KEY DUTIES & RESPONSIBILITIES
Develop and execute the organization's DevSecOps strategy and roadmap
Lead, mentor, and manage DevSecOps engineers and cross-functional teams
Foster a culture of security, automation, and continuous improvement
Partner with engineering, security, infrastructure, and compliance teams to align objectives
Define team goals, KPIs, and performance metrics
Integrate security controls throughout the Software Development Life Cycle (SDLC)
Design and maintain secure CI/CD pipelines
Automate security testing, code scanning, and compliance validation
Implement Infrastructure as Code (IaC) security best practices
Standardize deployment and release management processes
Oversee application security testing, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), Container and image scanning, and secrets detection
Coordinate vulnerability remediation with development teams
Manage security risk assessments and threat modeling activities
Communicating project progress, status, and potential issues to stakeholders and leadership
Implementing and maintaining agile project management methodologies throughout the project lifecycle
Perform additional job duties as assigned
QUALIFICATIONS
To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Education & Experience
Bachelor's degree in Computer Science, or Computer Engineering, or related field
10+ years' experience in software development, preferably in aerospace
An equivalent combination of education and experience may be considered
Experience in build automation, continuous integration, configuration management, verification, deployment of software
Experience with secure cloud environments (AWS, Azure, GCP)
Experience with hybrid cloud/on-prem environments
Experience implementing cloud security controls and monitoring
Familiarity managing container security (Docker, Kubernetes, OpenShift)
Experience ensuring secure configuration management and hardening
Experience implementing identity and access management (IAM) best practices
Experiencing automating DevSecOps tools and optimizing developer experience
Bachelor’s degree in Computer Science, or Computer Engineering, or related field; 10+ years' experience in software development, preferably in aerospace. An equivalent combination of education and experience may be considered
Experience in build automation, continuous integration, configuration management, verification, deployment of software
Experience with secure cloud environments (AWS, Azure, GCP)
Experience with hybrid cloud/on-prem environments
Experience implementing cloud security controls and monitoring
Familiarity managing container security (Docker, Kubernetes, OpenShift)
Experience ensuring secure configuration management and hardening
Experience implementing identity and access management (IAM) best practices
Experiencing automating DevSecOps tools and optimizing developer experience
Familiarity compliance with applicable standards and regulations such as HIPAA, NIST, FedRAMP, ITAR/REAR
Exposure to software development in Linux environments
Experience developing incident responses and recovery processes
Experience with CI/CD pipelines supporting embedded devices and RTOS
Track record of making things happen in ambiguous, fast-moving environments
Uses good judgement to problem-solve proactively, positively impacting hard challenges
Demonstrated organization skills to meet tight deadlines with high quality results
Core Skills
Passion for space and the mission
Entrepreneurial, growth mindset
High EQ and ability to collaborate within teams and cross-functionally
Tech-solutioning in using systems and tools to move smarter and faster
Core Competencies
Embody our core values of leadership, innovation, and teamwork. In addition, to perform the job successfully, an individual should demonstrate the following competencies:
Accountability
Technical Rigor
Execution Discipline
Pride of Delivery
WORK ENVIRONMENT
Generally, an office environment, but can involve inside or outside work depending on the task.
Requirements
This position may require access to export controlled technical data or technology subject to NASA regulations, International Traffic in Arms Regulations (ITAR), or Export Administration Regulations (EAR). In accordance with U.S. export control laws, final candidates may be required to undergo additional export control screening to determine eligibility for access. Meeting these requirements is a condition of employment
Management has the prerogative to select at any level for which the position is advertised
Must be willing to work evenings and weekends as needed to meet critical project milestones
Physical Requirements
Work may involve sitting or standing for extended periods (90% of the time)
May require lifting and carrying up to 25 lbs. (5% of the time)
Equipment and Machines
Standard office equipment (PC, phone, printer, etc.)
Axiom Space is proud to be an equal opportunity employer. Axiom Space does not discriminate on the basis of race, regional color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with disability, or other applicable legally protected characteristics.
