At Bright Ascension, we're building the software that powers the next generation of space missions. Our flagship platform, HELIX®, enables organisations to develop, deploy, and operate complex space systems faster, more efficiently, and with greater confidence.
As we continue to grow across commercial, government, defence, and national security sectors, we're looking for an exceptional Security Architect to help define how security is designed, implemented, and governed across our technology ecosystem.
This is a unique opportunity to influence the security architecture of a cutting-edge software platform that supports mission-critical systems deployed in some of the world's most demanding environments.
The Opportunity
Reporting directly to the Chief Architect, you will take ownership of the security and deployment architecture underpinning HELIX®, ensuring security is embedded by design across our model-based, component-based, and service-oriented architecture.
You will play a strategic role in defining how HELIX is securely deployed across cloud, hybrid, on-premise, and mission-critical environments, while providing technical leadership to engineering teams and supporting customers operating in highly regulated sectors, including Defence and National Security.
If you are passionate about Zero Trust Architecture, cloud security, secure deployment patterns, and influencing technical strategy at scale, we'd love to hear from you.
What You'll Be Doing
Lead Security Architecture
* Define and evolve the security architecture for the HELIX® platform and associated development tools.
* Embed security-by-design principles including Zero Trust, least privilege, and defence-in-depth across all architectural layers.
* Ensure consistency and alignment of security architecture across current and future HELIX products.
* Drive architectural standards that enable secure, scalable, and resilient solutions.
Shape Secure Technology Strategy
* Evaluate and select security technologies, frameworks, and standards that support HELIX deployments.
* Define clear pathways from technology-independent architecture to real-world implementation.
* Ensure alignment with industry best practice and government security standards.
* Influence the long-term security roadmap for the platform.
Provide Technical Leadership
* Partner with Product Architects and Engineering teams to ensure secure implementation of architectural principles.
* Support security assurance, architecture reviews, and compliance activities.
* Guide teams on secure coding practices, cryptography, identity services, and system integration.
* Act as a trusted security expert across the organisation.
Define Secure Deployment Models
* Develop reference deployment architectures for cloud, hybrid, on-premise, and air-gapped environments.
* Ensure deployment approaches meet customer requirements while maintaining architectural integrity.
* Support teams in implementing secure, scalable, and resilient operational environments.
* Drive adoption of modern deployment technologies and practices.
Engage with Customers and Stakeholders
* Work closely with customers operating in regulated and high-assurance environments.
* Help articulate Bright Ascension's security strategy and deployment approach.
* Support customer engagements, solution discussions, and technical presentations.
* Contribute to customer confidence in HELIX's security and resilience.
What We're Looking For
Essential Experience
You will bring strong experience designing and implementing security architectures for distributed and cloud-based systems, together with a deep understanding of modern security principles and practices.
We would particularly like to hear from candidates with experience in:
* Zero Trust Architecture and secure-by-design principles
* Cloud security across AWS, Azure, or similar platforms
* Identity and Access Management (IAM), authentication, federation, OAuth 2.0, OpenID Connect, and SAML
* Cryptography, PKI, TLS, key management, and Hardware Security Modules (HSMs)
* Network security, segmentation, service mesh technologies, and secure communications
* Containerisation and orchestration technologies such as Docker and Kubernetes
* Infrastructure-as-Code and automated deployment approaches
* Security frameworks including NIST Cybersecurity Framework, NIST 800-53, ISO 27001, NCSC Cloud Security Principles, and NIST SP 800-207
You'll also be comfortable defining technology-independent architectures and translating them into practical, implementable solutions.
Personal Qualities
We're looking for someone who can combine strategic thinking with technical depth.
You will be:
* A strong systems thinker who can operate at both architectural and implementation levels
* An excellent communicator who can explain complex concepts clearly
* A collaborative team player who enjoys working across disciplines
* Comfortable influencing technical decisions and driving change
* Analytical, detail-oriented, and highly effective at solving complex problems
* Passionate about building secure, resilient, and scalable systems
Desirable Experience
Experience in any of the following areas would be advantageous:
* Defence, National Security, or other highly regulated sectors
* DevSecOps and Secure by Design methodologies
* Cross-domain solutions and multi-classification environments
* Service mesh technologies such as Istio or Linkerd
* UK Government security requirements (OFFICIAL and SECRET)
* US DoD Zero Trust Strategy
* FedRAMP or IL-level environments
* Mission-critical or high-assurance systems
* Accreditation and compliance programmes
* Model-Based Systems Engineering (MBSE)
Why Join Bright Ascension?
At Bright Ascension, you'll have the opportunity to work on technology that directly supports the future of space exploration, satellite operations, and mission-critical systems around the world.
You'll join a collaborative, innovative team where your expertise will have genuine impact, helping shape the architecture of products used in some of the most challenging and exciting technical environments.
We offer:
* The opportunity to influence the future direction of a market-leading space software platform
* Exposure to cutting-edge cloud, security, and distributed systems technologies
* A highly collaborative engineering culture
* The chance to work with customers across commercial, government, defence, and international markets
* Professional growth in a rapidly expanding company at the forefront of the space industry
Additional Information
* Occasional travel may be required to support customers, partners, and internal teams.
* Eligibility for UK and/or US Security Clearance may be required depending on project involvement.
* A strong alignment with Bright Ascension's values, culture, and engineering excellence is essential.
If you're excited by the challenge of securing the next generation of space software and want to play a key role in shaping the future of HELIX®, we'd love to hear from you.