Principal Security Architect - TeraWave

At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We're working to develop reusable, safe, and low-cost space vehicles and systems within a culture of safety, collaboration, and inclusion. Join our team of problem solvers as we add new chapters to the history of spaceflight! Blue Origin is pioneering the future of space-based connectivity with TeraWave, a revolutionary satellite communications network designed to deliver symmetrical data speeds of up to 6 Tbps anywhere on Earth. This network will service tens of thousands of enterprise, data center, and government users who require reliable connectivity for critical operations. As a Principal Security Architect, you will design, build, and enforce cybersecurity defenses across this end-to-end space system. You will secure onboard computers, firmware, and inter-satellite links on the satellite bus. You will protect the RF and optical transmissions between Earth and orbit from interception and manipulation. And you will establish zero-trust architectures that segment space network links and define rigid trust boundaries so that a breach in one element cannot propagate across the system. This role is deeply technical and will remain so - you will be hands-on with threat modeling, architecture definition, and security design reviews. At the same time, you will be expected to provide inputs to defining the security staffing needs of the program as it evolves. This role sits within the Chief Systems Architecture office and works closely with payload, flight software, ground systems, network engineering, and silicon teams. Responsibilities Design and enforce cybersecurity architectures across the full TeraWave system - spacecraft, terminals, ground stations, command-and-control links, and cloud/edge infrastructure Secure onboard satellite systems including embedded computers, firmware, inter-satellite links, and other critical bus components Protect RF and optical/laser links between Earth and orbit against data manipulation, interception, and denial Establish and enforce zero-trust architectures - segment space network links, define trust boundaries, and ensure breach containment across system elements Perform threat modeling and risk analysis across all system segments; establish security policies and ensure adherence to regulatory frameworks Translate business and compliance requirements into functional security architectures, including network segmentation, firewall DMZs, and identity management schemes Balance security controls with operational productivity, cloud migration timelines, and program objectives Guide and mentor engineering teams on security practices; review proposed infrastructure and design changes for security implications; oversee incident response Collaborate across the company to ensure security goals and requirements are understood and addressed by manufacturing operatoins, flight operations, payload, software, ground, network, and silicon teams Assess evolving program security staffing needs - define roles, build the case for resources, and help hire and develop the security team as the constellation scales Define security requirements for TeraWaves manufacturing assembly and test processes. Minimum Qualifications Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Electrical Engineering, or related field; MS preferred 10+ years of experience spanning threat modeling, cryptography, identity management and authentication, network security, and secure software development Deep understanding of embedded systems security - firmware, ASICs, FPGAs - alongside modern software engineering practices Deep understanding of Linux security features and defense strategies Demonstrated ability to frame and close architectural trades - scoping the question, identifying binding constraints, and documenting defensible outcomes Strong technical communication skills - able to present security architecture and risk assessments clearly to both domain specialists and program leadership Preferred Qualifications Experience with security in export-controlled environments Understanding of threat actor tradecraft and state-of-the-art attack techniques Experience building or leading a small technical team from inception Experience leading threat assessmeents and defining security architectures within manufacturing environments. Base Pay Range for: CA applicants is $169,624.00 - $237,473.25 WA applicants is $169,624.00 - $237,473.25 Other site ranges may differ Culture Statement Don't meet all desired requirements? Studies have shown that some people are less likely to apply to jobs unless they meet every single desired qualification. At Blue Origin, we are dedicated to building an authentic workplace, so if you're excited about this #J-18808-Ljbffr Blue Origin