Senior Aerospace Cybersecurity Architect

ICEYE US; Irvine (CA); On-site; USD 155,000 - 175,000; Full time

Benefits offered by this job

Health coverage

Flexible PTO

Friendly work environment

Extra perks

Job summary

ICEYE US seeks a Senior Aerospace Cybersecurity Architect to lead security architecture for satellites, ground infrastructure, and mission systems. You will align cybersecurity requirements with engineering and operations, driving risk-informed design decisions across the lifecycle.

The role requires extensive experience in cybersecurity architecture for complex aerospace systems, threat modeling, and RMF/CMMC compliance.

Qualifications

• Bachelor's degree in cybersecurity, computer science, computer engineering, electrical engineering, aerospace engineering, systems engineering or equivalent experience.
• 5+ years in aerospace, satellite, or complex aerospace systems.
• 4+ years in cybersecurity architecture or security engineering.
• Experience with security architectures for distributed systems, embedded platforms, cloud or mission-critical systems.
• Experience with cybersecurity risk assessments, threat modeling, security testing, and vulnerability assessments.
• Knowledge of NIST RMF, NIST SP 800-171/53, CMMC or similar security requirements.
• Ability to translate risk into architecture and engineering requirements.
• Ability to communicate cybersecurity risk to diverse stakeholders.
• Current U.S. Government security clearance or eligibility.

Responsibilities

• Define and maintain cybersecurity architectures for satellites, ground stations, and mission systems.
• Establish security principles, patterns, requirements, and design standards for aerospace environments.
• Integrate security-by-design into system architecture, software development, and operations.
• Perform risk assessments, threat modeling, and security reviews of systems.
• Analyze trust boundaries, data flows, interfaces, and dependencies for risks.
• Develop security controls and mitigation strategies for aerospace technologies.
• Support security assessments, vulnerability testing, and architecture validation.
• Serve as cybersecurity architecture partner to software, IT, DevOps and engineering teams.
• Evaluate risks from APIs, third-party integrations, supply chain, and external interconnections.
• Define and review security requirements for identity, encryption, networking, logging and resiliency.

Skills

Cybersecurity architecture

Threat modelling

Risk assessments

Security by design

DevSecOps

System architecture

Stakeholder communication

Education

Bachelor's degree in Cybersecurity/CS/Engineering

Job description

Senior Aerospace Cybersecurity Architect

At ICEYE, we design, build and operate the largest fleet of Synthetic Aperture Radar (SAR) satellites in the world. Using advanced technology, our constellation collects topographical data about any location on Earth, day or night, through any weather conditions.

Headquartered in Southern California, our customers are society’s heroes - intelligence professionals, warfighters, first responders, and scientific researchers. As a trusted mission partner, the United States and its allies depend on us for critical information when it matters most.

Role Description

The Aerospace Cybersecurity Architect is responsible for defining and advancing the security architecture for ICEYE US satellites, ground infrastructure, mission systems, communications, and supporting technologies throughout their lifecycle. This role serves as the primary cybersecurity architecture partner to aerospace software architecture, satellite operations, mission architecture, and engineering teams, ensuring cybersecurity requirements and security-by-design principles are incorporated into system and mission design from inception through operations.

The Aerospace Cybersecurity Architect evaluates cyber risk across space, ground, communications, embedded, cloud, and operational technology environments and develops scalable, risk-informed architecture solutions to mitigate identified threats and vulnerabilities. The role provides technical cybersecurity guidance for system interfaces, trust boundaries, data flows, communications pathways, and mission-critical components while ensuring alignment with applicable customer, contractual, regulatory, and cybersecurity requirements. This position is critical to protecting ICEYE US mission capabilities and establishing resilient security architectures capable of supporting evolving operational and national security requirements.

Responsibilities

• Define, design, and maintain cybersecurity architectures for satellites, ground stations, mission systems, communications infrastructure, and supporting aerospace technologies.

• Establish cybersecurity architecture principles, security patterns, technical requirements, and design standards for aerospace and mission environments.

• Integrate cybersecurity requirements and security-by-design principles into system architecture, software development, DevSecOps, satellite operations, and mission design processes.

• Perform architecture-level cybersecurity risk assessments, threat modeling, attack-surface analysis, and security design reviews for aerospace and mission systems.

• Analyze system trust boundaries, interfaces, data flows, communications pathways, authentication mechanisms, and dependencies to identify cybersecurity risks and architecture weaknesses.

• Identify and assess vulnerabilities affecting embedded systems, operational technology (OT), communications systems, ground infrastructure, mission applications, and supporting cloud environments.

• Develop architecture-level security controls and mitigation strategies for new aerospace technologies, systems, interfaces, communications pathways, and mission capabilities.

• Conduct and support technical security assessments, vulnerability assessments, penetration testing, architecture validation, and security testing of aerospace and mission systems.

• Serve as the cybersecurity architecture partner to software architecture, satellite operations, IT, DevOps, engineering, and cybersecurity teams throughout system design and implementation.

