Senior Security Engineer

# **About Aalyria:** Aalyria is a leading technology company that supplies laser communications technology and temporospatial software-defined networking platforms to the aerospace industry. With technology acquired from Google, Aalyria is at the forefront of innovation in satellite and airborne mesh networks, as well as cislunar and deep-space communications. We are revolutionizing the orchestration and management of planetary mesh networks using any radio or optical spectrum, any orbit, and any hardware across land, sea, air, and space. ## **Role Overview:** We are looking for an experienced Senior Security Engineer to join our team. The ideal candidate is a skilled infrastructure and cloud security professional who can own cloud and network security, compliance operations, and identity systems for our products and environments. You will serve as the technical security expert responsible for securing our cloud infrastructure, network architecture, and access control systems supporting defense and federal customers. This role requires a security professional with deep experience in cloud infrastructure, network security, and federal compliance frameworks. You will work closely with the Director of Security & IT to secure our cloud environments and systems in alignment with CMMC L2, FedRAMP, and NIST 800-171 requirements. Some of the kinds of responsibilities you may have are listed below. ## **Key Responsibilities:** **Cloud Infrastructure Security** - Design, implement, and manage secure cloud networking architectures including VPCs, subnets, peering, and transit gateways across GCP, AWS, or Azure - Configure and maintain cloud-native firewall rules, security groups, network ACLs, and perimeter controls to enforce least-privilege traffic policies - Implement and manage cloud security posture management (CSPM) tooling and continuously remediate misconfigurations across cloud environments - Design and operate network segmentation and micro-segmentation strategies aligned with zero trust architecture principles - Manage and harden cloud IAM, including role definitions, service account policies, privileged access controls, and just-in-time access **Firewall & Network Security** - Manage next-generation firewall (NGFW) platforms, including policy development, rule lifecycle management, and traffic inspection configurations - Implement and maintain IDS/IPS, DNS security, and network monitoring solutions to detect and respond to threats - Design and enforce network access control (NAC) policies and segmentation for both cloud and on-premises environments - Conduct regular firewall rule reviews and access path analysis to identify and remediate overly permissive configurations **PKI & Identity Management** - Design, implement, and operate PKI infrastructure including certificate authorities, certificate lifecycle management, and trust store management - Manage certificates for device identity, mutual TLS (mTLS), VPN authentication, and code signing in compliance with federal requirements - Administer and enforce access control policies across identity providers (IdPs), directory services (Active Directory / LDAP), and SSO platforms - Implement and maintain multi-factor authentication (MFA), privileged access management (PAM), and role-based access control (RBAC) systems - Ensure cryptographic implementations meet FIPS 140-2/140-3 requirements and federal standards **Compliance & Risk Management** - Implement and maintain technical controls mapped to CMMC Level 2, FedRAMP, and NIST 800-171 control families - Develop and manage system security plans (SSPs), security assessment reports (SARs), and plans of action and milestones (POA&Ms) - Conduct continuous monitoring, log review, and evidence collection to support compliance audits and third-party assessments - Perform risk assessments and vulnerability management across cloud and on-premises infrastructure in accordance with NIST RMF - Maintain configuration baselines and enforce ha…