LeoLabs

Systems Engineer

• Lead radar systems engineering activities across the system lifecycle, including requirements development, architecture definition, integration, verification, validation, and operational support.
• Develop and maintain radar system software, performance models, analyses, and technical documentation.
• Evaluate radar performance against mission objectives and identify opportunities for optimization and capability enhancement.
• Support system design reviews, technical interchange meetings, and customer engagements.
• Collaborate with software, hardware, RF, signal processing, and operations teams to ensure successful integration and deployment of radar capabilities.
• Perform trade studies and technical assessments to support engineering and program decisions.
• Develop test plans and support laboratory, field, and operational testing activities.
• Analyze system anomalies and lead root-cause investigations and corrective actions.
• Support government customers by providing technical expertise, briefings, and engineering recommendations.
• Mentor junior engineers and contribute to the continued development of systems engineering best practices.

Staff Radar Systems Engineer

Full-stack Engineer

• Design, develop, test, and maintain software supporting radar data collection, processing, analysis, and operational deployment.
• Develop interfaces and services supporting sensor operations, telemetry, data management, and mission execution.
• Develop scalable and reliable software solutions for radar control, monitoring, automation, and performance optimization.
• Collaborate with radar systems, signal processing, infrastructure, and operations teams to integrate new capabilities into operational environments.
• Support software architecture development and technical design reviews.
• Participate in system integration, verification, validation, and field testing activities.
• Troubleshoot operational issues and support root-cause analysis for software and system anomalies.
• Contribute to software development best practices, code reviews, and technical documentation.
• Support customer demonstrations, technical briefings, and operational readiness activities as needed.

Senior Radar Software Engineer

Account Manager

• Lead relationships with foreign governments, including ministries of defense, space agencies, regulators, and embassy officials
• Serve as senior company representative in international diplomatic, defense, and space forums
• Build trusted sovereign partnerships to enable mission success and long-term collaboration
• Partner with internal Government Relations to engage U.S. Government stakeholders, including the Department of State and Department of War
• Ensure alignment with U.S. foreign policy, national security priorities, and regulatory frameworks
• Navigate export control, security, and interagency processes impacting international operations
• Lead in-country engagement strategies supporting deployment and sustainment of company systems and infrastructure
• Develop and maintain relationships with national and local leaders supporting operational sites
• Identify and coordinate in-country advisors, consultants, and partners to support execution
• Partner with Engineering and Go-To-Market teams to enable international deployments
• Support ongoing operational relationships to ensure continuity of site access and mission execution
• Advise executive leadership on geopolitical, regulatory, and policy developments impacting global operations
• Provide guidance on risk, timing, and strategy for international expansion
• Shape policy positioning and engagement strategies to support long-term growth and market access
• Support CEO and executive leadership in high-level international engagements
• Develop briefing materials, strategic messaging, and executive positioning for government meetings
• Represent the company in international forums, coalitions, and policy discussions
• Partner with Business Development, Legal, Engineering, and Product teams to align international strategy execution
• Ensure coordinated delivery of international initiatives across technical and commercial functions.

Vice President, Global Mission Partnerships

Network Engineer

• Design and implement secure network patterns that enforce identity, device posture, segmentation, logging, and policy-based access across users, sites, workloads, and administrative paths.
• Implement and support SASE/ZTNA capabilities, including Cloudflare Government or comparable platforms, WARP/client access, private application access, gateway policies, DNS controls, and secure administrative access paths.
• Help eliminate direct public administrative access to workloads by routing privileged access through approved identity-aware and policy-enforced access layers.
• Develop network designs that support the principle that no workload, management interface, or privileged access path bypasses identity, policy, segmentation, and telemetry controls.
• Lead the design and rollout of Network Access Control for office, edge, and remote site environments.
• Implement or support 802.1X, RADIUS policy, device certificates, VLAN segmentation, and port-level admission control.
• Segment remote site networks into appropriate zones, such as telemetry, management, vendor/service, and out-of-band management networks.
• Design secure remote site connectivity using IPSec/private tunnels, certificate-based authentication, route controls, firewall policies, and deterministic telemetry paths.
• Ensure edge and radar-site environments have no unnecessary public management exposure.
• Implement firewall forwarding, tunnel telemetry, configuration backup, drift detection, and site-level logging into centralized monitoring and SIEM platforms.
• Support data-source onboarding for firewall logs, VPN/IPSec logs, SASE logs, NAC events, DNS logs, VPC/NSG flow logs, and remote site device logs.
• Create and maintain network diagrams, firewall rule documentation, routing designs, NAC policies, tunnel inventories, access paths, and operational runbooks.

