About the role
Senior Security Engineer Senior Security Engineer About Aalyria: Aalyria is a leading technology company that supplies laser communications technology and temporospatial software-defined networking platforms to the aerospace industry. With technology acquired from Google, Aalyria is at the forefront of innovation in satellite and airborne mesh networks, as well as cislunar and deep-space communications. We are revolutionizing the orchestration and management of planetary mesh networks using any radio or optical spectrum, any orbit, and any hardware across land, sea, air, and space. Role Overview: We are looking for an experienced Senior Security Engineer to join our team. The ideal candidate is a skilled infrastructure and cloud security professional who can own cloud and network security, compliance operations, and identity systems for our products and environments. You will serve as the technical security expert responsible for securing our cloud infrastructure, network architecture, and access control systems supporting defense and federal customers. This role requires a security professional with deep experience in cloud infrastructure, network security, and federal compliance frameworks. You will work closely with the Director of Security & IT to secure our cloud environments and systems in alignment with CMMC L2, FedRAMP, and NIST 800-171
requirements. Some of the kinds of
responsibilities you may have are listed below. Key
Responsibilities: Cloud Infrastructure Security Design, implement, and manage secure cloud networking architectures including VPCs, subnets, peering, and transit gateways across GCP, AWS, or Azure Configure and maintain cloud-native firewall rules, security groups, network ACLs, and perimeter controls to enforce least-privilege traffic policies Implement and manage cloud security posture management (CSPM) tooling and continuously remediate misconfigurations across cloud environments Design and operate network segmentation and micro-segmentation strategies aligned with zero trust architecture principles Manage and harden cloud IAM, including role definitions, service account policies, privileged access controls, and just-in-time access Firewall & Network Security Manage next-generation firewall (NGFW) platforms, including policy development, rule lifecycle management, and traffic inspection configurations Implement and maintain IDS/IPS, DNS security, and network monitoring solutions to detect and respond to threats Design and enforce network access control (NAC) policies and segmentation for both cloud and on-premises environments Conduct regular firewall rule reviews and access path analysis to identify and remediate overly permissive configurations PKI & Identity Management Design, implement, and operate PKI infrastructure including certificate authorities, certificate lifecycle management, and trust store management Manage certificates for device identity, mutual TLS (mTLS), VPN authentication, and code signing in compliance with federal
