Security Administrator

At Stoke, we believe a thriving space economy will enable a vibrant, sustainable, and equitable future here on Earth. That is why we’re building Nova, our fully and rapidly reusable launch vehicle. Designed for daily flight, Nova tackles the core challenges of space transportation by reducing cost, increasing availability, and improving reliability. By radically lowering launch costs and increasing flight cadence, we’re helping create a truly scalable space industry. Our team is mission-driven, collaborative, and empowered to take ownership of their work. If you want to work alongside some of the most dedicated and talented people on Earth, we’d love to have you join us. Description Reusable launch systems are the key to seamlessly connecting Earth and space. As a Security Administrator, you will administer, maintain, document, and continuously improve the technical security controls that protect Stoke’s infrastructure, engineering environments, manufacturing systems, and sensitive aerospace data. We are a small, highly motivated team. You will work across IT, software engineering, manufacturing, and operations to administer scalable security controls that enable teams to move quickly without compromising Stoke’s security posture. This is a hands-on security administration role supporting Stoke’s evolving information security program. You will operate and maintain the security tools and controls that protect our infrastructure, engineering systems, and manufacturing environments while supporting risk management, compliance, and audit-readiness efforts. You will help translate regulatory requirements, including NIST 800-53/171, FedRAMP, ISO 27001, and SOC frameworks, into practical security configurations, repeatable processes, and well-maintained documentation. You must be ready to stay focused, move fast, self-direct, and learn on the fly. Responsibilities • Administer and maintain security tools and systems across cloud and on-premise environments, including identity, endpoint, network, vulnerability management, and security logging platforms • Monitor and analyze security alerts, investigate suspicious activity, and support the response to potential security incidents • Implement and maintain security configurations, policies, standards, and procedures in alignment with regulatory and industry frameworks, including NIST 800-53/171, SOC 1/SOC 2, and ISO 27001 • Support the risk assessment process by identifying, documenting, tracking, and helping remediate information security risks • Perform vulnerability scanning, review findings, coordinate remediation activities, and verify that identified issues are resolved • Conduct regular reviews of user access, system configurations, security logs, and technical controls • Collaborate with cross-functional teams to integrate and maintain security controls within business processes, IT systems, and engineering environments • Maintain documentation, system records, procedures, and evidence required to support audits and compliance activities • Support security-related onboarding and offboarding activities, including account provisioning, access changes, and access removal • Perform hands-on system administration tasks, particularly those involving secure configurations, identity and access management, endpoint protection, and logging • Assist with security awareness activities and provide guidance to users on security policies and procedures • Perform additional duties as assigned to support organizational goals and objectives Qualifications • Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field • Strong understanding of IT infrastructure, including applications, networks, servers, storage, endpoints, identity systems, logging architectures, and cloud technologies • Experience administering enterprise security tools and implementing technical security controls • Experience reviewing security alerts, logs, and system activity to identify, investigate, and resolve security issues • Strong analytical and troubleshooting skills, with the ability to correlate information across multiple systems and determine appropriate remediation actions • Ability to prioritize security findings based on risk, impact, exploitability, and operational context • 3+ years of experience in information security, systems administration, security operations, or a related technical field • Working knowledge of relevant security and compliance frameworks, such as NIST 800-53/171, SOC 2, and ISO 27001 • Ability to create and maintain clear technical documentation, investigation records, procedures, remediation plans, and audit evidence • Ability to work independently, follow issues through resolution, and coordinate effectively with technical and nontechnical stakeholders Preferred Qualifications • Experience administering security platforms such as SIEM, endpoint detection and response, vulnerability management, identity and access management, mobile device management, or data loss prevention tools • Hands-on experience reviewing and correlating logs from endpoints, identity providers, cloud platforms, firewalls, applications, servers, and network security systems • Experience creating and tuning SIEM queries, dashboards, correlation rules, alerting logic, and automated response workflows • Experience investigating security alerts, documenting findings, coordinating remediation, and verifying corrective actions • Experience operating in regulated environments subject to NIST 800-171, NIST 800-53, FedRAMP, ISO 27001, SOC 2, CUI handling, or similar control frameworks • Experience with Microsoft security and administration platforms, including Entra ID, Microsoft 365, Intune, Defender, or Microsoft Sentinel • Experience supporting vulnerability remediation, access reviews, incident response, security monitoring, log management, and audit evidence collection • Familiarity with scripting or automation using PowerShell, Python, Bash, KQL, or similar tools • Experience identifying monitoring gaps and onboarding systems, applications, or security data sources into a centralized logging or SIEM platform • Experience in environments subject to strict data-protection or government-driven security requirements • Prior experience working in a startup environment, demonstrating adaptability, resourcefulness, and a hands-on approach to security administration Benefits • Equity – We know that our employees are the reason we succeed. To give everyone a stake in our future, we are pleased to offer equity in the form of stock options to all regular, full-time employees. • Comprehensive benefits program including subsidized medical, dental, and vision insurance • Company-paid life and disability insurance • 401(k) plan with employer match • 4 weeks’ Paid Time Off • Holidays – 10 days (including an end-of-year closure) • Paid Family/Parental Leave • On-site gym or monthly wellness stipend (depending on location) • Dog friendly offices! Compensation Target Levels: • Level 1 Range: $89,040 - $133,560 • Level 2 Range: $111,300 - $166,950 Our job posts are intentionally written to attract a wide variety of experience levels, and we make decisions about the right fit on a per-candidate basis. Your actual level and base salary will be decided based on your specific experience and skill level. ITAR Requirements To conform to U.S. Government space technology export regulations, including the International Traffic in Arms Regulations (ITAR), you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligible to obtain the required authorizations from the U.S. Department of State. Equal Opportunity The Company is an Equal Opportunity Employer, including with respect to disability and veteran status. It is committed to compliance with all equal opportunity laws, including the Immigration and Nationality Act (INA) and Title VII. It does not discriminate on the basis of nationality, race, citizenship, immigration status, or any other protected class when it comes to employment practices, including hiring. Employment at the Company is contingent upon satisfactory completion of reference and background checks, and on your ability to prove your identity and authorization to work in the U.S. for the Company. Employees must comply with the United States Citizenship and Immigration Services employment verification requirements, and, therefore, they must complete an Employment Eligibility Verification Form I-9 at the start of employment and re-verify authorization to work periodically. Separate from this I-9 process, this position entails access to certain technology and technical data that is restricted under U.S. export control laws and regulations. Employment or continued employment may be conditioned on your legal authorization to work with or have access to export control materials as necessary to perform your job. Candidate Rights & Accommodations If you require a reasonable accommodation to complete the application or participate in the interview process, please contact careers@stokespace.com. Requests will be handled in accordance with applicable laws. Please do not include medical or other confidential information in your initial request. For more information about your rights, please refer to the "Know Your Rights" notice here. E-Verify Stoke Space uses E-Verify to confirm the identity and employment eligibility of all new hires. For more information on the right to work, please refer to the poster here.