K2 is building the largest and highest-power satellites ever flown, unlocking performance levels previously out of reach across every orbit. Backed by $450M from leading investors including Altimeter Capital, Redpoint Ventures, T. Rowe Price, Lightspeed Venture Partners, Alpine Space Ventures, and others – with an additional $500M in signed contracts across commercial and US government customers – we’re mass-producing the highest-power satellite platforms ever built for missions from LEO to deep space.
The rise of heavy-lift launch vehicles is shifting the industry from an era of mass constraint to one of mass abundance, and we believe this new era demands a fundamentally different class of spacecraft. Engineered to survive the harshest radiation environments and to fully capitalize on today’s and tomorrow’s massive rockets, K2 satellites deliver unmatched capability at constellation scale and across multiple orbits.
With multiple launches planned through 2026 and 2027, we're Building Bigger to develop the solar system and become a Kardashev Type II (K2) civilization. If you are a motivated individual who thrives in a fast-paced environment and you're excited about contributing to the success of a groundbreaking Series C space startup, we’d love for you to apply.
The Role:
We are seeking an experienced Cybersecurity Architect to support classified programs in direct service to the Department of Defense (DoD) and Intelligence Community (IC). In this role, you will design, develop, and implement comprehensive security architectures for unclassified, CUI and classified information systems operating within K2 Space environments. You will serve as a trusted technical authority, shaping enterprise security strategy, guiding risk management decisions, and ensuring compliance with applicable government cybersecurity frameworks and directives.
Responsibilities
- Architect end-to-end cybersecurity solutions for systems across K2 Space, DoD and IC environments, ensuring alignment with mission requirements and compliance mandates.
- Lead the design and support the accreditation of systems under the Risk Management Framework (RMF), including the preparation and review of System Security Plans (SSPs), Security Assessment Reports (SARs), and Plans of Action & Milestones (POA&Ms).
- Define and enforce security architecture baselines, reference models, and standards across multi-domain and cross-domain environments.
- Conduct threat modeling, vulnerability assessments, and security architecture reviews for new and existing classified systems and programs.
- Collaborate with program managers, system engineers, and government stakeholders to integrate security requirements into system development lifecycle (SDLC) processes.
- Evaluate emerging threats, technologies, and adversarial TTPs; recommend architectural countermeasures and mitigations.
- Support Cross Domain Solution (CDS) design, evaluation, and accreditation efforts in coordination with relevant approval authorities.
- Provide technical guidance on zero trust architecture (ZTA) implementation within classified environments.
- Develop and present security architecture documentation, briefings, and recommendations to senior leadership and others.
- Mentor junior security team members and serve as a subject matter expert (SME) on classified cybersecurity matters.
Qualifications
- Active Top Secret / SCI (TS/SCI) security clearance with Counterintelligence (CI) Polygraph — must be in-scope and adjudicated prior to start.
- 8 or more years of cybersecurity experience directly supporting the Department of Defense, Intelligence Community, or other U.S. government national security programs.
- Demonstrated expertise in cybersecurity architecture design for classified and sensitive government networks and information systems.
- Deep familiarity with NIST SP 800-53, ICD 503, CNSSI 1253, DODI 8510.01 (RMF), and related DoD/IC cybersecurity policy frameworks.
- Experience designing or operating within multi-classification-level environments and managing cross-domain data transfer requirements.
- Proficiency in network security architecture, including segmentation, firewall policy, PKI/encryption, and intrusion detection/prevention.
- Strong understanding of endpoint security, identity and access management (IAM), and Privileged Access Management (PAM) in government environments.
- Proven ability to lead technical security architecture efforts and communicate findings to both technical and executive audiences.
Nice to Have
- Experience with zero trust architecture (ZTA) implementation in accordance with DoD ZT Strategy and NIST SP 800-207.
- Familiarity with NSA-approved cryptographic solutions and key management systems used in classified environments.
- Experience supporting all levels of classified programs.
- Background in cloud security architecture within classified environments (e.g., AWS C2S, Azure Government, or equivalent IL5/IL6 environments).
- Experience with Cross Domain Solutions (CDS), data guards, and approval processes.
- Prior experience as an Information System Security Officer (ISSO) or Information System Security Manager (ISSM).
