Senior Cybersecurity Engineer — CMMC & Zero-Trust (Equity)

Ursa Major; Fort Collins (CO); On-site; USD 130,000 - 162,000; Full time

Benefits offered by this job

Unlimited PTO

Parental Leave

Medical Insurance

Dental Insurance

Vision Insurance

HSA/FSA

Disability Insurance

Life Insurance

401k with Company Match

Equity Grants

Employee Assistance Program

Job summary

Ursa Major seeks a Senior Cybersecurity Engineer (Level 3) to lead security across hybrid cloud/on‑premise environments within Digital Operations in Colorado. You will partner with engineers to securely manage CUI, expand CMMC Level 2, and integrate security into manufacturing pipelines.

You’ll guide security controls, compliance artifacts, and cross‑functional collaboration while mentoring junior staff in a fast‑paced, defense‑oriented setting.

Qualifications

• 4+ years of dedicated cybersecurity engineering experience in regulated or high‑rigor environments.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent practical experience.
• Deep familiarity with government contracting regulations, specifically NIST SP 800-171 and CMMC Level 2 framework requirements.
• Demonstrated experience implementing security controls in hybrid IT/OT or cloud‑and‑physical hardware environments (e.g., site‑to‑site VPNs, micro‑segmentation, local device controls).
• Proven track record of working constructively with engineering and business stakeholders—focusing on trust‑building, communication, and enabling business outcomes rather than simple ticket‑taking.

Responsibilities

• Partner directly with non‑cyber employees (program managers, manufacturing engineers, test stand operators) to understand their workflows and help them safely manage CUI and new tools without fear or unnecessary friction.
• Approach security challenges with nuance rather than black‑and‑white rules. Find pragmatically secure pathways that satisfy federal requirements while keeping physical hardware engineering and CAD/CAM development moving forward.
• Design controls around engineering workflows to eliminate latency and operational bottlenecks, ensuring compliance feels like an accelerator rather than a roadblock.
• Lead the technical implementation to strategically expand our CMMC Level 2 boundary beyond our cloud‑only enclave—safely integrating on‑premise infrastructure, physical testing equipment, and shop floor operations without expanding CMMC scope to the entire enterprise network.
• Manage and optimize technical security controls (SIEM, firewalls, zero‑trust network access, identity platforms, vulnerability management) across both cloud and physical network environments.
• Evolve key compliance artifacts—including System Security Plans (SSPs), Risk Assessment Reports (RARs), and POA&Ms—ensuring physical site boundaries and hybrid hardware data flows are accurately documented.
• Act as a subject matter expert who tackles ambiguous, high‑complexity security and network segmentation challenges with minimal supervision, taking full ownership from diagnosis to resolution.
• Work side‑by‑side with Zero‑Trust Networking, DevOps, and IT to embed micro‑segmentation and physical device controls directly into manufacturing environments and automated pipelines.
• Provide technical guidance and mentorship to junior staff and IT team members, translating complex federal regulations into clear, actionable advice for non‑cyber stakeholders.

Skills

Cybersecurity engineering

NIST SP 800-171

CMMC Level 2

Hybrid IT/OT security

Security controls

Education

Bachelor’s degree in Cybersecurity/IT/CS

Tools

SIEM

Firewalls

Zero-Trust Networking

Identity platforms

Vulnerability management

Site-to-site VPNs

Micro-segmentation

Job description

Ursa Major seeks a Senior Cybersecurity Engineer (Level 3) to lead security across hybrid cloud/on‑premise environments within Digital Operations in Colorado. You will partner with engineers to securely manage CUI, expand CMMC Level 2, and integrate security into manufacturing pipelines.

You’ll guide security controls, compliance artifacts, and cross‑functional collaboration while mentoring junior staff in a fast‑paced, defense‑oriented setting.