Senior Aerospace Cybersecurity Architect

Iceye Us•Irvine, CA

13d•Onsite

About The Position

At ICEYE, we design, build and operate the largest fleet of Synthetic Aperture Radar (SAR) satellites in the world. Using advanced technology, our constellation collects topographical data about any location on Earth, day or night, through any weather conditions. Headquartered in Southern California, our customers are society’s heroes – intelligence professionals, warfighters, first responders, and scientific researchers. As a trusted mission partner, the United States and its allies depend on us for critical information when it matters most. The Aerospace Cybersecurity Architect is responsible for defining and advancing the security architecture for ICEYE US satellites, ground infrastructure, mission systems, communications, and supporting technologies throughout their lifecycle. This role serves as the primary cybersecurity architecture partner to aerospace software architecture, satellite operations, mission architecture, and engineering teams, ensuring cybersecurity requirements and security-by-design principles are incorporated into system and mission design from inception through operations. The Aerospace Cybersecurity Architect evaluates cyber risk across space, ground, communications, embedded, cloud, and operational technology environments and develops scalable, risk-informed architecture solutions to mitigate identified threats and vulnerabilities. The role provides technical cybersecurity guidance for system interfaces, trust boundaries, data flows, communications pathways, and mission-critical components while ensuring alignment with applicable customer, contractual, regulatory, and cybersecurity requirements. This position is critical to protecting ICEYE US mission capabilities and establishing resilient security architectures capable of supporting evolving operational and national security requirements.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, Electrical Engineering, Aerospace Engineering, Systems Engineering, or a related technical discipline, or equivalent relevant professional experience.
5+ years of professional experience supporting aerospace, satellite, spacecraft, mission, or other complex aerospace engineering systems.
4+ years of experience in cybersecurity architecture, security engineering, systems security engineering, or a related technical cybersecurity discipline.
Experience developing or reviewing security architectures for complex distributed systems, embedded platforms, cloud environments, operational technology, or mission-critical systems.
Experience performing cybersecurity risk assessments, threat modeling, architecture reviews, vulnerability assessments, or security testing of technical systems.
Working knowledge of cybersecurity frameworks and requirements such as NIST SP 800-171, NIST SP 800-53, NIST Risk Management Framework (RMF), CMMC, or comparable security requirements.
Experience integrating cybersecurity requirements into system architecture, software development, cloud environments, DevSecOps, embedded systems, infrastructure, or engineering lifecycle processes.
Ability to analyze complex technical architectures, interfaces, trust boundaries, data flows, communications pathways, and security controls and translate identified risks into actionable architecture and engineering requirements.
Ability to communicate technical cybersecurity risk and architecture recommendations to engineering, cybersecurity, program, and mission stakeholders.
Current U.S. Government security clearance or eligibility to obtain and maintain the level of clearance required for the position.

Nice To Haves

Experience designing or securing satellite, spacecraft, ground station, ground-segment, command-and-control, or mission-critical aerospace systems.
Knowledge of satellite communications, spacecraft command and control, telemetry, tracking and control, ground-segment architecture, or space-to-ground communications.
Experience with embedded systems, real-time operating systems, operational technology (OT), hardware security, or specialized aerospace engineering platforms.
Experience developing threat models for distributed, mission-critical, embedded, or cyber-physical systems.
Experience conducting or supporting penetration testing and security assessments of embedded systems, hardware, wireless technologies, RF communications, or mission systems.
Familiarity with secure systems engineering methodologies, systems engineering lifecycle processes, secure-by-design principles, and systems development lifecycle methodologies.
Experience supporting U.S. Government, Department of Defense, Intelligence Community, National Reconnaissance Office, or other national security programs.
Experience designing and evaluating cloud security architectures within AWS or Microsoft Azure environments.
Familiarity with Zero Trust architecture, identity-centric security, network segmentation, cryptographic protections, secure communications, key management, and resilient system design.
Familiarity with secure software development, CI/CD, infrastructure-as-code, containers, APIs, microservices, and DevSecOps practices.
Experience evaluating cybersecurity implications of third-party technologies, software supply chains, hardware components, APIs, and external system interconnections.
Relevant cybersecurity or security architecture certification such as CISSP, ISSAP, CCSP, CSSLP, SABSA, Security+, OSCP, or equivalent.

Responsibilities

Define, design, and maintain cybersecurity architectures for satellites, ground stations, mission systems, communications infrastructure, and supporting aerospace technologies.
Establish cybersecurity architecture principles, security patterns, technical requirements, and design standards for aerospace and mission environments.
Integrate cybersecurity requirements and security-by-design principles into system architecture, software development, DevSecOps, satellite operations, and mission design processes.
Perform architecture-level cybersecurity risk assessments, threat modeling, attack-surface analysis, and security design reviews for aerospace and mission systems.
Analyze system trust boundaries, interfaces, data flows, communications pathways, authentication mechanisms, and dependencies to identify cybersecurity risks and architecture weaknesses.
Identify and assess vulnerabilities affecting embedded systems, operational technology (OT), communications systems, ground infrastructure, mission applications, and supporting cloud environments.
Develop architecture-level security controls and mitigation strategies for new aerospace technologies, systems, interfaces, communications pathways, and mission capabilities.
Conduct and support technical security assessments, vulnerability assessments, penetration testing, architecture validation, and security testing of aerospace and mission systems.
Serve as the cybersecurity architecture partner to software architecture, satellite operations, IT, DevOps, engineering, and cybersecurity teams throughout system design and implementation.
Evaluate cybersecurity risks associated with APIs, external interconnections, third-party integrations, supply chain components, hardware, software, and supporting technologies.
Define and review security requirements for identity, authentication, authorization, encryption, key management, network segmentation, secure communications, logging, monitoring, and system resiliency.
Support implementation and technical validation of cybersecurity controls required by NIST, CMMC, RMF, customer security requirements, and applicable contractual obligations.
Develop and maintain security architecture documentation, system diagrams, trust-boundary diagrams, data-flow diagrams, threat models, technical risk assessments, and security design decisions.
Provide architecture-level recommendations for remediation of identified security deficiencies and ensure corrective actions align with the broader system and mission architecture.
Support cybersecurity incident investigations involving corporate, aerospace, mission, ground, or supporting systems and incorporate lessons learned into future architecture and security design improvements.