Principal Systems Security Engineer

Viasat, Inc. • Carlsbad, CA

12d

About The Position

Viasat is seeking a highly motivated Principal Systems Security Engineer to join its Systems Security Engineering organization. This role architects, implements, and advances security controls across enterprise, cloud, product, and infrastructure environments. It focuses heavily on information assurance and security architecture, providing guidance across network, software, infrastructure, cloud, and physical security teams to support compliance with current and future NIST guidelines. The position collaborates with multifunctional teams to develop secure architectures for ground and space networks, leads security reviews and risk assessments, and provides technical and policy guidance for Risk Management Framework (RMF) security accreditation. It also implements the DoD Zero Trust framework, develops security standards and reference architectures, and communicates risks and architectural decisions to technical and business partners. Travel of up to 20% is required, including travel to Viasat offices in Carlsbad, California, and Reston, Virginia. U.S. citizenship and an active Top Secret clearance are required.

Requirements

• Bachelor's or master's degree in Computer Science, Engineering, Information Security, or a related field, or equivalent practical experience.
• 12 or more years of experience leading complex security engineering and architecture initiatives.
• Strong understanding of security architecture principles and defense-in-depth strategies.
• Experience designing and implementing security controls in enterprise-scale environments.
• Hands-on experience securing cloud platforms such as Microsoft Azure, AWS, or Google Cloud Platform.
• Experience using SPRS and eMASS platforms.
• Experience with identity and access management, authentication, authorization, and privileged access controls.
• Knowledge of network security, endpoint security, vulnerability management, and infrastructure security standard processes.
• Experience conducting threat modeling, security assessments, and architecture reviews.
• Proficiency with scripting and automation using PowerShell, Python, Bash, or similar languages.
• Strong problem-solving, analytical, and troubleshooting skills.
• Excellent interpersonal skills and ability to influence technical and non-technical partners.
• Ability to travel up to 20%, including to offices in Carlsbad, CA, and Reston, VA.
• U.S. citizenship required.
• Active Top Secret clearance required.

Nice To Haves

• CISSP, CCSP, GIAC, Azure Security Engineer, AWS Security Specialty, or similar industry certification.
• Experience implementing Zero Trust architectures and modern identity security strategies.
• Knowledge of cloud-native technologies, containers, Kubernetes, and platform engineering practices.
• Experience with SIEM, SOAR, XDR, and security monitoring platforms.
• Experience working in regulated environments and with frameworks such as NIST, CIS Controls, ISO 27001, SOC 2, PCI DSS, or FedRAMP.
• Extensive familiarity with security automation and DevSecOps methodologies.
• Ability to influence technical direction across teams without direct authority.
• Experience presenting security architecture recommendations to senior leaders and executive partners.
• Experience with MBSE.
• Proven ability to balance security risk reduction with business and operational objectives.
• Ability to manage competing priorities and timelines.
• Strong written and verbal communication skills.
• Strong self-motivation and independent work ethic.

Responsibilities

• Architect, implement, and advance security controls across enterprise, cloud, product, and infrastructure environments.
• Provide information assurance and security architecture guidance across network, software, infrastructure, cloud, and physical security teams to ensure compliance with NIST guidelines.
• Collaborate with multifunctional teams to develop, build, and implement secure architectures for ground and space networks.
• Lead security reviews for new systems, infrastructure, applications, and technology initiatives.
• Conduct threat modeling, architecture assessments, and security risk evaluations.
• Create and lead an information security program specific to the constructed architecture.
• Provide technical and policy guidance to support successful RMF security accreditation efforts.
• Implement the DoD Zero Trust framework within target programs.
• Develop and maintain security standards, reference architectures, and engineering standard processes.
• Communicate security risks, recommendations, and architectural decisions to technical and business partners.

Benefits

• Medical, financial, and other benefits, dependent on the position offered.
• Potential additional cash or stock incentives as part of the compensation package.
• Holistic health and wellness-focused benefit offerings.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal