--- title: 'Lead Security Architect – Cloud Platform & Network Security at Logos Space' canonical: 'https://feeny.ai/job/lead-security-architect-cloud-platform-network-security-logos-space-mountain-qag8r7dy3q5z' type: 'job' last_seen: '2026-09-09' --- # Lead Security Architect – Cloud Platform & Network Security at Logos Space - **Company:** Logos Space - **Location:** Mountain View, CA / San Diego, CA - **Compensation:** $220k–$270k - **Employment:** full-time - **Work type:** onsite - **Posted:** 2026-08-27 - **Last confirmed live:** 2026-09-09 - **Apply:** https://jobs.ashbyhq.com/logos-space/34c5a3f5-a8b8-46e2-804c-dd3d0c9fe09e ## Job description Lead Security Architect – Cloud Platform & Network Security Logos Space is a Low Earth Orbit (LEO) satellite system purpose-built to serve the connectivity needs of the commercial enterprise users and government users. We will help fill an important gap in the market, providing resilient, high-performance satellite-based connectivity services to enterprise and government customers worldwide. Business customers have contracts with agreed-upon performance standards for their broadband, and Logos will build these capabilities into the system from the beginning. Speed and reliability are the foundation of the system. Logos is designed to extend cloud and data center network connectivity anywhere in the world to fixed, seaborne, and airborne terminals. Logos is led by a team of highly experienced engineers with proven track records in the networking and satellite industries. The Product and Data Link Security team at Logos Space Engineering is responsible for ensuring the success of our network by providing unique levels of security and authentication in space communications. This position is a critical driver of the architecture, overseeing development efforts specific to the security architecture, as well as working with other teams like ground segment and spacecraft systems. We are seeking engineers who can thrive in a fast-moving environment, comfortable taking vague design ideas and turning them into concrete, testable architecture and secure solutions. The Role: We are seeking an experienced Lead Security Architect – Cloud Platform & Network Security to spearhead the security architecture for our LEO satellite network infrastructure. While our DevSecOps team owns software supply chain security and CI/CD vulnerability scanning, this role owns the runtime threat resistance, zero-trust network topology, cryptographic key management, and distributed systems defense across our multi-region cloud, ground stations, and edge software nodes. Working closely with the Lead, Cloud Platform Software, you will define how our Kubernetes clusters, telemetry pipelines, and SDN control planes withstand real-world cyber threats in hostile or degraded operating environments. Key Responsibilities: Zero-Trust Workload Identity: Architect and implement identity frameworks (e.g., SPIFFE/SPIRE, mTLS, Service Mesh) to establish cryptographically verified identity for microservices operating across cloud, ground segment nodes, and hybrid edge hardware. SDN & Control Plane Hardening: Conduct threat modeling and design runtime security controls for our Software-Defined Networking (SDN) stack, protecting routing protocols, control messages, and telemetry streams from spoofing, tampering, and denial-of-service (DoS) attacks. Runtime Defense & Policy Enforcement: Deploy eBPF-based runtime monitoring (e.g., Tetragon, Falco, Cilium) and policy-as-code admission controllers (OPA/Gatekeeper) to detect and neutralize zero-day exploits, container breakouts, and unauthorized process executions in real time. Key Ceremonies & PKI Governance: Design, orchestrate, and execute formal cryptographic key ceremonies (multi-party key generation, root CA creation, and secret splitting) to establish trust anchors for root certificate authorities, satellite communication keys, and cloud/ground HSM clusters Hardware-Backed Key & Cryptographic Management: Oversee the architecture for root-of-trust, Hardware Security Modules (HSMs), TPMs, and Vault clusters managing satellite communications keys, TLS certificates, and secrets lifecycle. Security Telemetry & Anomaly Detection: Collaborate with the Platform team to embed security observability into high-throughput logging and telemetry pipelines (Kafka, Prometheus, SIEM/SOAR) for automated threat detection and incident response. Defense & Federal Compliance: Translate rigorous federal and defense cybersecurity mandates (e.g., NIST SP 800-53, CMMC Level 3+, FedRAMP High, DoD IL5/IL6) into technical security designs without compromising platform agility or speed. ## Basic Qualifications Education: Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or equivalent practical experience. Experience: 10+ years in cybersecurity, software engineering, or infrastructure security, with 5+ years architecting security for distributed cloud platform software. Technical Expertise: Deep understanding of Kubernetes architecture, container isolation, Linux kernel security, and eBPF technology. Hands-on experience with modern networking protocols, zero-trust architectures, service meshes (Istio/Cilium), and mTLS. Proficiency writing software or tooling in Go, Rust, or Python. Hands-on architectural experience with HSMs, TPMs, and enterprise secrets management (e.g., HashiCorp Vault). Clearance: Ability and willingness to obtain and maintain a Top Secret Clearance. ## Preferred Qualifications Experience securing carrier-grade telecom, aerospace, satellite ground stations, or critical defense network infrastructure. Demonstrated experience handling threat modeling (STRIDE/ATT&CK) for real-time distributed routing or control plane systems. Deep knowledge of public cloud security guardrails across AWS, GCP, or Azure alongside hybrid/on-prem deployments. ## About Logos Space ## Company Overview - **One-liner**: Logos Space is building a low Earth orbit (LEO) satellite constellation to deliver a secure, resilient, high-performance