{"id":3206726,"url":"https://alion.io/job/pillar-space-systems-founding-lead-it-engineer-2","title":"Founding Lead IT Engineer","company":{"id":4398852,"name":"Pillar Space Systems","domain":"pillarspace.com","url":"https://alion.io/company/pillar-space-systems","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":75,"open_postings":4,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Backend","role_family":"Backend","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Los Angeles, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":185000,"max":275000,"currency":"USD","period":"year","gross":null,"usd_annual":275000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"CMMC","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"FedRAMP","optional":false},{"name":"Git","optional":false},{"name":"HPC","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-12T21:56:31Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-29T15:18:11Z","board_verified":true,"closed_at":null,"days_open":16,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":16},"description":"Founding Lead IT Engineer\nEquity: 0.3% - 1% depending on experience\nAbout Us\nWe're a stealth team building space hardware at the edge of what's currently possible - high-stakes, flight-grade systems where the engineering bar is unforgiving and the upside is enormous. While we can't share full details yet, our founding and early engineering team includes talent from SpaceX, Northrop Grumman, and Impulse Space, the group includes people who've pulled off feats almost no one else on Earth has.\nRole Overview\nWe are seeking a Lead IT Engineer to own our IT and security infrastructure from first principles - the identities, devices, networks, and cloud systems our engineers rely on every day, built to protect export-controlled and defense data and to meet CMMC 2.0 Level 2 requirements.\nThis is a senior technical leadership role. You will not only define and execute the IT and security architecture, but also help build the IT and security function, set technical standards, mentor engineers, and establish the systems, processes, and culture required to run a secure, compliant aerospace company.\nThis is not a narrow help-desk role. You will own the full stack: identity and access, endpoints, networks, cloud tenants and SaaS, the engineering environment (CAD/PLM, simulation compute, source control, lab and test networks), and the security program and evidence that prove it all meets NIST SP 800-171, DFARS, CMMC, and ITAR requirements. You will partner closely with engineering, operations, and leadership on how controlled technical data flows through the company, and make tradeoffs across security, usability, cost, and speed.\nThe ideal candidate has direct experience building IT and security programs for defense or aerospace companies, implementing NIST SP 800-171, administering secure cloud environments, and leading technical teams. We recognize that very few people have all of this. What matters most is that you have exceptional fundamentals, have built real IT environments from the ground up, have managed or mentored engineers in high-performance technical environments, and can operate independently in ambiguity while making sound engineering tradeoffs. You will have direct ownership over one of the company's core technical challenges.\nKey Responsibilities\nOwn the IT and security architecture, from initial build-out through compliance readiness, assessment, and continuous monitoring as the company scales.\n\nLead the CMMC 2.0 Level 2 program: scoping, gap assessment against the 110 requirements of NIST SP 800-171, the System Security Plan, POA&Ms, the SPRS score and annual affirmations, and readiness for a C3PAO or DIBCAC assessment whenever customers or contracts require one.\n\nDefine the CUI and export-controlled data boundary: data flow mapping, enclave versus whole-enterprise scoping, and asset inventory and categorization.\n\nArchitect and operate a compliant cloud environment (e.g., Microsoft 365 GCC High and Azure Government, or FedRAMP Moderate-equivalent services) for email, files, collaboration, and engineering data.\n\nMeet DFARS cybersecurity obligations (e.g., 252.204-7012, -7019, -7020, -7021): safeguarding covered defense information, 72-hour cyber incident reporting, media preservation, and flowdown to subcontractors.\n\nOwn identity and access management: SSO, phishing-resistant MFA, least privilege, privileged access, joiner-mover-leaver processes, and U.S.-person access controls for ITAR technical data.\n\nOwn endpoint management and hardening across Windows, macOS, and Linux: MDM, secure baselines (e.g., CIS, DISA STIGs), patching, EDR, and FIPS-validated encryption.\n\nDesign and run corporate, lab, and manufacturing networks: segmentation, firewalls, zero-trust remote access, wireless, and isolation for test equipment, flatsats, and operational technology.