Principal DevSecOps Architect

The role of Principal DevSecOps Architect at BlackSky involves shaping and driving the cybersecurity of BlackSky software systems and satellite ground segment deployments. This hands-on position requires collaboration across diverse stakeholder sets to plan and execute infrastructure security architectural solutions, ensuring compliance with cybersecurity standards.

BlackSky is a real-time intelligence company specializing in satellite imagery, automated analytics, and high-frequency monitoring of strategic locations, economic assets, and global events. The company is trusted by military, intelligence organizations, and commercial entities to provide foresight into critical matters affecting national security and the economy.

Responsibilities:

• Align the Information Security Office and Chief Technology Office by developing and decomposing requirements and solutions to achieve security compliance of engineering deployments.
• Develop robust architectural blueprints for software, network, and infrastructure deployment security in cloud and on-premises environments, adhering to industry best practices and regulatory compliance.
• Create a cybersecurity roadmap in coordination with the Information Security Office and Engineering, implementing security frameworks for cloud and on-premises infrastructure.
• Assess vulnerabilities and security risks through security and architectural reviews, supporting the Engineering organization.
• Partner with DevOps teams to integrate automated security controls into Infrastructure-as-Code (IAC) templates like Terraform and Helm.
• Establish engineering-wide security practices, standards, and access guidelines based on regulatory and security compliance rulesets.
• Communicate with internal and external stakeholders, translating security requirements into engineering specifications within BlackSky’s architecture.
• Evaluate the impact of implementing security controls, considering cybersecurity risk, staffing resources, and schedule implications.
• Ensure accuracy and completeness of engineering security documentation.
• Coordinate development and execution of security controls across security, software development, infrastructure, systems engineering, and program/product teams.
• Organize and track projects, manage risks, prioritize tasks, and meet business objectives.
• Collaborate with managers and technical groups to address customer issues and find innovative solutions.
• Develop models and analyze data to evaluate trade-offs and support decision-making.
• Perform other job-related duties as assigned.

Required Qualifications:

• A minimum of 12 years of related work experience, with at least 5 years focused on leading projects in DevSecOps or infrastructure security architecture.
• Bachelor’s degree in an engineering field.
• Experience in architecting complex software systems and deployments for cybersecurity compliance.
• Intimate knowledge of software security standards including NIST 800-171, NIST 800-53, NIST 800-207, FIPS 140-2, FedRAMP, and ISO/IEC 27001:2022.
• Experience building security architecture roadmaps for businesses.
• Familiarity with software engineering best practices, including agile development, enterprise design patterns, and coding standards.
• Experience with Kubernetes and on-premises deployments of software systems.
• Experience with the software engineering lifecycle from product concept through operations and maintenance, including toolchains like JIRA and Git.
• Versed in Systems Engineering best practices and tools, including communicating, managing, and documenting system architectures.
• Effective communication skills to represent security, architectural, and engineering concepts across varied stakeholders.
• Proficient in DevSecOps tooling, technologies, and environments.
• Must be eligible to obtain and maintain a US Security Clearance (requires US Citizenship).

Preferred Qualifications:

• Active ISC2 Information Systems Security Architecture Professional (ISSAP) or Certified Information Systems Security Professional (CISSP) certification.
• A minimum of 15 years of related work experience, with at least 5 years focused on leading projects in DevSecOps or infrastructure security architecture.
• Experience upgrading software systems and guiding engineering teams to achieve NIST 800-171, ISO/IEC 27001:2022, or FedRAMP Compliance.
• Experience securing software systems for on-premises air-gapped environments.
• Former software engineering and software architecture experience for production systems, especially for space or defense applications.
• Hands-on experience with DevOps and Kubernetes infrastructure and deployments.
• Master’s degree in engineering.