private network for government and enterprise customers. - **Entity Type**: Private (Series A) - **Headquarters**: Mountain View, California, USA (with additional office in Redwood City, CA) - **Founded**: 2024 - **Founders**: Milo Medin (former Google VP of access services and NASA project manager) ## Core Business - **Primary industries**: Satellite communications, aerospace & defense, telecommunications - **Target customers**: Government agencies (defense, intelligence, civil) and large enterprises requiring secure, guaranteed connectivity – distinct from consumer-focused satellite broadband. - **Mission / purpose**: Deliver a next-generation private network that is purpose-built for contested communications environments, offering security, resilience, and fiber-like performance where fiber doesn’t go. ## Products & Services - **Logos LEO Constellation**: A planned network of up to 4,178 satellites operating in Q, V, Ka and E frequency bands (FCC licensed). Capabilities include symmetric multi-gigabit throughput, Layer 2 MPLS networking, end-to-end encryption, and electronic warfare (EW) resilience. Designed as a dual-use system (civilian and military) with hardened satellites and a mesh architecture to maintain service during disruption. ## Market Standing - **Valuation/Total Funding**: USD $50 million (Series A led by US Innovative Technology Fund, announced June 2025). Total funding to date is $50M, with USIT as the sole investor. - **Key Metric**: 22–38 employees (rapidly growing; headcount up 416% year-over-year); 59 active job postings as of mid-2026. - **Notable Investors / Partners**: US Innovative Technology Fund (chaired by serial entrepreneur Thomas Tull). Key hires from SpaceX, NASA, Airbus, OneWeb, and Apollo Fusion. - **Growth Signals**: FCC grant for satellite spectrum license (Feb 2026) authorizing up to 4,178 satellites; emerged from stealth in Oct 2024; aiming for first operational satellite in late 2027; aggressive hiring across engineering, RF, software, and business development. ## Competitive Advantages - **Dual-use focus**: Purpose-built for government and enterprise, not consumer – enabling higher security, guaranteed service, and resilience requirements. - **EW-resilient design**: Architecture minimizes signal disruption and resists jamming through high-elevation angles, tightly focused beams, and hardened satellites. - **Unique spectrum portfolio**: FCC-approved use of Q, V, Ka and E bands – high-frequency bands that are less congested and offer higher bandwidth. - **Fiber-like performance at scale**: Symmetric multi-Gbps throughput with Layer 2 MPLS and end-to-end encryption, filling a gap underserved by existing LEO providers. - **Experienced leadership**: Founder Milo Medin (Google access services, NASA) and a deeply experienced technical team from top aerospace and satellite organizations. ## Strategic Focus - Complete critical design decisions, select partners, and build prototypes. - Scale engineering team from ~30 to 70+ employees through 2026. - Deploy first operational satellite by late 2027 and begin constellation build-out. - Continue engaging with U.S. regulators and potential government/enterprise customers. ## Why Work Here - **Mission-driven**: Work on a “next-generation” communications infrastructure that addresses real national security and enterprise resilience needs. - **Culture & values**: No silos, no politics; treat people with respect; debate, decide, commit; continuous learning; customer focus. Operating principles explicitly discourage unprofessional behavior. - **Growth opportunity**: Start-up stage with significant funding, clear milestone, and aggressive hiring – opportunity to shape technology and team. - **Work policy**: In-office (typically 5 days a week) at Mountain View or Redwood City, CA locations. - **Teams**: Engineering, product, operations, and business development roles heavily represented; emphasis on space, RF, embedded software, and network engineering. ## Sources 1. [logosspace.com](https://logosspace.com/) 2. [logosspace.com/careers](https://logosspace.com/careers/) 3. [builtin.com](https://builtin.com/company/logos-space) 4. [linkedin.com/company/logosspace](https://www.linkedin.com/company/logosspace) 5. [spacenews.com](https://spacenews.com/logos-nets-50-million-to-advance-plans-for-more-than-4000-broadband-satellites/) ## Other roles at Logos Space - [Senior Control Plane Software Engineer](https://feeny.ai/job/senior-control-plane-software-engineer-logos-space-mountain-view-qnzb1c8araxm) — Mountain View, CA - [Lead, Satellite Optical Payload Engineering](https://feeny.ai/job/lead-satellite-optical-payload-engineering-logos-space-mountain-view-svm1ntn0nkp6) — Mountain View, CA / San Diego, CA - [Security Assurance Lead](https://feeny.ai/job/security-assurance-lead-logos-space-mountain-view-akhxk4y5y6nr) — Mountain View, CA / San Diego, CA - [Lead Security Engineering - Terminals](https://feeny.ai/job/lead-security-engineering-terminals-logos-space-mountain-view-1fyd97p8s99j) — Mountain View, CA / San Diego, CA - [Lead Product Security Engineer – Supply Chain & Hardware](https://feeny.ai/job/lead-product-security-engineer-supply-chain-hardware-logos-space-mountain-view-xn7x7a8vf8qc) — Mountain View, CA / San Diego, CA - [Senior FPGA/ASIC Modem Engineer](https://feeny.ai/job/senior-fpga-asic-modem-engineer-logos-space-mountain-view-31eexrcq4b2a) — Mountain View, CA - [Lead, Financial Planning & Analysis](https://feeny.ai/job/lead-financial-planning-analysis-logos-space-mountain-view-1ecf7pcs0n7r) — Mountain View, CA - [Legal Counsel](https://feeny.ai/job/legal-counsel-logos-space-mountain-view-f01zmwega5e7) — Mountain View, CA / San Diego, CA - [Lead Phased Array Antenna Engineer](https://feeny.ai/job/lead-phased-array-antenna-engineer-logos-space-mountain-view-y0tqkn8es94v) — Mountain View, CA / San Diego, CA - [Lead RF Engineer, Reflector Antenna](https://feeny.ai/job/lead-rf-engineer-reflector-antenna-logos-space-san-diego-b662y3h01d3g) — San Diego, CA