\n\nBuild security operations: centralized logging and SIEM, audit log review, vulnerability management, monitoring and alerting, and an incident response plan that is exercised, not just written.\n\nSupport the engineering toolchain in compliant configurations: CAD/PLM, simulation and HPC compute, source control and CI infrastructure, and license servers.\n\nPartner with ground software and mission operations to secure ground systems and the mission operations center.\n\nManage IT vendor and supply chain risk: evaluate SaaS, MSP, and MSSP providers, verify FedRAMP equivalency and shared responsibility, and track subcontractor cybersecurity compliance with supply chain.\n\nPartner with operations on physical security controls: badge access, visitor management, camera systems, and protection of controlled areas.\n\nPartner with legal and export compliance on the technology control plan, ITAR and EAR technical data handling, and foreign person access.\n\nOwn security awareness, CUI handling, and insider threat training for every employee.\n\nOwn backups, disaster recovery, and business continuity for critical engineering and operations systems.\n\nRun day-to-day IT support, onboarding, and offboarding while building the automation and self-service that let it scale.\n\nProvide technical leadership across IT, security engineering, and compliance efforts.\n\nHelp hire, manage, mentor, and develop IT and security engineers as the team grows, and manage outside providers where they make sense.\n\nEstablish IT and security policies and procedures - access control, configuration and change management, incident response, media protection - and the records required to demonstrate compliance.\n\nHelp define the IT and security roadmap, budget, and tooling for the company's growth.\n\nWork closely with engineering, manufacturing, supply chain, test, mission operations, finance, HR, and legal to deliver secure systems that keep the company moving fast.\n\nWork closely with the founders and early team to shape the technical roadmap, engineering culture, hiring plan, and long-term IT and security strategy.\n\nRepresent the IT and security function in customer and prime contractor security reviews, government assessments, investor diligence, and vendor discussions as needed.\n\nBasic Qualifications\nBachelor's degree in Computer Science, Information Technology, Information Security, Computer Engineering, or a related discipline, or equivalent practical experience.\n\n8+ years in IT infrastructure, systems administration, or security engineering, including 3+ years in defense, aerospace, or other regulated environments handling CUI or export-controlled data.\n\nPrior experience leading technical workstreams, managing engineers, mentoring junior and mid-level engineers, or building high-performing teams.\n\nHands-on experience implementing NIST SP 800-171 controls and preparing for CMMC or DIBCAC assessments, including writing System Security Plans and POA&Ms.\n\nWorking knowledge of DFARS cybersecurity clauses and of ITAR and EAR requirements for handling technical data.\n\nDeep experience administering Microsoft 365 and Entra ID (ideally GCC High) or comparable enterprise identity and cloud platforms.\n\nExperience with endpoint management and security across Windows, macOS, and Linux (e.g., Intune, Jamf, EDR platforms).\n\nStrong networking fundamentals: routing, switching, firewalls, VPN, VLANs and segmentation, DNS, DHCP, and wireless.\n\nExperience with security operations: logging and SIEM, vulnerability management, and incident response.\n\nScripting and automation skills (e.g., PowerShell, Python, Bash), and infrastructure-as-code where it fits.\n\nExperience writing clear policies, procedures, and evidence that hold up to assessors and auditors.\n\nAbility to work independently with limited direction, identify the right next problem to solve, and drive technical work from ambiguity to a working, compliant system.\n\nAbility to make practical tradeoffs across security, compliance, usability, cost, and speed.\n\nAbility to lead through influence, getting engineers to adopt secure practices without slowing them down.\n\nHighly Valuable Experience\nWe do not expect every candidate to have all of the following. The strongest candidates will likely have depth in some areas and the ability to quickly learn the others.\nExperience leading an organization through a successful CMMC Level 2 C3PAO assessment or a DIBCAC High assessment.\n\nCertifications such as CMMC Certified Professional or Certified Assessor (CCP/CCA), CISSP, CISM, Security+, or Microsoft security and Azure certifications.\n\nExperience building IT from zero at a startup, including choosing between in-house, MSP, and MSSP models.\n\nExperience deploying or migrating to Microsoft 365 GCC High and Azure Government.\n\nExperience designing CUI enclaves (e.g., virtual desktop enclaves) and weighing them against whole-enterprise scoping.