- Familiarity with the Cybersecurity Maturity Model Certification (CMMC) framework.
Required / Preferred Certifications:
One or more of the following certifications is required or strongly preferred:
- CISSP — Certified Information Systems Security Professional
- CISM — Certified Information Security Manager
- SABSA — Sherwood Applied Business Security Architecture
- CASP+ — CompTIA Advanced Security Practitioner
- DoD 8570/8140 IAT Level III or IAM Level III baseline certification (required for applicable roles)
- CCSP — Certified Cloud Security Professional
- AWS Certified Security – Specialty or equivalent cloud security certification
EDUCATION
- Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Electrical Engineering, or a related technical discipline is required.
- Master's degree in a related field is preferred.
- Equivalent combination of education, military technical training, and hands-on experience in classified environments may be considered.
Compensation and Benefits:
- Base salary range for this role is $170,000 - $230,000 + equity in the company
- Salary will be based on several factors including, but not limited to: knowledge and skills, education, and experience level
- Comprehensive benefits package including paid time off, medical/dental/vision coverage, life insurance, paid parental leave, and many other perks
If you don’t meet 100% of the preferred skills and experience, we encourage you to still apply! Building a spacecraft unlike any other requires a team unlike any other and non-traditional career twists and turns are encouraged!
If you need a reasonable accommodation as part of your application for employment or interviews with us, please let us know.
Export Compliance
As defined in the ITAR, “U.S. Persons” include U.S. citizens, lawful permanent residents (i.e., Green Card holders), and certain protected individuals (e.g., refugees/asylees, American Samoans). Please consult with a knowledgeable advisor if you are unsure whether you are a “U.S. Person.”
The person hired for this role will have access to information and items controlled by U.S. export control regulations, including the export control regulations outlined in the International Traffic in Arms Regulation (ITAR). The person hired for this role must therefore either be a “U.S. person” as defined by 22 C.F.R. § 120.15 or otherwise eligible for a federally issued export control license.
Equal Opportunity
K2 Space is an Equal Opportunity Employer; employment with K2 Space is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.
Skills Required
- Active Top Secret/SCI (TS/SCI) security clearance with Counterintelligence (CI) Polygraph, adjudicated prior to start.
- 8+ years of cybersecurity experience directly supporting DoD, Intelligence Community, or U.S. government national security programs.
- Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Electrical Engineering, or related technical discipline (or equivalent combination of education/military training/experience).
- Must be a U.S. person eligible under ITAR/export control requirements.
- Demonstrated expertise in cybersecurity architecture design for classified and sensitive government networks and information systems.
- Deep familiarity with NIST SP 800-53, ICD 503, CNSSI 1253, DODI 8510.01 (RMF) and related DoD/IC cybersecurity frameworks.
- Experience leading RMF accreditation activities and preparing/reviewing SSPs, SARs, and POA&Ms.
- Experience designing or operating within multi-classification-level environments and managing cross-domain data transfer requirements.
- Proficiency in network security architecture including segmentation, firewall policy, PKI/encryption, and intrusion detection/prevention.
- Strong understanding of endpoint security, Identity and Access Management (IAM), and Privileged Access Management (PAM) in government environments.
- Proven ability to lead technical security architecture efforts and communicate findings to both technical and executive audiences.
- One or more relevant certifications (CISSP, CISM, SABSA, CASP+, DoD 8570/8140 IAT Level III or IAM Level III, CCSP, AWS Certified Security)
- Experience with RMF and accreditation processes for classified programs (preparation, documentation, and coordination with authorities).
- Master's degree in a related field.
- Experience implementing Zero Trust Architecture (DoD ZT Strategy, NIST SP 800-207).
- Familiarity with NSA-approved cryptographic solutions and key management systems used in classified environments.
- Background in cloud security architecture within classified/cloud-impact environments (e.g., AWS C2S, Azure Government, IL5/IL6).
- Experience with Cross Domain Solutions (CDS), data guards, and accreditation/approval processes.
- Prior experience as an Information System Security Officer (ISSO) or Information System Security Manager (ISSM).
- Familiarity with the Cybersecurity Maturity Model Certification (CMMC) framework.
What We Do
Making previously impossible missions possible
.png)
