SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 106,529 - 114,555 / annual
Albedo builds and operates satellites in Very Low Earth Orbit (VLEO), enabling missions below 300 km where proximity compounds performance. As IT & Security Engineer, you will own a broad infrastructure and security surface alongside the IT and security lead, including identity, endpoints, cloud infrastructure, network, detection and response, and compliance obligations.
You will be measured by how much faster the rest of the company moves because of what you build. This role requires breadth—you will move between unrelated domains in the same day or hour, switching context without losing the thread. A defining feature is building internal tooling and automation that lets a small team cover a surface that would otherwise require a large one.
Key responsibilities include:
- Own systems the company runs on: identity, endpoints, cloud infrastructure, network, detection and response, and compliance controls
- Build internal tooling and automation as a first-class part of the job
- Own infrastructure as code in Terraform across AWS
- Run identity in Entra ID: authentication, conditional access, SSO and SCIM integrations, group and role design, and privileged access
- Manage endpoints in Intune: enrollment, configuration and compliance baselines, and update rings across the fleet
- Operate Microsoft Sentinel and Defender XDR: detection tuning, hunting queries, and incident triage
- Drive CMMC Level 2, NIST 800-171 (R2 and R3), and ITAR programs with controls implemented as code
- Triage and remediate vulnerabilities across infrastructure and application code
- Own the Linux estate: provisioning, hardening, patching, and configuration management
- Own the network: DNS, routing, remote access, and on-prem to cloud boundary
- Maintain the logging pipeline for detections and audit evidence
- Respond to incidents, write postmortems, and fix underlying classes of problems
- Decide what to work on—find the highest-leverage thing and justify it
Albedo operates with a first-principles approach, moving with speed and calculated risk-taking. The company uses AI regularly to create leverage across disciplines and works in-person at Broomfield HQ to maximize team productivity.
REQUIREMENTS:
- Six-plus years across IT operations, infrastructure, or security engineering, with at least two years owning production systems and being accountable when they broke
- Track record of closing loops in unfamiliar domains, taking problems to finished working solutions without decomposition
- Regular use of AI tools as essential leverage to accelerate work and multiply output, with verification before shipping
- Depth in agentic engineering: agents that take real action against production systems, with access control, observability, and evaluation needed to trust them
- Infrastructure as code as default practice
- Production code ownership in Python, TypeScript, Go, or similar at the level of services or CLIs that others depend on
- Experience building tools for other people with focus on adoption
- Judgment about blast radius and change reversibility
- Linux as a managed platform for real users: keeping engineering workstations or lab machines patched, compliant, and supportable
- Identity fluency in Entra ID or equivalent, deep enough to design an access model
- Real ownership of something security-relevant: detection, incident, identity model, or access boundary
- Vulnerability management experience across infrastructure and application findings
- On-prem network architecture design and implementation
- Must be on-site in Broomfield, CO
- Must be a U.S. Person as defined under 22 CFR 120.62
NICE TO HAVE:
- Microsoft 365 and Entra ID in GCCH
- Cybersecurity background: SIEM and EDR operations, detection engineering, threat hunting, or incident response
- Exposure to CMMC Level 2, NIST 800-171, or ITAR (frameworks will be taught; technical mechanism knowledge is learned on the job)
- Intune at fleet scale across macOS, Windows, and Linux
- Early membership on small infrastructure or security teams where you decided your own scope
