Identity Architect

Axiom Space•Remote (TX), TX

5d•Onsite

About The Position

Axiom Space is a human space exploration company, building era-defining space infrastructure and delivering technology-driven solutions that will empower civilization to transcend Earth. Beginning with Axiom Station, successor to the International Space Station, the company is pioneering a next-generation orbital settlement that will foster groundbreaking innovation and research in microgravity and drive the global space economy of tomorrow. Today, guided by the vision of leading humanity's expansion off planet, Axiom Space is the principal provider of commercial human spaceflight services and developer of advanced spacesuits for the Moon and beyond. Axiom Space fosters a work environment inclusive of all perspectives. We are the pioneers of commercial space, leading the transformation of low-Earth orbit into a global space marketplace. Our mission-driven team is seeking a bold and dynamic Identity Architect who is fueled by high accountability, execution horsepower, and driven to understand our world, science/technology, and life itself, for the benefit of all on Earth and beyond. Since Axiom Space is a very complex work environment, we are looking for a resilient, high-energy Identity Architect who is a critical visionary responsible for designing and implementing a robust, resilient, and compliant identity ecosystem. This role ensures that every human and non-human entity interacting with Axiom Space digital and physical assets is verified, authorized, and audited. You will bridge the gap between high-level compliance requirements specifically NIST 800-53/171 and technical execution, ensuring that our identity fabric supports the protection of ITAR/EAR controlled technical data while utilizing FIPS 140-3 validated cryptographic modules.

Requirements

Bachelor’s degree in Information Security, Computer Science, or a related technical field (experience may be considered in lieu of a degree) with 7+ years of experience in Identity and Access Management (IAM) architecture or high-level Cyber Security Engineering.
CISSP or CISM is highly desired.
Track record of making things happen in ambiguous, fast-moving environments.
Uses good judgement to problem-solve proactively, positively impacting hard challenges.
Demonstrated organization skills to meet tight deadlines with high quality results.
Passion for space and the mission.
Entrepreneurial, growth mindset.
High EQ and ability to collaborate within teams and cross-functionally.
Tech-solutioning in using systems and tools to move smarter and faster.
Embody our core values of leadership, innovation, and teamwork.
Accountability
Technical Rigor
Execution Discipline
Pride of Delivery
This position may require access to export controlled technical data or technology subject to NASA regulations, International Traffic in Arms Regulations (ITAR), or Export Administration Regulations (EAR). In accordance with U.S. export control laws, final candidates may be required to undergo additional export control screening to determine eligibility for access. Meeting these requirements is a condition of employment.
Must be willing to work evenings and weekends as needed to meet critical project milestones.

Nice To Haves

Experience may be considered in lieu of a degree.

Responsibilities

Design and maintain a Zero Trust identity framework that enforces granular access control, ensuring least privilege across on-premises, cloud, and orbital mission systems.
Architect identity solutions to meet NIST 800-53 (Security and Privacy Controls) and NIST 800-171 (Protecting CUI), specifically focusing on Identification and Authentication (IA) and Access Control (AC) families.
Implement identity-based fencing and data tagging to ensure ITAR (International Traffic in Arms Regulations) and EAR (Export Administration Regulations) compliance, preventing unauthorized access to sensitive space technology by foreign nationals.
Ensure all identity providers and authentication workflows (MFA, SSO) utilize FIPS 140-3 validated encryption modules for protecting credentials and token in transit and at rest.
Map identity related threats (e.g., Valid Accounts T1078, Steal or Forge Kerberos Tickets T1558) to the MITRE ATT&CK framework; design architectural safeguards to detect and prevent Credential Access and Lateral Movement.
Automate the identity lifecycle from onboarding and access to offboarding ensuring prompt revocation of access to mission critical systems.
Architect secure “break-glass” procedures and Just-In-Time (JIT) access for engineers.
Partner with the Incident Response teams to integrate identity telemetry for advanced behavioral analytics and threat hunting.
Communicating project progress, status, and potential issues to stakeholders and leadership.
Implementing and maintaining agile project management methodologies throughout the project lifecycle.
Perform additional job duties as assigned.