Principal DevSecOps Architect
BlackSky · Remote, USA
About this role
**Principal DevSecOps Architect** **About BlackSky** BlackSky is a real-time intelligence company that owns and operates the world’s most advanced space-based intelligence platform. We provide customers satellite imagery, automated analytics, and high-frequency monitoring of strategic locations, economic assets, and events worldwide. Our global team works with cutting-edge technology to deliver foresight into critical matters that affect national security and the economy. **Role Overview** BlackSky is seeking a hands-on DevSecOps architect to support the Chief Technology Office and help shape and drive the cybersecurity of BlackSky software systems and satellite ground segment deployments. You will work across teams to evolve current systems and technologies to align with BlackSky security requirements, compliance needs, and strategic direction. This role reports to the **VP, Product Architecture**. While candidates near **Herndon, VA** are strongly preferred, **remote candidates in certain states** may be considered. **Responsibilities** - Drive alignment between the Information Security Office and the Chief Technology Office by developing and decomposing requirements and solutions to achieve security compliance of engineering deployments. - Create architectural blueprints and plans for software, network, and infrastructure deployment security across cloud and on-premises environments. - Develop a cybersecurity roadmap in coordination with the Information Security Office and Engineering; implement security frameworks for cloud and on-premises infrastructure. - Support Engineering by assessing vulnerabilities and security risks through security and architectural reviews. - Partner with DevOps teams to integrate automated security controls into Infrastructure-as-Code (IaC) templates (e.g., **Terraform** and **Helm**). - Establish engineering-wide security practices, standards, and access guidelines based on regulatory and compliance rulesets. - Translate security requirements into engineering specifications and communicate with internal/external stakeholders. - Evaluate the impact of implementing security controls across cyber risk, staffing, and schedule implications. - Ensure engineering security documentation is accurate and complete. - Coordinate development and execution of security controls across security, software development, infrastructure, systems engineering, and program/product teams. - Organize and track projects, manage risks and escalations, prioritize tasks, and meet business objectives. - Collaborate with managers and technical groups to address customer issues and solve difficult problems. - Develop models and analyze data to evaluate tradeoffs and support decision-making. - Perform other job-related duties as assigned. **Required Qualifications** - **12+ years** related experience, including **5+ years** leading projects in **DevSecOps** or **infrastructure security architecture**. - Bachelor’s degree in an engineering field. - Experience architecting complex software systems and deployments for cybersecurity compliance. - Strong knowledge of software security standards, including **NIST 800-171, NIST 800-53, NIST 800-207, FIPS 140-2, FedRAMP, and ISO/IEC 27001:2022**. - Experience building security architecture roadmaps. - Familiarity with software engineering best practices and processes (e.g., agile, enterprise design patterns, coding standards). - Experience with **Kubernetes** and **on-premises** deployments
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.