Principal Security Architect - TeraWave

Application close date:

Applications will be accepted on an ongoing basis until the requisition is closed.

At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We’re working to develop reusable, safe, and low-cost space vehicles and systems within a culture of safety, collaboration, and inclusion. Join our team of problem solvers as we add new chapters to the history of spaceflight!

Blue Origin is pioneering the future of space-based connectivity with TeraWave, a revolutionary satellite communications network designed to deliver symmetrical data speeds of up to 6 Tbps anywhere on Earth. This network will service tens of thousands of enterprise, data center, and government users who require reliable connectivity for critical operations.

As a Principal Security Architect, you will design, build, and enforce cybersecurity defenses across this end-to-end space system. You will secure onboard computers, firmware, and inter-satellite links on the satellite bus. You will protect the RF and optical transmissions between Earth and orbit from interception and manipulation. And you will establish zero-trust architectures that segment space network links and define rigid trust boundaries so that a breach in one element cannot propagate across the system.

This role is deeply technical and will remain so — you will be hands-on with threat modeling, architecture definition, and security design reviews. At the same time, you will be expected to provide inputs to defining the security staffing needs of the program as it evolves.

This role sits within the Chief Systems Architecture office and works closely with payload, flight software, ground systems, network engineering, and silicon teams.

Responsibilities

• Design and enforce cybersecurity architectures across the full TeraWave system — spacecraft, terminals, ground stations, command-and-control links, and cloud/edge infrastructure
• Secure onboard satellite systems including embedded computers, firmware, inter-satellite links, and other critical bus components
• Protect RF and optical/laser links between Earth and orbit against data manipulation, interception, and denial
• Establish and enforce zero-trust architectures — segment space network links, define trust boundaries, and ensure breach containment across system elements
• Perform threat modeling and risk analysis across all system segments; establish security policies and ensure adherence to regulatory frameworks
• Translate business and compliance requirements into functional security architectures, including network segmentation, firewall DMZs, and identity management schemes
• Balance security controls with operational productivity, cloud migration timelines, and program objectives
• Guide and mentor engineering teams on security practices; review proposed infrastructure and design changes for security implications; oversee incident response