Senior Security Engineer - Enterprise & Product

About Northwood: Northwood is a modern space infrastructure company focused on connecting space and Earth. The world runs on space. Space will run on Northwood. Our global ground network ensures that missions ranging from national security, to global connectivity, to disaster response can unlock their full potential and operate every day without fail. Role: We're building the internet for space. Help us architect the security. Northwood is deploying a global network of phased array ground stations for mission-critical government and commercial space communications. We need a Senior Security Engineer to design and build the technical security foundation that protects our distributed ground station network while enabling rapid scaling. Responsibilities: - Design security architectures for space infrastructure - Build security controls for phased array ground stations that track hundreds of satellites simultaneously. Design secure communication protocols for satellite telemetry and real-time space communications. - Integrate security into GitOps workflows - Embed security controls into Terraform modules, ArgoCD ApplicationSets, and Vault configurations. Review infrastructure as code and implement automated security validation in CI/CD pipelines. - Build custom security tooling - Develop security automation and tools that integrate with our infrastructure. You're not just configuring tools; you're building custom security solutions. - Secure distributed ground station networks - Implement network security for globally distributed infrastructure including FortiGate firewalls, AWS Transit Gateway, and Cloudflare Zero Trust. Design secure remote access and inter-site communication. - Engineer enterprise and product security - Deploy and manage enterprise security solutions including Okta/Auth0 identity management, DLP systems, insider threat detection, and endpoint security across ground station systems and cloud workloads. Build security into products from design through deployment. - Deploy and configure SIEM platforms - Build enterprise SIEM solutions that handle terabytes of satellite communications data. Design log ingestion pipelines, correlation rules, and automated workflows for continuous monitoring across distributed ground stations. Basic Qualifications - 5+ years of production experience with infrastructure as code (Terraform, AWS CDK) - You automate everything and treat security configurations like the critical code they are - Experience conducting security architecture reviews in regulated environments with strict compliance requirements - Experience with application security reviews for vendor applications and developer code - Network security expertise with firewalls, VPNs, zero-trust architectures, and distributed systems - Experience with government cloud environments (AWS GovCloud, Azure Government) and CI/CD pipelines - Proficiency in one or more general-purpose languages (Python, Go, Rust, etc.) - Hands-on experience with SIEM platforms and security tooling deployment - Ability to obtain and maintain TS/SCI clearance Preferred Qualifications - Experience with HashiCorp Vault, Terraform automation, and ArgoCD GitOps workflows - Container security scanning, admission controllers, and microservices security - Experience building large-scale log ingestion and security data pipelines - Hands-on experience with SIEM platforms (Splunk, Sentinel, Panther) and endpoint security solutions (CrowdStrike, SentinelOne) - Strong Linux experience in production environments with custom distributions - Government/defense industry background with DFARS compliance knowledge - RF and satellite communications security knowledge Additional Information: To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR) you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required