ABOUT THE TEAM 

Anduril is a fast paced, high-tech company with deep expertise in cutting-edge information science. We are seeking a Program Analyst to work with our technical Program Managers and Contracts Management Team. The Program Analyst will play a pivotal role in helping Anduril manage its wide variety of government defense contracts and other business and administrative contracts. Working with existing technical team managers, your goal is to ensure not only successful contractual planning, but to also ensure that contract deliverables are delivered correctly and on time.

ABOUT THE JOB 

This position will have exposure to a wide variety of program planning, organization, and compliance activities. Reporting to the technical Program Director, you will strengthen and develop your business knowledge and expertise by being a part of a fast-growing company that delivers technology solutions to government and industry customers. Preferred candidates will have a strong background in contract administration; project management; a willingness to learn; be a team player and be able to adapt to the changing needs of a fast-paced technology business.

WHAT YOU’LL DO 

• Planning: Developing project plans, timelines, and budgets to support compliance with customer contracts and any subcontracts. Track spending and any associated funding limitations.
• Organizing: Creating a plan for contract implementation, assigning tasks, and coordinating with team members on roles and responsibilities. Implement collaborative tools to allow team members to efficiently support contracts.
• Guidance: Ensuring team is complying with legal guidance in executing contract deliverables and milestones. Ensure deliverables and milestones are delivered in a timely manner consistent with legal guidance.
• Monitoring and Controlling: Tracking progress, monitoring compliance, and assisting in implementing corrective actions in contract performance. Maintain records of compliance with contract milestones and deliverables.
• Communication: Keeping internal stakeholders informed, managing expectations, and resolving issues.
• Risk Management: Identifying, assessing, and mitigating potential risks in contract performance in collaboration with legal and the program manager.
• Contract Closure: Ensuring the project is completed successfully, all deliverables are finalized, and necessary close-out activities completed.

REQUIRED QUALIFICATIONS 

• Bachelor’s Degree in Business Administration or related field with a record of academic accomplishment
• Excellent written, verbal, and interpersonal communication skills
• Strong analytical abilities, with a high detail orientation and commitment to quality
• Ability to operate well in a highly regulated business environment
• Ability to multi-task and work in a fast-paced environment
• Commitment to excellence and continuous improvement
• Willingness to learn and apply federal regulations and contract requirements (FAR, DFARS, CAS, ITAR, EAR, etc.)
• Proficiency with Microsoft Office applications, including Word, Excel, and PowerPoint
• Eligible to obtain and maintain an active U.S. Secret security clearance

PREFERRED QUALIFICATIONS 

• Experience in project management, including proficiency with Microsoft Project and Adobe Pro
• Experience in federal government contracts, data requirements, and delivery forms
• Knowledge of federal procurement processes and practices, including FAR and DFARS

The Test and Analysis team is responsible for ensuring that emerging products are ready for the harsh conditions of air, land, sea, and space environments. Our team supports multi-disciplinary product teams across the full life cycle to design, develop, and validate new and existing products. This includes requirements analysis, environmental and electromagnetic interference testing, reliability testing, and manufacturing sustainment efforts. The Test and Analysis team achieves these objectives through consistently striving to understand primary design drivers through analytical modeling, including specialized structural-thermal-optical performance (STOP) analysis, along with strategic engineering validation and qualification test campaigns. This fused approach ultimately enables us to identify opportunities for product robustness and quickly implement solutions to ensure critical capabilities efficiently make it into the hands of our military and its allies.

We are looking for a Senior Thermal Analyst to join our rapidly growing team in Boulder, CO. In this role, you will be responsible for performing thermal analysis and taking ownership of thermal design aspects across hardware development programs. You will execute first order assessment of designs to guide preliminary design architecture, develop detailed analytical models to mature prototype designs and develop predictions to support hardware testing.  If you are someone who is excited to work on new projects from conceptualization through production and are passionate about developing validated and correlated models to support the rapid prototyping of cutting edge systems.

WHAT YOU’LL DO 

• Execute hand calculations, spreadsheet, and MATLAB/Python first-order models to inform path forward before jumping into detailed analysis. Use first principles as a basis for every decision and discern the right level of analysis to apply based on state of hardware design and program goals
• Develop appropriate CFD models and simulations to predict temperatures, heat transfer, and fluid characteristics as needed to meet design schedules. Generate, maintain, and correlate integrated FEMs for imaging platforms.
• Experience with EO/IR sensors and familiarity with structural, thermal, optical performance (STOP) analysis
• Perform test-model correlation testing to validate analytical predictions
• Work closely with environmental test engineers to support the design, instrumentation selection, execution, and data processing of tests to validate models and predictions, including fundamental
• Prepare technical reports to present findings to internal teams, management, and external customers
• Stay current with advancements in thermal analysis techniques, materials technology, and industry standards

