Cybersecurity Architecture Engineer

Description

Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge.

For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles.

Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more.

We’d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet.

About the Role

Apex is looking for a Cybersecurity Architecture Engineer to take ownership of the security design and implementation across our cybersecurity infrastructure. This is a hands-on technical role that works closely with IT, Engineering, and Operations to build security into the design from the start.

Responsibilities

• Create security architecture for Apex corporate and development environments.
• Translate NIST SP 800-171 and CMMC Level 2 requirements into technical designs and implementation steps that engineering teams can execute.
• Work with CrowdStrike, Tenable, SIEM, and endpoint management tools to identify and remediate gaps across our security environment.
• Support ATO and other security activities with technical architecture documentation, control implementations, and implementation guidance.
• Facilitate conversations with network and infrastructure teams on Palo Alto architecture, segmentation, remote access, and rule design.
• Define CUI boundaries, network diagrams, and data flows as systems and programs change.

Requirements

• Active TS/SCI clearance required at time of hire
• US Citizenship required
• 5 or more years of hands-on experience in security engineering, cloud security, infrastructure security, or cybersecurity architecture
• Strong working knowledge of AWS security, Microsoft identity, network security, endpoint security, vulnerability management, logging, and secure administrative access
• Experience designing or reviewing environments that span cloud, SaaS, endpoints, networks, servers, and software services
• Working knowledge of NIST SP 800-171 and CMMC Level 2, with the ability to connect a control requirement to a technical implementation
• Ability to produce clear architecture diagrams, security standards, technical decisions, and implementation guidance for engineering teams
• Preferred Qualifications
• Experience with Microsoft GCC High, Palo Alto, CrowdStrike Falcon, Tenable, AWS GovCloud, Entra ID, Elastic, CyberArk, Terraform, containers, or Kubernetes
• Experience supporting aerospace, defense, national security, ATO, RMF, or other regulated technical environments
• CISSP, CCSP, AWS Security Specialty, or a comparable technical security certification
• Experience supporting aerospace, defense, national security, ATO, RMF, or other regulated technical environments

Benefits

• Apex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We're a fast-growing startup that has raised more than $500M in funding, and we invest heavily in our people from day one.
• Shared upside: Receive equity in Apex, letting you benefit from the work you create
• Best-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost
• Comprehensive PTO package to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays
• Competitive 401(k) plan with generous matching - 100% match on first 3%, 50% on next 2%
• 8 weeks paid parental leave plus childcare reimbursement up to $350/day for work-related travel
• Daily catered lunch and unlimited snacks to keep you fueled throughout the day
• Vibrant community: Monthly office socials, pickleball tournaments, run club, and gatherings for you and your family
• Your dream desk setup and all the tools you need to be your most productive self
• World-class Playa Vista office with the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life
• Real impact opportunity: Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting difference
• Additional Information:
• Compensation ranges are set by role, level, location, and alignment with market data. A candidate's specific level and base pay are determined case by case and may vary with job-related skills, education, experience, technical capabilities, and internal equity. Beyond base salary, full-time hires are also eligible for long-term incentives in the form of stock options, along with medical, dental, and vision coverage and a 401(k) retirement plan.
• ITAR Requirements
• Apex's work is governed by U.S. export control laws, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). To be eligible for this role, applicants must either (1) qualify as a U.S. Person, meaning a U.S. citizen or national, a lawful permanent resident (green card holder), a refugee admitted under 8 U.S.C. § 1157, or an individual granted asylum under 8 U.S.C. § 1158, or (2) be able to obtain the required export authorizations from the U.S. Department of State, the U.S. Department of Commerce, or another applicable U.S. government agency. You can learn more about ITAR here .