Principal DevSecOps Architect

• BlackSky is looking for a talented DevSecOps architect, in support of the Chief Technology Office to help shape and drive the cybersecurity of BlackSky software systems and satellite ground segment deployments
• This role will play an instrumental part in future innovation and supporting BlackSky’s position as a leader in secure real-time geospatial intelligence and satellite missions
• BlackSky is looking for multi-faceted individual with a cybersecurity and infrastructure (DevSecOps) background who can work across diverse stakeholder sets to plan and execute infrastructure security architectural solutions to achieve cybersecurity standards compliance
• This is a hands-on role and you will be working across teams to evolve our current systems and technologies to align with current and future BlackSky security requirements, compliance, and strategic direction
• This role reports to the VP, Product Architecture and while we would strongly prefer candidates near our Herndon, VA office we may also consider remote candidates in certain states
• Drive alignment between the Information Security Office and the Chief Technology Office by developing and decomposing requirements and solutions to achieve security compliance of engineering deployments
• Develop robust architectural blueprints and plans for software, network, and infrastructure deployment security for systems hosted within cloud and on-premises environments ensuring adherence to industry best practices and regulatory compliance
• Develop a robust cybersecurity roadmap in coordination with the Information Security Office and Engineering and work to implement security frameworks for cloud and on-premises infrastructure
• Support the Engineering organization by assessing vulnerabilities and security risks through security and architectural reviews
• Partner with the DevOps teams to integrate automated security controls directly into Infrastructure-as-Code (IAC) templates like Terraform and Helm
• Establish engineering wide security practices, standards, and access guidelines based on interpreting regulatory and security compliance rulesets
• Communicate with internal and external stakeholders and translate security requirements into engineering specifications within the BlackSky architecture
• Understand the interactions between systems, applications, and services within the architecture and evaluate the impact of implementing security controls to include cyber security risk, staffing resource, and schedule implications
• Ensure the accuracy and completeness of engineering security documentation
• Coordinate development and execution of security controls across security, software development teams, infrastructure, systems engineering, and program and product teams to develop execution plans for implementing security controls or addressing vulnerabilities
• Organize and track projects, proactively manage risks, manage project escalations, prioritize tasks, and meet specific business objectives
• Collaborate with managers and technical groups to address important customer issues and find innovative solutions to difficult problems
• Develop models and analyze data to evaluate tradeoffs and support the decision-making process
• Other job-related duties as assigned

Benefits

• Competitive compensation: We offer competitive compensation as well as 401(k) with employer match.
• 100% health insurance: We cover 100% of our employee’s health premiums for medical, dental and vision insurance with various plan choices such as HRA, LSA and HSA
• Time off: Striking a balance between work and our personal lives is important. We offer 15 days of PTO, 11 company holidays, four floating holidays (pro-rated based on hire date) and one day of paid volunteerism leave per year.
• Flexible work schedule: Need to focus on family certain hours of the day? Are you a night owl? We can work with you to build a schedule that works best for you and your teammates.
• Maternity leave: New birth mothers receive up to eight weeks of paid leave for medical recovery due to childbirth, supplementing employer-provided disability insurance.
• Parental leave: For births or adoptions, new parents are offered paid leave to care for and bond with their new child.
• ESPP: Be part of the growth and success story at BlackSky by participating in our Employee Stock Purchase Program.
• PC or Mac: You select the type of computing environment that works best for you. And, yes, we are deeply into cloud computing.
• Casual offices: No stuffy environment at BlackSky. We want you for who you are, not what you wear.
• On-site perks: Like to work out at lunch? Visit our on-site gyms. And recharge afterwards with free snacks and beverages.
• Team get-togethers: We host events across teams. Learn who your coworkers are, not just where they sit and what they do.
• Unique swag: Lots of companies offer embroidered hats and gear (and we do, too). But, which of them offer mission patches too?

• Effective communication skills to represent security, architectural, and engineering concepts and decisions across varied stakeholders including Engineering, Sales, Customers, Product Management
• Intimate knowledge of software security standards including NIST 800-171, NIST 800-53, NIST 800-207, FIPS 140-2, FedRAMP, and ISO/IEC 27001:2022
• Experience with the software engineering life cycle from product concept through operations and maintenance and toolchains used to manage this process (JIRA, Git, etc.)
• Must be eligible to obtain and maintain a US Security Clearance (this requires US Citizenship)
• Experience with Kubernetes and on-premises deployments of software systems
• Versed in Systems Engineering best practices and tools including communicating, managing, and documenting system architectures, documenting interfaces, documenting and validation of functional and non-functional requirements
• Familiarity with software engineering best practices and process including agile development, enterprise design patterns, and coding standards
• Experience building security architecture roadmaps for businesses
• A minimum of 12 years of related work experience with at least five (5) years focused on leading projects in DevSecOps or infrastructure security architecture
• Proficient in DevSecOps tooling, technologies, and environments
• Experience in architecting complex software systems and deployments for cybersecurity compliance
• Bachelor’s degree in an engineering field
• Active ISC2 Information Systems Security Architecture Professional (ISSAP) or Certified Information Systems Security Professional (CISSP) certification
• A minimum of 15 years of related work experience with at least five (5) years in focused on leading projects in DevSecOps or infrastructure security architecture
• Experience upgrading software systems and guiding engineering teams to achieve NIST 800-171, ISO/IEC 27001:2022, or FedRAMP Compliance
• Experience securing software systems for on-premises air-gapped environments
• Former software engineering and software architecture experience for production systems, especially for space or defense applications
• Hands on experience with DevOps and Kubernetes infrastructure and deployments
• Master’s degree in engineering