Senior InfoSec Architect: Cloud, AI & Zero Trust

United Launch Alliance (ULA); Englewood (CO); On-site; USD 131,834 - 219,724; Full time

Job summary

United Launch Alliance is seeking an Information Security Architect 4 to design, implement, and sustain secure architectures across on‑premises, cloud, and hybrid environments for aerospace and defense programs.

You will collaborate with system owners, GRC teams and mission stakeholders to ensure CNSSI 1253, NIST SP 800‑171/172, and ISO 27001:2022 compliance while enabling scalable, resilient security capabilities and modern DevSecOps practices.

Qualifications

• Bachelor's degree in a STEM field from an accredited institution.
• Hands-on experience with secure cloud architectures (AWS, Azure).
• Knowledge of NIST SP 800-53/171/172, CNSSI 1253, ISO 27001 security controls.
• Experience with security tools (SIEM, EDR, CNAPP) and vulnerability scanners.
• Strong understanding of network security, IAM, and hardening in hybrid environments.

Responsibilities

• Design secure architectures for on-prem, cloud, hybrid, and edge environments.
• Engineer configurations aligned with security controls and standards.
• Develop and maintain security STIGs, baselines, and IaC-based configurations.
• Support Zero Trust, identity, micro-segmentation, monitoring, and data security models.
• Collaborate with GRC/RMF for SSPs, POA&M, and continuous monitoring.
• Identify and remediate vulnerabilities and misconfigurations across complex systems.

Skills

Cloud security

Network security

Identity management

Security tooling

Education

Bachelor's degree in STEM

Tools

SIEM

EDR/XDR

CNAPP

Vulnerability scanners

IaC tools

Kubernetes security

Job description

United Launch Alliance is seeking an Information Security Architect 4 to design, implement, and sustain secure architectures across on‑premises, cloud, and hybrid environments for aerospace and defense programs.

You will collaborate with system owners, GRC teams and mission stakeholders to ensure CNSSI 1253, NIST SP 800‑171/172, and ISO 27001:2022 compliance while enabling scalable, resilient security capabilities and modern DevSecOps practices.