{"id":1200215,"url":"https://alion.io/job/blue-origin-sr-grc-engineer","title":"Sr. GRC Engineer","company":{"id":3698,"name":"Blue Origin","domain":"blueorigin.com","url":"https://alion.io/company/blueorigin","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":193,"ghost_share":0,"stale_share":0.767,"repost_share":0.005,"time_to_fill_p50_days":33,"computed_at":"2026-09-30T05:45:00Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Seattle, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":156802,"max":219522,"currency":"USD","period":"year","gross":null,"usd_annual":219522},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Bicep","optional":false},{"name":"CI/CD","optional":false},{"name":"Configuration Management","optional":false},{"name":"GitLab CI","optional":false},{"name":"JavaScript","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"TypeScript","optional":false},{"name":"Ansible","optional":true},{"name":"Azure","optional":true},{"name":"Chef","optional":true},{"name":"CIS Benchmarks","optional":true},{"name":"ISO 27001","optional":true},{"name":"NIST 800-53","optional":true},{"name":"PowerShell","optional":true},{"name":"Puppet","optional":true}],"status":"live","first_seen_at":"2026-09-24T20:26:58Z","employer_posted_date":"2026-09-24","last_verified_at":"2026-09-29T12:09:48Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Application close date:\nApplications will be accepted on an ongoing basis until the requisition is closed.At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We’re working to develop reusable, safe, and low-cost space vehicles and systems within a culture of safety, collaboration, and inclusion. Join our team of problem solvers as we add new chapters to the history of spaceflight!\nThis role is part of Enterprise Technology (ET), where we’re developing the digital infrastructure needed to build the road to space, with an emphasis on digital capabilities required to advance Blue Origin’s mission. Enterprise Technology is the center of excellence for digital technology at Blue Origin, providing oversight and governance to align technology and business strategies.The Blue Origin Cybersecurity GRC team is reducing the cost of security compliance through automation and engineering. This is primarily an engineering role: you will design, build, and operate the automation that makes compliance measurable, repeatable, and efficient, applying software and infrastructure engineering practices to the governance, risk, and compliance domains. It is well suited to software, SRE, platform, or DevOps engineers seeking to apply their automation expertise to security operations. Passion for our mission and vision is required!\nResponsibilities include but are not limited to:\nAutomating the collection of compliance artifacts and evidence across multiple cloud, SaaS, and internal platforms by integrating their APIs and normalizing the data. \nBuilding and operating CI/CD pipelines and Compliance-as-Code so compliance content is version-controlled, tested, and validated automatically. \nAutomating configuration management and configuration monitoring - continuously validating system and platform configurations against approved baselines, detecting drift, and capturing results as evidence. \nSupporting continuous monitoring by integrating and correlating security telemetry and findings from partner-team platforms (including vulnerability management and SIEM/observability) into control-status reporting. \nBuilding GRC dashboards that integrate observability solutions to enable data-driven decisions. \nDeveloping outcome-driven metrics and KPIs to measure control effectiveness. \nIdentifying manually intensive processes and engineering them away. \nSupporting risk assessments and maintaining policies aligned with security frameworks. \nMinimum Qualifications\n7+ years building and operating production software or infrastructure automation (software, SRE, DevOps, platform, or security engineering). \nProficiency in a general-purpose programming language (Python strongly preferred; Go, JavaScript/TypeScript, or similar welcome), with maintainable, tested, version-controlled code. \nExperience integrating disparate systems via REST APIs and automating data/evidence collection across multiple cloud and SaaS platforms. \nHands-on experience with CI/CD pipelines (e.g., GitLab CI) and infrastructure-as-code (Terraform, Bicep, or similar). \nExperience with configuration management and configuration monitoring - config-as-code and continuous validation of system state against baselines, including drift detection. \nAbility to translate ambiguous, multi-stakeholder requirements into reliable automation. \nAptitude and appetite to learn security compliance frameworks (NIST, ISO, CMMC); extensive prior GRC experience is not required. \nBachelor's degree or certification in a technical field, or equivalent experience. \nPreferred Qualifications\nFamiliarity with GRC/compliance frameworks: NIST 800-53/800-171, ISO 27001, ISO 28000, SOC, CMMC, and privacy frameworks. \nCompliance-as-Code / OSCAL / policy-as-code (OPA/Rego, InSpec) experience. \nConfiguration compliance and desired-state tooling (SCAP, CIS Benchmarks, Ansible, Salt, Chef/Puppet, or PowerShell DSC). \nContinuous vulnerability monitoring - automating collection and correlation of findings from vulnerability management platforms (enterprise scanning is owned by a partner team). \nSIEM / observability integration. \nAI security experience. \nAerospace, manufacturing, or OT/safety-critical environment experience. \nBase Pay Range for:\nWA applicants is $156,802.00 - $219,522.45Other site ranges may differ\nCulture Statement\nDon’t meet all desired requirements? Studies have shown that some people are less likely to apply to jobs unless they meet every single desired qualification. At Blue Origin, we are dedicated to building an authentic workplace, so if you’re excited about this role but your past experience doesn’t align perfectly with every desired qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles.