Senior Cybersecurity Engineer — Hybrid IT/OT & CMMC Lead

Ursa Major; Berthoud (CO); On-site; USD 130,000 - 162,000; Full time

Benefits offered by this job

Unlimited PTO

Parental leave

Medical, dental & vision insurance

401k match

Equity grants

Job summary

Ursa Major in Colorado is seeking a Senior Cybersecurity Engineer (Level 3) to navigate federal requirements across DevOps, Digital Manufacturing, and IT. You will lead the strategy to protect CUI while enabling rapid innovation.

This role partners with hardware, software, and manufacturing teams to implement micro‑segmentation, SIEM and identity controls, helping scale from cloud to hybrid on‑prem environments.

Qualifications

• 4+ years of dedicated cybersecurity engineering experience in regulated environments.
• Bachelor’s degree in Cybersecurity or related field.
• Familiarity with government contracting regulations, specifically NIST SP 800-171 and CMMC Level 2.
• Demonstrated experience implementing security controls in hybrid IT/OT or cloud‑and‑physical hardware environments (e.g., site‑to‑site VPNs, micro‑segmentation, local device controls).
• Proven track record of working constructively with engineering and business stakeholders—focusing on trust‑building, communication, and enabling business outcomes.

Responsibilities

• Partner directly with non-cyber employees to understand workflows and safely manage CUI and new tools.
• Approach security challenges with nuance while keeping hardware CAD/CAM moving forward.
• Design controls around engineering workflows to eliminate latency and bottlenecks.

Skills

Cybersecurity engineering

Regulated environments

NIST SP 800-171

CMMC Level 2

Hybrid IT/OT security

Education

Bachelor's degree in Cybersecurity or related field

Tools

Site-to-site VPNs

Micro-segmentation

Identity platforms

SIEM

Firewalls

Job description

Ursa Major in Colorado is seeking a Senior Cybersecurity Engineer (Level 3) to navigate federal requirements across DevOps, Digital Manufacturing, and IT. You will lead the strategy to protect CUI while enabling rapid innovation.

This role partners with hardware, software, and manufacturing teams to implement micro‑segmentation, SIEM and identity controls, helping scale from cloud to hybrid on‑prem environments.