{"id":3928606,"url":"https://alion.io/job/nominal-classified-security-architect","title":"Classified Security Architect","company":{"id":63575,"name":"Nominal","domain":"nominal.io","url":"https://alion.io/company/nominal","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Gem","truth_index":{"grade":"A","score":87,"open_postings":23,"ghost_share":0,"stale_share":0.522,"repost_share":0,"time_to_fill_p50_days":57,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":208000,"max":255000,"currency":"USD","period":"year","gross":null,"usd_annual":255000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"NIST 800-53","optional":false}],"status":"live","first_seen_at":"2026-11-06T04:39:03Z","employer_posted_date":"2026-11-07","last_verified_at":"2026-11-08T02:40:23Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"About Nominal\nEngineers today are building some of the most ambitious machines humanity has ever seen. They should have AI that’s purpose-built for them.\nNominal is building the Hardware Intelligence Platform that gives engineers increased visibility into complex physical systems, helps them make better decisions, and ultimately gets their products into the real world faster. It brings together the systems, data, intelligence, and applications hardware engineering requires to meet the AI moment. Hardware engineering teams use Nominal to simulate, test, manufacture, and operate the physical systems that keep the world moving, from spacecraft and autonomous vehicles to next-generation energy systems and robotics.\nOur customers span aerospace, defense, manufacturing, transportation, energy, and robotics. They include Anduril, Shield AI, Wisk Aero, Pratt Miller Motorsports, Antares, and Shinkei Systems, amongst others, alongside programs within the U.S. Air Force and Navy. Our team draws from SpaceX, Palantir, Anduril, Applied Intuition, Tesla, and other leading companies, united by a common mission: giving hardware engineers the tools to build the future with speed, safety, and confidence. We're a fast-moving team that owns problems end-to-end, works across disciplines, and thrives at the intersection of hardware and software.\nSome of the world’s leading technology investors, including Sequoia, Lightspeed, Founders Fund, General Catalyst, Lux Capital, and Insight Partners, are backing Nominal’s ambition to change how machines are built and operated. We’re looking for engineers who want to take on hard problems and help make a new generation of world-changing hardware possible.\nAbout the role\nThe Classified Security Architect leads security architecture and technical authorization readiness for Nominal’s classified deployments, with particular emphasis on Special Access Program (SAP) environments. You’ll translate customer security requirements into deployable architectures, engineering controls, and the technical evidence needed to obtain and maintain authorizations.\nYou’ll work directly with government security stakeholders and partner with Engineering, Platform Security, DevSecOps, and Deployability to resolve technical security challenges, establish repeatable deployment patterns, and speed delivery into highly restricted environments. Engineering owns technical implementation. This role owns classified security architecture requirements, technical design guidance, and coordination of technical authorization deliverables, and it calls for hands-on classified deployment expertise, not only accreditation process experience.\nWhat you’ll do:\nDefine security architectures and technical requirements for classified deployments, including SAP environments and other highly restricted customer environments.\nTranslate customer security requirements, NIST 800-53 controls, applicable CNSSI overlays, STIGs, and program-specific constraints into actionable engineering requirements and implementation plans.\nPartner with engineering teams to design and validate security controls across infrastructure, network boundaries, identity and access management, data flows, software delivery, logging, and system monitoring.\nLead resolution of technical security challenges that could impede classified deployments, working directly with customer security stakeholders and internal engineering teams.\nDrive technical authorization readiness, including System Security Plan (SSP) content, architecture diagrams, control narratives, supporting evidence, and other artifacts required for ATO packages.\nCoordinate with customer ISSMs, assessors, and authorizing stakeholders to validate proposed architectures, resolve security findings, and support authorization decisions.\nDevelop and maintain Plans of Action and Milestones (POA&Ms), partnering with engineering on remediation planning and technical resolution.\nEstablish reusable security architectures, controls, documentation, and deployment patterns across classified customer programs.\nMaintain security architecture and authorization readiness as software, infrastructure, and customer requirements evolve.\nIdentify security architecture constraints early in customer engagements and inform technical feasibility, deployment planning, and program timelines.\nWe’re looking for someone with\nDemonstrated experience designing, deploying, or securing systems in classified environments, including SAP or similarly restricted environments.\nHands-on technical experience with infrastructure and platform security, including Linux, network segmentation, identity and access management, and secure software delivery.\nExperience translating classified security requirements into technical architecture and engineering implementation plans.\nExperience applying NIST 800-53, applicable CNSSI overlays, STIGs, and customer-specific security requirements.\nExperience supporting authorization of classified systems, including technical contributions to SSPs, control narratives, assessment evidence, and remediation activities.\nExperience working directly with government ISSMs, security assessors, and other security stakeholders to resolve technical and authorization challenges.\nAbility to independently evaluate security architecture tradeoffs and guide engineering teams toward compliant, technically viable solutions.\nThis position requires you to currently possess and be able to maintain a U.S. TS/SCI security clearance, in order to meet U.S. regulatory eligibility requirements for the access to classified information associated with this role.\nSkills that supercharge us\nDirect experience with SAP deployment architectures, program-specific security requirements, and authorization processes.\nExperience obtaining and maintaining ATOs across multiple classified programs or customer environments.\nExperience with Kubernetes, containerized infrastructure, and modern DevSecOps practices in restricted or disconnected environments.\nGovernment-side accreditation, security engineering, or assessment experience.\nExperience establishing reusable security architectures and control implementations across multiple deployments.\nRelevant security certifications, such as CISSP, GIAC, or equivalent technical credentials.\nBenefits/Perks\n 100% coverage of medical, dental, and vision insurance\n Unlimited PTO and sick leave\n Free lunch, snacks, and coffee\n Professional Development Stipend\n In-office hardware lab with a $250 project stipend\n Annual company retreat\n 12 weeks parental leave\n Fertility and family planning ($15,000 lifetime)\n Wellness stipend ($100/month)\n $500/year hardware sensor stipend\n 401(k)\n Employee-friendly equity terms\n In-office 5 days per week\nAll qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.\nITAR Requirements\nTo conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.\nCompensation\nThe base pay range for this role is $208,000 - $255,000 per year.","description_format":"text","description_chars":7373,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity","Parental leave","Professional development","Unlimited PTO","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Manufacturing & Industrial Software"],"lifecycle":[{"event":"open","at":"2026-11-07T22:26:24Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":57,"reasons":["conf:0","win:early"],"computed_at":"2026-11-08T02:59:11Z"},"pay":{"stated_usd_annual":255000,"is_top_pay":true},"html_url":"https://alion.io/job/nominal-classified-security-architect","json_url":"https://alion.io/job/nominal-classified-security-architect.json","meta":{"generated_at":"2026-11-08T02:59:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6379,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":63575},"rest":"https://alion.io/mcp/rest/get_company?id=63575"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnominal-classified-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnominal-classified-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnominal-classified-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nominal-classified-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnominal-classified-security-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3928606}},{"tool":"search_jobs","arguments":{"company":"nominal.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3928606},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}