\n\nExperience supporting engineering environments: CAD/PLM, simulation and HPC, Git and CI, and secure collaboration with suppliers and customers on technical data.\n\nExperience with FIPS 140-validated cryptography, PKI, and secure file transfer for export-controlled data.\n\nExperience securing lab, manufacturing, and OT networks, including test equipment that can't be patched like normal endpoints.\n\nExperience with ground station or mission operations center networks, or with space system cybersecurity guidance (e.g., NIST IR 8401, CNSSP 12).\n\nExperience with NISPOM (32 CFR Part 117), facility clearances, and DCSA authorization of classified information systems.\n\nExperience with NIST SP 800-171 Rev 3, NIST SP 800-172 (CMMC Level 3), and FedRAMP.\n\nExperience with zero trust architecture, FIDO2 phishing-resistant MFA, conditional access, and data loss prevention.\n\nExperience with insider threat programs and security for a workforce of U.S. persons and foreign persons.\n\nExperience responding to customer and prime contractor security questionnaires and supporting government-led assessments.\n\nExperience in early-stage startups, small high-performing teams, or environments where engineers must own broad technical scope.\n\nExperience recruiting, interviewing, closing, and onboarding exceptional technical talent.\n\nWho You Are\nYou are an exceptional IT and security engineer with strong fundamentals and the ability to reason from first principles.\n\nYou are a technical leader who raises the bar for the people around you.\n\nYou have managed, mentored, or led engineers before and know how to create clarity, accountability, and momentum in ambiguous environments.\n\nYou are comfortable owning large, ambiguous, mission-critical problems without waiting for detailed direction.\n\nYou can move fluidly between architecture, hands-on administration, policy, assessments, team leadership, and practical tradeoffs.\n\nYou treat compliance as the floor, not the goal: you build security that actually protects the company, and that engineers are glad to use.\n\nYou are not just interested in passing an assessment; you want engineers moving fast on systems that are secure by default.\n\nYou take the stakes seriously: export-controlled designs, defense customers, and flight hardware that adversaries would like to know about.\n\nYou are willing to learn unfamiliar domains quickly and deeply, whether that means spacecraft engineering, flight and ground software, manufacturing systems, export control, or defense contracting.\n\nYou have strong opinions loosely held. You can defend a technical position, accept feedback, change course when the situation demands it, and make appropriate tradeoffs in support of the mission.\n\nYou are collaborative, low-ego, and rigorous.\n\nYou want founding-level ownership and are motivated by building a company, not just completing assigned tasks.\n\nYou are excited to help build not only the product, but also the engineering organization behind it.\n\nBenefits\nHealth Insurance - We cover the full base premium for Blue Shield's Bronze plan. If you would like more coverage, you can upgrade to the Gold plan and cover the difference in premium. You are also welcome to add dependents and a spouse to your plan.\n\nDental & Vision - We cover t...","description_format":"text","description_chars":13389,"description_truncated":true,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity","Health insurance","Unlimited PTO"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security"],"lifecycle":[{"event":"open","at":"2026-10-24T13:26:12Z"}],"visa":[],"liveness":{"score":75,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.832,"p_room":0.9,"age_days":16,"expected_fill_days":27,"reasons":["conf:2","velocity","win:mid"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":275000,"is_top_pay":true},"html_url":"https://alion.io/job/pillar-space-systems-founding-lead-it-engineer-2","json_url":"https://alion.io/job/pillar-space-systems-founding-lead-it-engineer-2.json","meta":{"generated_at":"2026-10-29T16:18:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24367,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4398852},"rest":"https://alion.io/mcp/rest/get_company?id=4398852"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpillar-space-systems-founding-lead-it-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpillar-space-systems-founding-lead-it-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpillar-space-systems-founding-lead-it-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pillar-space-systems-founding-lead-it-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpillar-space-systems-founding-lead-it-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3206726}},{"tool":"search_jobs","arguments":{"company":"pillarspace.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3206726},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}