Principal DevSecOps Architect

Principal DevSecOps Architect About Us: BlackSky is a real-time intelligence company. We own and operate the world's most advanced space-based intelligence platform and provide customers satellite imagery, automated analytics and high-frequency monitoring of strategic locations, economic assets and events from around the globe. BlackSky is trusted by the most demanding allied military and intelligence organizations and commercial companies to deliver foresight into critical matters that affect national security and the economy. BlackSky's data enables governments and businesses to see, understand and anticipate change as it happens, giving them the ultimate strategic advantage so they can act quickly. Our global team works with cutting-edge technology to make a difference around the world and prides itself on being people-first, customer-focused and fun. BlackSky is looking for a talented DevSecOps architect, in support of the Chief Technology Office to help shape and drive the cybersecurity of BlackSky software systems and satellite ground segment deployments. This role will play an instrumental part in future innovation and supporting BlackSky’s position as a leader in secure real-time geospatial intelligence and satellite missions. BlackSky is looking for multi-faceted individual with a cybersecurity and infrastructure (DevSecOps) background who can work across diverse stakeholder sets to plan and execute infrastructure security architectural solutions to achieve cybersecurity standards compliance. This is a hands-on role and you will be working across teams to evolve our current systems and technologies to align with current and future BlackSky security requirements, compliance, and strategic direction. This role reports to the VP, Product Architecture and while we would strongly prefer candidates near our Herndon, VA office we may also consider remote candidates in certain states. Responsibilities: - Drive alignment between the Information Security Office and the Chief Technology Office by developing and decomposing requirements and solutions to achieve security compliance of engineering deployments.

- Develop robust architectural blueprints and plans for software, network, and infrastructure deployment security for systems hosted within cloud and on-premises environments ensuring adherence to industry best practices and regulatory compliance. - Develop a robust cybersecurity roadmap in coordination with the Information Security Office and Engineering and work to implement security frameworks for cloud and on-premises infrastructure. - Support the Engineering organization by assessing vulnerabilities and security risks through security and architectural reviews. - Partner with the DevOps teams to integrate automated security controls directly into Infrastructure-as-Code (IAC) templates like Terraform and Helm. - Establish engineering wide security practices, standards, and access guidelines based on interpreting regulatory and security compliance rulesets. - Communicate with internal and external stakeholders and translate security requirements into engineering specifications within the BlackSky architecture. - Understand the interactions between systems, applications, and services within the architecture and evaluate the impact of implementing security controls to include cyber security risk, staffing resource, and schedule implications. - Ensure the accuracy and completeness of engineering security documentation. - Coordinate development and execution of security controls across security, software development teams, infrastructure, systems engineering, and program and product teams to develop execution plans for implementing security controls or addressing vulnerabilities. - Organize and track projects, proactively manage risks, manage project escalations, prioritize tasks, and meet specific business objectives.