Network Engineer & Data Security Specialist
Urban Sky
About Urban Sky:
Urban Sky is a venture-backed aerospace startup that pioneers utilization of the stratosphere and reimagines the way humans view and analyze the earth. We design, build, operate, and sell stratospheric balloon systems, and the data we collect supports a wide range of applications, from real-time wildfire monitoring to urban mapping. Our technology is also employed by government customers including the Department of Defense (DoD), NASA, and others. Urban Sky sends flight vehicles to the stratosphere on a weekly basis.
Our team consists of engineers, makers, developers, and doers who believe in the power of human potential when passion meets utility within a small, supportive team. At Urban Sky we strive to create a team culture grounded in candor, inclusion, respect and empowerment.
We aim to build the next chapter of stratospheric history in Denver and are seeking self-starting, open-minded, and hard-working team members.
The Role
We’re looking for a Network Engineer & Data Security Specialist who can own the full networking and security compliance stack across Urban Sky’s stratospheric platforms and ground systems. You’ll be the person who makes our systems fly on approved networks—literally.
This role sits at the intersection of hands-on network engineering and government security compliance. You’ll help architect and maintain the networking infrastructure that connects our Urban Sky-designed Husky Bus platform to a wide range of payloads communicating over different radio systems—from satellite links to tactical radios with various routing equipment, VPNs, and network paradigms. Each mission and event can present unique networking challenges that require creative, on-the-fly solutions.
Equally important, you’ll lead and drive our government security compliance efforts, particularly the IATT and ATO process. Urban Sky has been issued several IATTs in the past, so there’s a strong foundation to build on. You’ll work to not only create compliant structures but also build CI/CD pipelines that are themselves approved—so our products can continue to improve after they’re authorized. This means working through STIGs, ACAS scans, security architecture documentation, and coordinating directly with government cybersecurity leads.
This role will involve significant travel supporting various events, exercises, and customer engagements where you’ll solve unique networking challenges in the field. If you’re the kind of person who gets energy from being hands-on in new environments and figuring things out in real time, you’ll love this.
What You'll Do
Network Engineering:
- Design, deploy, and maintain networking infrastructure for the Husky Bus platform and its payloads
- Configure and manage routers, switches, VPNs, firewalls (including Palo Alto), and network segmentation for both on-site and field-deployed systems
- Solve novel networking challenges at field events and exercises—each deployment may involve different radio systems, routing paradigms, and connectivity constraints
- Support integration of customer payloads onto the Husky Bus, ensuring reliable network connectivity across air-to-ground, air-to-space and air-to-air links
- Build and document network architectures that are flexible enough to support rapidly evolving mission requirement
Security & Compliance:
- Own and drive the IATT and ATO process end-to-end, building on Urban Sky’s existing IATT foundation and lessons learned from Army and other DoD engagements. There will be lots of support from the IT team, the software team and the firmware team, but you will own the network.
- Conduct and manage STIG reviews, ACAS/Nessus vulnerability scans, and remediation across bus compute systems, cameras, and other networked components
- Coordinate directly with government cybersecurity leads (e.g., MDO Live Cyber Security, C5ISR Center) on compliance artifacts, scan submissions, and risk acceptance packages
- Develop and maintain security documentation including system security plans, network diagrams, and compliance evidence packages
- Build approved CI/CD pipelines so that products can continue to be improved after authorization—compliance shouldn’t mean the product freezes
AI-Assisted Operations:
- Use AI tools daily to accelerate compliance documentation, network analysis, vulnerability remediation, and configuration management
- Build AI into production workflows—not just prototyping. AI will be an integral part of how you do this job. Before AI this job would not have been possible by just one person
- Stay current with evolving AI capabilities and continuously find new ways to apply them to security and networking challenges
Who We're Looking For
This is a senior, hands-on role. We’re optimizing for experience, speed, and adaptability.
You Likely Have:
- 5+ years of experience in network engineering, IT security, or a related field
- Deep hands-on expertise with VPNs, routers, switches, firewalls, and network architecture—you can configure, troubleshoot, and design from scratch
- Direct experience with the government IATT process—you have taken at least one system through a full IATT end-to-end and have seen the ATO process
- Familiarity with STIGs, ACAS/Nessus scanning, and DoD cybersecurity compliance frameworks (RMF, NIST 800-171)
- Experience working with or supporting DoD/military customers on network security
- Comfort working across satellite communications, tactical radio networks, and conventional IP networking
- Strong documentation skills—you can produce the compliance artifacts that government reviewers need
You Probably Enjoy:
- Startup environments where you wear many hats and move fast
- Field work, travel, and solving problems in new and challenging environments
- Building systems that are both compliant AND capable of continuous improvement
- Using AI aggressively to multiply your output
- Working autonomously with real ownership of outcomes
Nice-To-Haves
- Familiarity with Tailscale or similar mesh networking solutions
- Experience with CI/CD pipeline design and DevSecOps practices
- Background in aerospace, defense, or other highly regulated industries
- Familiarity with CUI/SBU data handling requirements
Benefits:
- Medical, Vision and Dental
- Unlimited Vacation Days
- Parental Leave
- Cell Phone Bill Stipend
- Stock Options
Urban Sky is required to post this salary range per Colorado law. Your salary will be determined based on your abilities and experience.
NOTE: Research suggests that women and BIPOC individuals may self-select out of opportunities if they don’t meet 100% of the job requirements. We encourage anyone who believes that they have the skills and the passion necessary to succeed here to apply for this role.
This position may require the candidate to deal with commodities, software, technology, defense articles, and/or technical data which are subject to the Export Administration Regulations and/or the International Traffic in Arms Regulations. Additional information may be requested so as to determine whether export authorization is required from the Bureau of Industry and Security and/or the Directorate of Defense Trade Controls. If authorization is required, employment will be contingent upon the Company successfully obtaining such authorization from the relevant government agency.
Urban Sky is an equal opportunity employer, and we value diversity. All employment is decided on the basis of qualifications, merit, and business need.