• Evaluate cybersecurity risks associated with APIs, external interconnections, third-party integrations, supply chain components, hardware, software, and supporting technologies.

• Define and review security requirements for identity, authentication, authorization, encryption, key management, network segmentation, secure communications, logging, monitoring, and system resiliency.

• Support implementation and technical validation of cybersecurity controls required by NIST, CMMC, RMF, customer security requirements, and applicable contractual obligations.

• Develop and maintain security architecture documentation, system diagrams, trust-boundary diagrams, data-flow diagrams, threat models, technical risk assessments, and security design decisions.

• Provide architecture-level recommendations for remediation of identified security deficiencies and ensure corrective actions align with the broader system and mission architecture.

• Support cybersecurity incident investigations involving corporate, aerospace, mission, ground, or supporting systems and incorporate lessons learned into future architecture and security design improvements.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, Aerospace Engineering, Systems Engineering, or a related technical discipline, or equivalent relevant professional experience.

• 5+ years of professional experience supporting aerospace, satellite, spacecraft, mission, or other complex aerospace engineering systems.

• 4+ years of experience in cybersecurity architecture, security engineering, systems security engineering, or a related technical cybersecurity discipline.

• Experience developing or reviewing security architectures for complex distributed systems, embedded platforms, cloud environments, operational technology, or mission-critical systems.

• Experience performing cybersecurity risk assessments, threat modeling, architecture reviews, vulnerability assessments, or security testing of technical systems.

• Working knowledge of cybersecurity frameworks and requirements such as NIST SP 800-171, NIST SP 800-53, NIST Risk Management Framework (RMF), CMMC, or comparable security requirements.

• Experience integrating cybersecurity requirements into system architecture, software development, cloud environments, DevSecOps, embedded systems, infrastructure, or engineering lifecycle processes.

• Ability to analyze complex technical architectures, interfaces, trust boundaries, data flows, communications pathways, and security controls and translate identified risks into actionable architecture and engineering requirements.

• Ability to communicate technical cybersecurity risk and architecture recommendations to engineering, cybersecurity, program, and mission stakeholders.

• Current U.S. Government security clearance or eligibility to obtain and maintain the level of clearance required for the position.

Preferred Qualifications

• Experience designing or securing satellite, spacecraft, ground station, ground-segment, command-and-control, or mission-critical aerospace systems.

• Knowledge of satellite communications, spacecraft command and control, telemetry, tracking and control, ground-segment architecture, or space-to-ground communications.

• Experience with embedded systems, real-time operating systems, operational technology (OT), hardware security, or specialized aerospace engineering platforms.

• Experience developing threat models for distributed, mission-critical, embedded, or cyber-physical systems.

• Experience conducting or supporting penetration testing and security assessments of embedded systems, hardware, wireless technologies, RF communications, or mission systems.

• Familiarity with secure systems engineering methodologies, systems engineering lifecycle processes, secure-by-design principles, and systems development lifecycle methodologies.

• Experience supporting U.S. Government, Department of Defense, Intelligence Community, National Reconnaissance Office, or other national security programs.

• Experience designing and evaluating cloud security architectures within AWS or Microsoft Azure environments.

• Familiarity with Zero Trust architecture, identity-centric security, network segmentation, cryptographic protections, secure communications, key management, and resilient system design.

• Familiarity with secure software development, CI/CD, infrastructure-as-code, containers, APIs, microservices, and DevSecOps practices.

• Experience evaluating cybersecurity implications of third-party technologies, software supply chains, hardware components, APIs, and external system interconnections.

• Relevant cybersecurity or security architecture certification such as CISSP, ISSAP, CCSP, CSSLP, SABSA, Security+, OSCP, or equivalent.

Pay Range and Compensation Package

• The estimated base salary range for this role is $155,000 - $175,000 depending on experience

• Other benefits include health coverage, flexible PTO, a friendly work environment, plus extra fun perks!

Physical Requirements

This position primarily works in an office environment. It requires the ability to sit or stand for long periods of time and frequent walking. Daily use of a computer, phone, office equipment and other computing and digital devices is required. Some travel may be necessary - the ability to travel by car, plane, train, bus, vessel, or metro, operate a motor vehicle and maintain a valid Driver's License and/or effectively navigate public transportation is required.

While performing the responsibilities of the job, the employee must be able to read and respond to inter-office communications as well as effectively participate in meetings. The employee is often required to sit and use their hands or fingers, to lift up to 50 lbs., pull, push, carry, handle, or feel. The employee is required to carry, handle items, reach with arms and hands, to stoop, kneel, or crouch; talk, or hear. Mental demands may require prolonged concentration, reading comprehension, understanding and interpretation of concepts, ideas, and philosophies. The physical demands of the position described herein are essential functions of the job and employees must be able to successfully perform these tasks for extended periods. Reasonable accommodations may be made for those individuals with real or perceived disabilities to perform the essential functions of the job described unless such accommodations would cause ICEYE US an undue burden.

EEO Statement

ICEYE US is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, age, or any other protected characteristic under federal, state, or local law.