Principal Security Design Engineer

Iridium Satellite LLC

Redwood City (CA)

Hybrid

USD 180,000 - 240,000

Full time

2 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k)

Paid Time Off

Paid Holidays

Parental Leave

Job summary

Iridium Satellite LLC seeks a Principal Security Design Engineer to help secure a new service from the ground up. You will provide adversarial and architectural expertise, guiding design decisions, threat modeling, and red team activities for a fast-moving pre-launch team.

You will collaborate with engineering, product, and partner teams to embed security across the service architecture, establish foundational practices, and mentor engineers as the capability grows.

Qualifications

10+ years in network and information security, with adversarial focus.
Strong AWS security fundamentals (IAM, VPC, misconfigurations).
Hands-on with identity protocols (SAML, OIDC, OAuth 2.0, WebAuthn, CTAP).

Responsibilities

Shape security architecture and threat modeling for AWS-based services.
Lead red team style assessments and communicate business impact.
Evaluate identity and access flows (SAML, OIDC, OAuth 2.0, WebAuthn, CTAP).
Collaborate with engineering, product, and partners to embed security.
Establish early security practices and mentor engineers.
Travel up to 20% and support government-contract considerations.

Skills

Network security

AWS security

Identity protocols

Security architecture

Threat modeling

Adversarial testing

Communication

Cross-functional collaboration

Mentorship

Decision making

Job description

Principal Security Design Engineer

Job Locations: US-VA-McLean | US-CA-Redwood City

Job ID: 2026-5104

Category: Engineering

Worker Category: Regular Full-Time[F]

Iridium is an award-winning satellite communications company operating the world's only truly global voice and data network, delivering reliable connectivity anywhere on Earth. For more than 20 years, Iridium has powered mission-critical communications for governments, businesses, aviation, maritime, and the rapidly expanding Internet of Things.

Now part of Iridium, Aireon is the world's only space-based air traffic surveillance system, providing real-time visibility of aircraft over oceans, the poles, and remote regions. Together, Iridium and Aireon are helping build a safer, more connected, and more efficient future for global aviation.

Join our team and help shape how the world stays connected. We foster a collaborative, inclusive culture where employees are empowered to innovate, grow professionally, and make a meaningful impact.

What We're Looking For:

Iridium is building security critical infrastructure for a new service currently in low visibility proof of concept engagements with prospective partners. We are seeking a Principal Security Engineer to join at the earliest stage and ensure security is designed correctly from the start.

This role provides deep adversarial and architectural expertise, identifying how this service could be attacked and guiding how we defend it. You will work as a principal level technical peer to engineering, influence early design decisions, drive red team style assessments, and serve as a tier 2 subject matter expert in select partner and customer conversations. As one of the first security specialists on the team, you will help establish early security practices and a threat modeling culture that will scale as the team grows.

What You'll Do:

Security Architecture & Threat Modeling

Analyze our AWS-based cloud infrastructure, APIs, and supporting services to identify realistic attack paths and translate findings into clear defensive priorities.
Advise engineering leadership on secure design decisions across cloud infrastructure, application logic, and device/key management touchpoints early in the development lifecycle.
Develop and maintain service specific threat models and guide an emerging threat modeling culture for a small, fast moving pre launch engineering team.

Adversarial Testing & Red Team Assessments

Conduct or commission red team style assessments spanning network, application, cloud configuration, identity flows, and adjacent supply chain vectors.
Communicate security findings in terms of business impact, driving pragmatic prioritization and informed decision.

Identity & Access Flow Security

Evaluate how Iridium's service integrates into partner identity and access systems (SAML, OIDC, OAuth 2.0, WebAuthn, CTAP).
Identify how these integrations could be attacked, misused, or strengthened, particularly in step up authentication and assurance contexts.

Cross Functional & External Influence

Serve as a tier 2 security SME in select partner or prospective customer conversations where deep technical expertise is required beyond sales engineering capabilities.
Collaborate closely with engineering, product, and partner facing teams to ensure security decisions are incorporated throughout the service architecture.
Foundational Security Practices & Mentorship
Help establish early security practices, lightweight processes, and technical standards appropriate for a pre launch product environment.
Provide mentorship and guidance to engineers and future security team members as the capability grows.

What You'll Need to Succeed:

10+ years of experience in network and information security, with demonstrated depth in offensive or adversarial security; red team experience strongly preferred.
Strong applied expertise in AWS security fundamentals (IAM, VPC architecture, common cloud misconfigurations and exploitation patterns).
Solid hands on understanding of modern identity and access protocols (SAML, OIDC, OAuth 2.0, WebAuthn, CTAP), including how these flows can be attacked or strengthened.
Demonstrated ability to communicate security risk clearly to both engineers and non technical stakeholders, including customers and partners.
Experience operating as an individual contributor in a high ambiguity, high trust, small team environment.
Excellent communication skills, with the ability to convey products, deliverables, analyses, and/or issues clearly and confidently, and recognize and adapt to different communication techniques
Can easily build meaningful relationships with others, including senior leadership outside of your own department, and comfortable providing constructive feedback to your team members and management
Be able to analyze a situation or problem, generate effective solutions, and see those solutions through to completion
Must possess the creativity and resourcefulness needed to make reliable decisions and determine methods on new assignments
Can thrive in a dynamic environment by handling multiple tasks and managing shifting priorities
Be proactive in sharing knowledge you've learned with others

Things That Would be Great if You Brought to the Table:

Experience with hardware root of trust, secure elements, or embedded device attestation concepts.
Experience in regulated or compliance sensitive industries (financial services, gaming/gambling, critical infrastructure).
Industry certifications (OSCP, CISSP, or similar) are welcome but not a substitute for demonstrated hands on depth.
Active security clearance not required; ability to obtain and maintain one is a plus.

We'll also need you to:

Be able to travel up to 20%
This position directly performs under, supports, or is exposed to a U.S. government contract. To comply with the requirements of that U.S. government contract, applicants for this position must be U.S. citizen

Work Environment:

This position primarily works in an office setting and is largely sedentary with the majority of the position working with a computer. The role typically requires the use of basic office equipment such as a phone, video, computer, keyboard, mouse, and printer.

We believe in-person connection drives innovation, strengthens mentorship, and builds culture, while flexibility enables employees to do their best work. Under Iridium's Hybrid Work Policy, employees are expected to work at least four days per week (approximately 80%) in an Iridium office to support collaboration, relationship-building, and professional growth.

Additional Information

This job description outlines the general nature and level of work for this role and is not a comprehensive list of duties, responsibilities, or qualifications. Employees may be assigned additional responsibilities as needed.

Base Pay Range:

Actual compensation will be determined based on a variety of factors and this range represents an estimate of compensation at the time of posting. Base salary is only one part of our compensation package for this role. You may also be eligible for company stock and annual bonus.