Principal Security Engineer

Jeppesen ForeFlight; Englewood (CO); Hybrid; USD 180,000 - 220,000; Full time

Benefits offered by this job

Medical insurance

Open PTO

401(k) with match

Maternity leave

Paternity leave

Flight training

Job summary

Jeppesen ForeFlight seeks a Principal Security Architect to own the technical security strategy across enterprise IT and SaaS environments. You will define architecture, drive adoption, and measure outcomes, reporting to IT leadership.

The role is hybrid in Denver, CO or Austin, TX with remote consideration on a case-by-case basis. You will lead security architecture, zero‑trust, detection, platform reviews, and compliance engineering, mentoring engineers and collaborating with product security.

Qualifications

• 10+ years in security engineering or architecture and enterprise ownership.
• Experience across data centers, Azure, AWS, IAM, and VPC security.
• Proven experience with enterprise identity platforms and modern detection tooling.
• Familiarity with FAA/EASA, DoD, or CMMC contexts is advantageous.
• Ability to translate risk assessments into engineering work; strong communication to executives.

Responsibilities

• Define and evolve the enterprise security architecture across identity, endpoints, network, cloud and SaaS; translate threat models into roadmaps.
• Design and oversee zero‑trust access, IAM/PAM, MFA, and privileged credential management using Okta and Entra ID.
• Lead technical response to high‑severity incidents; mature EDR/XDR, SIEM, and DLP programs with measurable outcomes.
• Evaluate security designs for new platforms, SaaS integrations, and infrastructure initiatives before production deployment.
• Partner with GRC on SOC 2, ISO 27001, and aviation control requirements; turn auditor findings into engineering work.
• Mentor security and infrastructure engineers and raise the security bar in cross‑functional reviews.
• Communicate risk posture effectively to engineers and executives.

Skills

Security architecture

Zero Trust

IAM

EDR/XDR/SIEM/SOAR

NIST CSF

SOC 2

Leadership

Communication

Education

Bachelor's in CS/Engineering

CISSP/OSCP/GIAC valued

Tools

Okta

Entra ID/Azure AD

Azure

AWS

EDR/XDR

SIEM

SOAR

Job description

Jeppesen ForeFlight builds mission‑critical navigation and aviation data software used by pilots and operators worldwide.

As Principal Security Architect, you’ll own the technical security strategy across our enterprise IT and SaaS environments, partnering closely with engineering, infrastructure, product security, and compliance functions to protect pilot, operator, and aviation data. This senior individual contributor role has real authority—you set the architecture, drive adoption, and measure outcomes. You report into IT leadership while serving as the senior technical security voice across the enterprise and partnering with security peers within product engineering. The role is hybrid in Denver, CO or Austin, TX, with remote candidates considered on a case‑by‑case basis.

Key Responsibilities

Security Architecture

• Define and continuously evolve the enterprise security architecture across identity, endpoint, network, cloud (AWS/Azure), and SaaS. Produce explicit threat models for each tier and translate them into prioritized engineering roadmaps.

Zero Trust & Identity

• Design and oversee implementation of zero‑trust access, IAM/PAM, MFA, and privileged credential management—primarily using Okta and Entra ID.

Detection & Response

Lead technical response to high‑severity incidents. Operate and mature EDR/XDR, SIEM, and DLP programs; drive post‑incident hardening with measurable outcomes.

Platform & Vendor Review

• Evaluate and approve security designs for new platforms, SaaS integrations, infrastructure initiatives, and M&A activity before production deployment.

Compliance Engineering

• Partner with GRC on SOC 2, ISO 27001, and aviation‑specific control requirements. Translate auditor findings and regulatory obligations into concrete engineering work—rather than policy binders.

Technical Leadership

• Mentor security and infrastructure engineers, raise the security bar in cross‑functional architecture reviews, and serve as a credible peer to product security engineering leaders.

Basic Qualifications

• 10+ years in security engineering or architecture, including 3+ years as a principal architect or staff‑level IC with demonstrated enterprise ownership.
• Understanding of security across data centers, Azure, AWS, and hands‑on familiarity with IAM and VPC security.
• Proven experience with enterprise identity platforms (Okta, Entra ID/Azure AD) and modern detection tooling (EDR/XDR, SIEM, SOAR).
• Solid working knowledge of NIST CSF, ISO 27001, and SOC 2; familiarity with FAA/EASA, DoD, or CMMC contexts is a meaningful advantage.
• Track record of converting risk assessments and audit findings into shipped engineering improvements—rather than just recommendations.
• Strong communicator across audiences: comfortable whiteboarding with engineers and presenting risk posture to executives.
• Bachelor's in CS, engineering, or equivalent experience. CISSP, OSCP, or GIAC certifications are valued, not required.

Preferred Qualifications

• Experience in aviation, aerospace, defense, or other safety‑critical software environments where the cost of a security failure extends beyond data.
• Hands‑on experience integrating acquired companies onto a common enterprise security baseline—identity federation, endpoint standardization, and network segmentation.
• Familiarity with M&A security due diligence and post‑close integration planning.

Benefits

• Medical, dental, vision insurance with employer‑paid health premiums.
• Open PTO policy.
• 401(k) with up to 10% company matching and immediate vesting.
• 12 weeks paid maternity leave.
• 4 weeks paid paternity leave.
• Flight training rewards.

Pay is based upon candidate experience and qualifications, as well as market and business considerations: Summary Pay Range: $180,000–$220,000.

Jeppesen ForeFlight – EOE including Disability/Vets | Pay Transparency | E‑Verify Participant | Equal Opportunity Employer