Zero-Trust IAM Architect for Space Systems

Axiom Space; Texas; Hybrid; USD 140,000 - 190,000; Full time

Job summary

Axiom Space in Wisconsin is seeking a resilient Identity Architect to design and implement a robust, compliant identity ecosystem across on‑prem, cloud, and mission systems, ensuring verification, authorization and auditing of all entities.

You will align with NIST 800-53/171 controls, ITAR/EAR requirements, and FIPS 140-3 cryptographic modules, while enabling MFA/SSO and Just‑In‑Time access for engineers in a fast‑moving space environment.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or related field with 7+ years IAM experience.
• CISSP or CISM highly desired.
• Track record in ambiguous, fast-moving environments.
• Problem-solving with proactive judgment and delivery.
• Strong organizational skills and ability to meet deadlines.

Responsibilities

• Zero Trust Architecture Design across on-prem, cloud, and mission systems.
• Regulatory Alignment to NIST 800-53/800-171 IA/AC families.
• Export controls ITAR/EAR compliance with data tagging and fencing.
• Ensure MFA and SSO use FIPS 140-3 authenticated modules.
• Map identity threats to MITRE ATT&CK and implement safeguards.
• Automate IAM lifecycle from onboarding to offboarding.
• Implement Just-In-Time access for engineers and PAM controls.
• Collaborate with Incident Response for identity telemetry.
• Communicate progress to stakeholders; apply agile project management.

Skills

Identity Architecture

Zero Trust

NIST alignment

IAM engineering

Threat modeling

PAM/JIT access

Regulatory compliance

Education

Bachelor’s degree in Information Security or Computer Science

Job description

Axiom Space in Wisconsin is seeking a resilient Identity Architect to design and implement a robust, compliant identity ecosystem across on‑prem, cloud, and mission systems, ensuring verification, authorization and auditing of all entities.

You will align with NIST 800-53/171 controls, ITAR/EAR requirements, and FIPS 140-3 cryptographic modules, while enabling MFA/SSO and Just‑In‑Time access for engineers in a fast‑moving space environment.