Principal Security Architect - TeraWave

Application close date:
Applications will be accepted on an ongoing basis until the requisition is closed.

At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We’re working to develop reusable, safe, and low-cost space vehicles and systems within a culture of safety, collaboration, and inclusion. Join our team of problem solvers as we add new chapters to the history of spaceflight!

Blue Origin is pioneering the future of space-based connectivity with TeraWave, a revolutionary satellite communications network designed to deliver symmetrical data speeds of up to 6 Tbps anywhere on Earth. This network will service tens of thousands of enterprise, data center, and government users who require reliable connectivity for critical operations.

As a Principal Security Architect, you will design, build, and enforce cybersecurity defenses across this end-to-end space system. You will secure onboard computers, firmware, and inter-satellite links on the satellite bus. You will protect the RF and optical transmissions between Earth and orbit from interception and manipulation. And you will establish zero-trust architectures that segment space network links and define rigid trust boundaries so that a breach in one element cannot propagate across the system.

This role is deeply technical and will remain so — you will be hands-on with threat modeling, architecture definition, and security design reviews. At the same time, you will be expected to provide inputs to defining the security staffing needs of the program as it evolves.

This role sits within the Chief Systems Architecture office and works closely with payload, flight software, ground systems, network engineering, and silicon teams.

Responsibilities

- Design and enforce cybersecurity architectures across the full TeraWave system — spacecraft, terminals, ground stations, command-and-control links, and cloud/edge infrastructure

- Secure onboard satellite systems including embedded computers, firmware, inter-satellite links, and other critical bus components

- Protect RF and optical/laser links between Earth and orbit against data manipulation, interception, and denial

- Establish and enforce zero-trust architectures — segment space network links, define trust boundaries, and ensure breach containment across system elements

- Perform threat modeling and risk analysis across all system segments; establish security policies and ensure adherence to regulatory frameworks

- Translate business and compliance requirements into functional security architectures, including network segmentation, firewall DMZs, and identity management schemes

- Balance security controls with operational productivity, cloud migration timelines, and program objectives

- Guide and mentor engineering teams on security practices; review proposed infrastructure and design changes for security implications; oversee incident response

- Collaborate across the company to ensure security goals and requirements are understood and addressed by manufacturing operatoins, flight operations, payload, software, ground, network, and silicon teams

- Assess evolving program security staffing needs — define roles, build the case for resources, and help hire and develop the security team as the constellation scales

- Define security requirements for TeraWaves manufacturing assembly and test processes.

Minimum Qualifications

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Electrical Engineering, or related field; MS preferred

- 10+ years of experience spanning threat modeling, cryptography, identity management and authentication, network security, and secure software development

- Deep understanding of embedded systems security — firmware, ASICs, FPGAs — alongside modern software engineering practices

- Deep understanding of Linux security features and defense strategies

- Demonstrated ability to frame and close architectural trades — scoping the question, identifying binding constraints, and documenting defensible outcomes

- Strong technical communication skills — able to present security architecture and risk assessments clearly to both domain specialists and program leadership

Preferred Qualifications

- Experience with security in export-controlled environments

- Understanding of threat actor tradecraft and state-of-the-art attack techniques

- Experience building or leading a small technical team from inception

- Experience leading threat assessmeents and defining security architectures within manufacturing environments.

Base Pay Range for:
CA applicants is $169,624.00 - $237,473.25
WA applicants is $169,624.00 - $237,473.25

Other site ranges may differ

Culture Statement

Don’t meet all desired requirements? Studies have shown that some people are less likely to apply to jobs unless they meet every single desired qualification. At Blue Origin, we are dedicated to building an authentic workplace, so if you’re excited about this role but your past experience doesn’t align perfectly with every desired qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles.

Export Control Regulations

Applicants for employment at Blue Origin must be a U.S. citizen or national, U.S. permanent resident (i.e. current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.

Background Check

- Required for all positions: Blue’s Standard Background Check
- Required for Certain Job Profiles: Defense Biometric Identification System (DBIDS) background check if at any time the role requires one to be on a military installation
- Required for Certain Job Profiles: Drivers who operate Commercial Motor Vehicles with a Gross Vehicle Weight (GVW), Gross Vehicle Weight Rating (GVWR) or combination of power unit and trailer that meets or exceeds 10,001 lbs. and/or transports placardable amounts of hazardous materials by ground in any vehicle on a public road while in commerce, may be subject to additional Federal Motor Carrier Safety Regulations including: Driver Qualification Files, Medical Certification (obtained before onboarding), Road Test, Hours of Service, Drug and Alcohol Testing, vehicle inspection requirements, CDL requirements (if applicable) and hazardous materials transportation/shipping training.
- Required for certain Job Profiles: Ability to obtain and maintain Merchant Mariner Credential, which includes pre-employment and random drug testing as well as DOT physical

Benefits

- Benefits include: Medical, dental, vision, basic and supplemental life insurance, paid parental leave, short and long-term disability, 401(k) with a company match of up to 5%, and an Education Support Program.
- Stock Options for all regular employees (working at least 20 hours/week)
- Paid Time Off: Up to four (4) weeks per year based on weekly scheduled hours, and up to 14 company-paid holidays.
- Dependent on role type and job level, employees may be eligible for benefits and bonuses based on the company's intent to reward individual contributions and enable them to share in the company's results, or other factors at the company's sole discretion. Bonus amounts and eligibility are not guaranteed and subject to change and cancellation. Please check with your recruiter for more details.