\nExport Control Regulations\nApplicants for employment at Blue Origin must be a U.S. citizen or national, U.S. permanent resident (i.e. current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.\nBackground Check\nRequired for all positions: Blue’s Standard Background Check\nRequired for Certain Job Profiles: Defense Biometric Identification System (DBIDS) background check if at any time the role requires one to be on a military installation\nRequired for Certain Job Profiles: Drivers who operate Commercial Motor Vehicles with a Gross Vehicle Weight (GVW), Gross Vehicle Weight Rating (GVWR) or combination of power unit and trailer that meets or exceeds 10,001 lbs. and/or transports placardable amounts of hazardous materials by ground in any vehicle on a public road while in commerce, may be subject to additional Federal Motor Carrier Safety Regulations including: Driver Qualification Files, Medical Certification (obtained before onboarding), Road Test, Hours of Service, Drug and Alcohol Testing, vehicle inspection requirements, CDL requirements (if applicable) and hazardous materials transportation/shipping training.\nRequired for certain Job Profiles: Ability to obtain and maintain Merchant Mariner Credential, which includes pre-employment and random drug testing as well as DOT physical\nBenefits\nBenefits include: Medical, dental, vision, basic and supplemental life insurance, paid parental leave, short and long-term disability, 401(k) with a company match of up to 5%, and an Education Support Program.\nStock Options for all regular employees (working at least 20 hours/week)\nPaid Time Off: Up to four (4) weeks per year based on weekly scheduled hours, and up to 14 company-paid holidays.\nDependent on role type and job level, employees may be eligible for benefits and bonuses based on the company's intent to reward individual contributions and enable them to share in the company's results, or other factors at the company's sole discretion. Bonus amounts and eligibility are not guaranteed and subject to change and cancellation. Please check with your recruiter for more details. \nEqual Employment Opportunity\nBlue Origin is proud to be an Equal Opportunity/Affirmative Action Employer and is committed to attracting, retaining, and developing a highly qualified and dedicated work force. Blue Origin hires and promotes people on the basis of their qualifications, performance, and abilities. We support the establishment and maintenance of a workplace that fosters trust, equality, and teamwork. We provide all qualified applicants for employment and employees with equal opportunities for hire, promotion, and other terms and conditions of employment, regardless of their race, color, religion, sex, sexual orientation, gender identity, national origin/ethnicity, age, physical or mental disability, genetic factors, military/veteran status, or any other status or characteristic protected by federal, state, and/or local law. Blue Origin will consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state, and local laws, including the Washington Fair Chance Act, the California Fair Chance Act, the Los Angeles Fair Chance in Hiring Ordinance, and other applicable laws. For more information on “Know Your Rights,” please see here.\nAffirmative Action and Disability Accommodation\nApplicants wishing to receive information on Blue Origin’s Affirmative Action Plans, or applicants requiring a reasonable accommodation in order to participate in the application and/or interview process, please contact us at . Please note this is a publicly managed inbox. Please do not include any personal medical information in your request.","description_format":"text","description_chars":8593,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Life insurance","Parental leave","Stock options"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Space & Aerospace","Satellite Manufacturing","Ground Systems","Space Services"],"lifecycle":[{"event":"open","at":"2026-09-24T20:26:58Z"}],"liveness":{"score":62,"band":"ok","label":"Likely open","p_open":1,"p_active":0.616,"p_room":1,"age_days":5,"expected_fill_days":33,"reasons":["conf:17","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-09-30T05:45:00Z"},"pay":{"stated_usd_annual":219522,"is_top_pay":true},"html_url":"https://alion.io/job/blue-origin-sr-grc-engineer","json_url":"https://alion.io/job/blue-origin-sr-grc-engineer.json","meta":{"generated_at":"2026-10-01T02:59:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":2387,"day_limit":5000,"remaining_today":2613,"minute_limit":60,"resets_at":"2026-10-02T00:00:00Z"}}}