Job description

K2 is building the largest and highest-power satellites ever flown, unlocking performance levels previously out of reach across every orbit. Backed by over $1 billion in total funding from leading investors including Altimeter Capital, ICONIQ, Kleiner Perkins, Lightspeed Venture Partners, Redpoint Ventures, and T. Rowe Price — and with over $1 billion in signed contracts across commercial and US government customers, we're mass-producing the highest-power satellite platforms ever built for missions from LEO to deep space. The rise of heavy-lift launch vehicles is shifting the industry from an era of mass constraint to one of mass abundance, and we believe this new era demands a fundamentally different class of spacecraft. Engineered to survive the harshest radiation environments and to fully capitalize on today's and tomorrow's massive rockets, K2 satellites deliver unmatched capability at constellation scale and across multiple orbits. With multiple launches in 2027 and plans to scale to 100 satellites a year, we're Building Bigger — helping develop the solar system and build toward a Kardashev Type II (K2) civilization. If you are a motivated individual who thrives in a fast-paced environment and you're excited about contributing to the success of a high-growth Series D-funded company, we'd love for you to apply. The Role:   We are seeking an experienced Cybersecurity Architect to support classified programs in direct service to the Department of Defense (DoD) and Intelligence Community (IC). In this role, you will design, develop, and implement comprehensive security architectures for unclassified, CUI and classified information systems operating within K2 Space environments. You will serve as a trusted technical authority, shaping enterprise security strategy, guiding risk management decisions, and ensuring compliance with applicable government cybersecurity frameworks and directives. Responsibilities   Architect end-to-end cybersecurity solutions for systems across K2 Space, DoD and IC environments, ensuring alignment with mission requirements and compliance mandates. Lead the design and support the accreditation of systems under the Risk Management Framework (RMF), including the preparation and review of System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action & Milestones (POA&Ms). Define and enforce security architecture baselines, reference models, and standards across multi-domain and cross-domain environments. Conduct threat modeling, vulnerability assessments, and security architecture reviews for new and existing classified systems and programs. Collaborate with program managers, system engineers, and government stakeholders to integrate security requirements into system development lifecycle (SDLC) processes. Evaluate emerging threats, technologies, and adversarial TTPs; recommend architectural countermeasures and mitigations. Support Cross Domain Solution (CDS) design, evaluation, and accreditation efforts in coordination with relevant approval authorities. Provide technical guidance on zero trust architecture (ZTA) implementation within classified environments. Develop and present security architecture documentation, briefings, and recommendations to senior leadership and others. Mentor junior security team members and serve as a subject matter expert (SME) on classified cybersecurity matters. Qualifications   Active Top Secret / SCI (TS/SCI) security clearance with Counterintelligence (CI) Polygraph — must be in-scope and adjudicated prior to start. 8 or more years of cybersecurity experience directly supporting the Department of Defense, Intelligence Community, or other U.S. government national security programs. Demonstrated expertise in cybersecurity architecture design for classified and sensitive government networks and information systems. Deep familiarity with NIST SP 800-53, ICD 503, CNSSI 1253, DODI 8510.01 (RMF), and related DoD/IC cybersecurity policy frameworks. Experience designing or operating within multi-classification-level environments and managing cross-domain data transfer requirements. Proficiency in network security architecture, including segmentation, firewall policy, PKI/encryption, and intrusion detection/prevention. Strong understanding of endpoint security, identity and access management (IAM), and Privileged Access Management (PAM) in government environments. Proven ability to lead technical security architecture efforts and communicate findings to both technical and executive audiences. Nice to Have   Experience with zero trust architecture (ZTA) implementation in accordance with DoD ZT Strategy and NIST SP 800-207. Familiarity with NSA-approved cryptographic solutions and key management systems used in classified environments. Experience supporting all levels of classified programs. Background in cloud security architecture within classified environments (e.g., AWS C2S, Azure Government, or equivalent IL5/IL6 environments). Experience with Cross Domain Solutions (CDS), data guards, and approval processes. Prior experience as an Information System Security Officer (ISSO) or Information System Security Manager (ISSM). Familiarity with the Cybersecurity Maturity Model Certification (CMMC) framework. Required / Preferred Certifications: One or more of the following certifications is required or strongly preferred: C ISSP — Certified Information Systems Security Professional CISM — Certified Information Security Manager SABSA — Sherwood Applied Business Security Architecture CASP+ — CompTIA Advanced Security Practitioner DoD 8570/8140 IAT Level III or IAM Level III baseline certification (required for applicable roles) CCSP — Certified Cloud Security Professional AWS Certified Security – Specialty or equivalent cloud security certification EDUCATION Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Electrical Engineering, or a related technical discipline is required. Master's degree in a related field is preferred. Equivalent combination of education, military technical training, and hands-on experience in classified environments may be considered. Compensation and Benefits:   Base salary range for this role is $170,000 - $230,000 + equity in the company  Salary will be based on several factors including, but not limited to: knowledge and skills, education, and experience level  Comprehensive benefits package including paid time off, medical/dental/vision coverage, life insurance, paid parental leave, and many other perks  If you don’t meet 100% of the preferred skills and experience, we encourage you to still apply! Building a spacecraft unlike any other requires a team unlike any other and non-traditional career twists and turns are encouraged! If you need a reasonable accommodation as part of your application for employment or interviews with us, please let us know. Export Compliance As defined in the ITAR, “U.S. Persons” include U.S. citizens, lawful permanent residents (i.e., Green Card holders), and certain protected individuals (e.g., refugees/asylees, American Samoans). Please consult with a knowledgeable advisor if you are unsure whether you are a “U.S. Person.” The person hired for this role will have access to information and items controlled by U.S. export control regulations, including the export control regulations outlined in the International Traffic in Arms Regulation (ITAR). The person hired for this role must therefore either be a “U.S. person” as defined by 22 C.F.R. § 120.15 or otherwise eligible for a federally issued export control license. Equal Opportunity K2 Space is an Equal Opportunity Employer; employment with K2 Space is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Requirements

