Information Security Architect

Requisition : 1840
Standard Weekly

Hours:

40.00
Location: ULA
- Denver, ULA
- Cape Canaveral, ULA
- Decatur, ULA
- Vandenberg AFB
Relocation: Yes
- Relocation may be available
Travel Requirements: 25%

At ULA, success comes through the efforts of a strong, united team.

Thanks for your interest in United Launch Alliance, the world's most experienced and reliable space launch company! Successfully launching more than 155 consecutive missions with 100% mission success doesn't happen by accident. It's a testament to the commitment and dedication of our team of rocket scientists and support employees combined with the systems and processes we use to pull them together.

As a ULA employee, you'll have the opportunity to grow in your career while working in a team-oriented culture that combines technology, innovation, ingenuity and a commitment to the extraordinary. Whether you are in college just launching your career, or, have experience and want to come work with the best rocket team in the world, our unshakable unity yields stronger solutions and better results as we carry out our mission to save lives, explore the universe, and connect the world.

Our team is excited to meet you!

At ULA, as an Information Security Architect 4 you will support mission‑critical Aerospace & Defense programs by designing, implementing, and sustaining secure technical architectures across on‑premises, cloud, and hybrid environments. This role integrates deep cybersecurity engineering knowledge with practical experience in secure cloud infrastructure, automation, and emerging AI technologies.

The architect will work closely with system owners, GRC teams, and mission stakeholders to ensure compliance with frameworks such as CNSSI 1253, NIST SP 800‑171, NIST SP 800‑172, and ISO/IEC 27001:2022 while enabling scalable, resilient, and modern security capabilities.

• Design and implement security architectures for on‑prem, cloud (AWS/Azure), hybrid, and edge environments supporting A&D mission systems.
• Engineer secure configurations aligned with CNSSI 1253, 800‑53/171/172, and ISO 27001:2022 controls.
• Develop and maintain security technical implementation guides (STIGs), hardening standards, baselines, and IaC‑based secure configurations.
• Support the buildout of Zero Trust capabilities, including identity, micro‑segmentation, continuous monitoring, and data‑centric security models.
• Support implementation of security tooling such as SIEM, EDR/XDR, vulnerability scanning, compliance automation, and cloud‑native security services.
• Architect secure data pipelines, API integrations, and containerized workloads using Kubernetes/Open Shift or similar platforms.
• Design security controls for AI, ML, and LLM‑based systems, focusing on data privacy, model integrity, secure MLOps, and adversarial threat mitigation.
• Implement cloud security technologies such as KMS, IAM, Key Vault/Secrets Manager, network security groups, CNAPP, and other cloud‑native security tools.
• Collaborate with GRC and RMF teams to support SSP development, POA&M remediation, system authorizations, and continuous monitoring.
• Identify and remediate vulnerabilities, misconfigurations, and architectural risks across complex mission systems.
• Participate in incident response efforts by providing technical expertise and performing deep‑dive engineering analysis.

Bachelor

Minimum of 6 years of related work experience

• Bachelor's degree in a STEM (Science, Technology, Engineering, Mathematics) field from an accredited college or university (Four years of directly related exempt work experience may be used to satisfy the bachelor’s degree requirement)
• Experience building or…