Senior Network Engineer

Cloud Engineer

• Cloud Landing Zone Design and Implementation: Design, build, and maintain secure cloud landing zones across AWS and Azure environments. Implement account and subscription structures that separate workload zones, including commercial workloads, government workloads, Corporate IT, security services, and restricted CUI/ITAR environments. Build baseline controls for new cloud accounts and subscriptions, including owner tagging, logging, security baselines, routing, encryption, key policies, break-glass review, and monitoring requirements. Support landing-zone acceptance criteria so new cloud environments are provisioned with required guardrails before workloads are deployed.
• Identity, Access, and Privilege Controls: Implement federated access patterns using SAML/OIDC, IAM Identity Center, Azure Entra ID, or comparable identity platforms. Support least-privilege access, role lifecycle management, JIT/PIM/PAM workflows, service account controls, and removal of shared accounts. Help automate credential rotation, secrets management, service account governance, and break-glass monitoring. Partner with the Security team to ensure privileged cloud activity is authenticated, authorized, logged, reviewed, and tied to approved workflows.
• Cloud Security Guardrails and Policy-as-Code: Implement preventative and detective cloud guardrails using tools such as AWS Organizations, SCPs, AWS Config, Azure Policy, Defender for Cloud, Wiz, Terraform, CloudFormation, Bicep, or similar platforms. Codify baseline configurations for logging, encryption, network controls, public exposure prevention, security-group rules, storage policies, KMS/key vault use, and workload tagging. Monitor and remediate drift from approved cloud security baselines. Support detection and automated response for public admin exposure, cloud policy drift, unapproved data movement, stale credentials, and overly permissive IAM roles.
• Cloud Network and Private Access Integration: Partner with the Network team to implement secure cloud network patterns, including hub-and-spoke networking, transit gateways, vWAN, private endpoints, centralized DNS, private admin paths, and controlled egress. Ensure cloud workloads are not exposed through unnecessary public interfaces. Support routing and connectivity decisions for radar telemetry and other cloud workload environments. Implement cloud-side controls for SASE/ZTNA access, private application access, firewall inspection, flow logging, and route governance.
• Telemetry, SIEM, and SOC Enablement: Integrate cloud logs and security signals into centralized SIEM/SOC workflows. Onboard and maintain telemetry sources such as CloudTrail, AWS Config, VPC Flow Logs, Azure Activity Logs, NSG Flow Logs, Entra ID logs, KMS/Key Vault events, storage access logs, CSPM findings, vulnerability findings, and workload security events. Partner with the Security team to build detection use cases for exposed cloud services, privileged access anomalies, credential hygiene drift, data boundary violations, and cloud configuration drift. Support retention tiers, immutable logging, audit trails, alert evidence, and compliance reporting requirements.

Security Engineer

• Design and maintain enterprise cybersecurity architecture across cloud, network, identity, application, endpoint, and data security domains.
• Develop security standards, reference architectures, design patterns, and technical guardrails for enterprise systems.
• Partner with engineering teams to ensure security is integrated into new and existing technology solutions.
• Review architecture diagrams, technical designs, and implementation plans to identify security risks and recommend improvements.
• Lead security architecture efforts for cloud platforms such as AWS, Azure, or Google Cloud.
• Define and support security controls for identity and access management, zero trust, encryption, vulnerability management, endpoint protection, logging, and monitoring.
• Evaluate emerging threats, technologies, and business requirements to recommend appropriate security solutions.
• Support security risk assessments, threat modeling, and control validation activities.
• Collaborate with Governance, Risk, and Compliance teams to align architecture with regulatory and industry frameworks such as NIST, ISO 27001, CIS, SOC 2, or similar.
• Provide technical guidance during incident response, security investigations, and remediation planning.
• Assess third-party tools, platforms, and vendors from a security architecture perspective.
• Mentor security engineers, IT teams, and application teams on secure design principles and best practices.
• Create clear documentation, diagrams, and executive-ready recommendations for technical and non-technical audiences.

Security Architect

Artificial Intelligence

• Manage our new AI team of approximately 5 engineers
• Lead a cross-functional team of AI/ML Engineers, Data Engineers, and Software Engineers
• Ensure AI/ML algorithms meet performance requirements
• Ensure data lake meets internal and external needs
• Drive excellence in agentic AI within the organization