specialist), or CEH* Experience with Wiz or similar cloud security posture management (CSPM) platforms* Experience with Cilium for Kubernetes networking and Tetragon for runtime security enforcement* Experience with Kyverno or OPA (Open Policy Agent) for policy-as-code* Experience implementing software supply-chain security including SLSA framework, Sigstore, or similar* Experience with container image scanning tools (Trivy, Black Duck, Snyk, Aqua)* Experience in aerospace, defense, or government sectors with ITAR or CUI environments* Experience implementing CMMC Level 2 or FedRAMP security controls* Experience with eBPF-based security tools and observability* Experience with SBOM (Software Bill of Materials) generation and analysis* Kubernetes certifications (CKA, CKAD, CKS)* Experience with GitOps security practices (ArgoCD, Flux)* Experience with AWS security services (GuardDuty, Security Hub, Inspector, Config)* Experience with observability and SIEM tools (Grafana, Splunk, Cribl)* Experience with zero-trust architecture and micro-segmentation* Experience with security automation frameworks and orchestrationIn support of pay transparency at Lanteris Space Systems, we disclose salary ranges on all U.S. job postings. The successful candidate’s starting pay will fall within the salary range provided below and is determined based on job-related factors, including, but not limited to, the experience, qualifications, knowledge, skills, geographic work location, and market conditions. Candidates with the minimum necessary experience, qualifications, knowledge, and skillsets for the position should not expect to receive the upper end of the pay range.● The base pay for this position within Colorado is: $102,000.00 - $170,000.00 annually.● The base pay for this position within New Jersey is: $102,000.00 - $170,000.00 annually.● The base pay for this position within Delaware is: $102,000.00 - $170,000.00 annually.● The base pay for this position within the Washington, DC metropolitan area is: $113,000.00 - $188,000.00 annually.● The base pay for this position within California is: $117,000.00 - $195,000.00 annually.For all other states, we use geographic cost of labor as an input to develop market-driven ranges for our roles, and as such, each location where we hire may have a different range. We offer a comprehensive package of benefits including paid time off, health and welfare insurance, and 401(k) to eligible employees. More information on our benefits will be shared with candidates as they move forward in the recruitment process.The application window is three days from the date the job is posted and will remain posted until a qualified candidate has been identified for hire. If the job is reposted regardless of reason, it will remain posted three days from the date the job is reposted and will remain reposted until a qualified candidate has been identified for hire. The date of posting can be found on the Lanteris Space Systems Career page at the top of each job posting. To apply, submit your application via the Lanteris Space Systems Career page.**Lanteris Space Systems values diversity in the workplace and is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.**