Must-haves

Architect end-to-end cybersecurity solutions for systems across K2 Space, DoD and IC environments, ensuring alignment with mission requirements and compliance mandates.
Define and enforce security architecture baselines, reference models, and standards across multi-domain and cross-domain environments.
Conduct threat modeling, vulnerability assessments, and security architecture reviews for new and existing classified systems and programs.
Collaborate with program managers, system engineers, and government stakeholders to integrate security requirements into system development lifecycle (SDLC) processes.
Evaluate emerging threats, technologies, and adversarial TTPs; recommend architectural countermeasures and mitigations.
Support Cross Domain Solution (CDS) design, evaluation, and accreditation efforts in coordination with relevant approval authorities.
Provide technical guidance on zero trust architecture (ZTA) implementation within classified environments.
Develop and present security architecture documentation, briefings, and recommendations to senior leadership and others.
Mentor junior security team members and serve as a subject matter expert (SME) on classified cybersecurity matters.
Active Top Secret / SCI (TS/SCI) security clearance with Counterintelligence (CI) Polygraph — must be in-scope and adjudicated prior to start.
8 or more years of cybersecurity experience directly supporting the Department of Defense, Intelligence Community, or other U.S. government national security programs.
Demonstrated expertise in cybersecurity architecture design for classified and sensitive government networks and information systems.
Deep familiarity with NIST SP 800-53, ICD 503, CNSSI 1253, DODI 8510.01 (RMF), and related DoD/IC cybersecurity policy frameworks.
Experience designing or operating within multi-classification-level environments and managing cross-domain data transfer requirements.
Proficiency in network security architecture, including segmentation, firewall policy, PKI/encryption, and intrusion detection/prevention.

Nice-to-haves

Experience with zero trust architecture (ZTA) implementation in accordance with DoD ZT Strategy and NIST SP 800-207.
Familiarity with NSA-approved cryptographic solutions and key management systems used in classified environments.
Experience supporting all levels of classified programs.
Background in cloud security architecture within classified environments (e.g., AWS C2S, Azure Government, or equivalent IL5/IL6 environments).
Experience with Cross Domain Solutions (CDS), data guards, and approval processes.
Prior experience as an Information System Security Officer (ISSO) or Information System Security Manager (ISSM).
Familiarity with the Cybersecurity Maturity Model Certification (CMMC) framework.
One or more of the following certifications is required or strongly preferred:
Master's degree in a related field is preferred.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsazure

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

Pto

Paid Time Off

Parental Leave