REQUIRED QUALIFICATIONS 

• Currently pursuing or have obtained a MS or higher degree in engineering or applied physics with focus on heat transfer and fluid dynamics
• 7+ years of experience in a thermal analysis or thermo-physics analysis role
• Thermal FEA experience – STAR-CCM+, ANSYS, Icepak, or Flotherm
• Familiarity with Matlab or Python (or equivalent) for developing analytical models and performing data acquisition & post-processing
• Experience with performing test-model correlation and test based characterization of critical modelling input parameters
• Good at working independently and with various teams and key stakeholders
• Highly motivated, self-starting, results oriented, and capable of working in a dynamic environment
• Eligible to obtain and maintain an active U.S. Secret security clearance 

PREFERRED QUALIFICATIONS 

• General knowledge of climatic and/or dynamic testing including understanding of various instrumentation and data acquisition fundamentals
• Knowledge on how to run and operate chambers, DAQs, and other major test apparatus
• CAD skills (any platform) and ability to make high quality engineering drawings that meet common industry standards
• Experience in an immersive interdisciplinary technical project (collegiate project teams or professional settings)
• Basic knowledge of MIL-STD-810 or equivalent

About the Role:

The GRC Analyst, Federal & Customer Programs is responsible for the hands-on analysis, documentation, and operational execution of the company's security governance, risk, and compliance obligations. This role sits at the intersection of customer contracts, regulatory frameworks, and the company's security control environment — translating external requirements into clear, traceable internal commitments and evaluating how well current capabilities satisfy them. The GRC Analyst reviews incoming contractual security language, maps obligations to applicable frameworks and existing controls, produces compliance matrices and gap analyses, owns the operational risk assessment process, contributes to governance and policy lifecycle activities, and supports audit, assessment, and customer inquiry activities.

A meaningful portion of this role is dedicated to ongoing contract and requirements analysis as new programs are awarded and existing programs evolve. The GRC Analyst serves as the security function's primary reviewer of incoming contractual cybersecurity language and works directly with legal and sourcing on flow-down negotiation and redlines. Candidates who enjoy careful reading of contractual and regulatory text — and who want this to be a substantial part of their day-to-day work — will find this role a strong fit.

This is a detail-oriented, writing-intensive role requiring strong analytical judgment, fluency across multiple compliance frameworks, and the ability to work effectively with legal, sourcing, program management, engineering, and security operations stakeholders.

Key Responsibilities:

Contract & Requirements Analysis

• Review customer contracts, statements of work, security annexes, CDRLs, data protection addenda, and flow-down clauses to identify cybersecurity, privacy, and information handling obligations applicable to the company.
• Extract and catalog specific security requirements from contractual language, and translate them into structured, testable statements suitable for traceability and control mapping.
• Compare identified requirements against the company's current product scope, control environment, and certification posture to determine where compliance is already met, partially met, or requires new implementation work.
• Produce gap analyses, compliance matrices, and Requirements Traceability Matrix (RTM) artifacts that clearly communicate the state of compliance for a given contract, program, or system.
• Serve as the security function's primary point of contact for legal and sourcing during contract review, redline cycles, and flow-down negotiation, including review of subcontractor and supplier flow-down language.

Framework Mapping & Interpretation

• Maintain working proficiency across the frameworks relevant to the company's regulatory and contractual posture, including NIST SP 800-171, NIST SP 800-53, NIST CSF, CMMC, ISO 27001, FedRAMP, and applicable European frameworks such as NIS2 and GDPR.
• Map controls across frameworks to minimize duplicated work and enable consistent responses to overlapping requirements; contribute to a shared control inventory used by compliance, security, and program teams.
• Interpret framework language and authoritative guidance (NIST publications, DoD guidance, regulator FAQs) in the context of specific company systems and business scenarios and escalate ambiguity for formal risk decisions when appropriate.

Governance, Policy & ISMS Support

• Contribute to the maintenance of the company's Information Security Management System (ISMS) documentation set, including keeping control descriptions, evidence references, and scope statements accurate and current.
• Support the policy and standard lifecycle, including periodic review cycles, version control, exception governance, and clarification of control owner accountability.
• Produce compliance posture reporting and audit readiness metrics for governance forums and leadership review, including framework coverage, finding aging, and remediation progress.

Deliverable Writing & Artifact Contribution

• Draft and revise compliance deliverables including System Security Plans (SSP), Plans of Action & Milestones (POA&M), policy and standard content, control narratives, customer security questionnaire responses, and audit artifacts.
• Author clear, concise written responses to customer, auditor, and regulator inquiries, calibrated to the technical level of the audience and consistent with approved company positioning.

Risk Assessment & Treatment

• Own the operational risk assessment process and the supporting risk register, including conducting periodic and event-driven risk assessments, documenting current state, identifying deficiencies, and developing risk treatment recommendations.
• Route risk acceptance and exception decisions to the appropriate decision authority with the underlying analysis and documentation prepared for review; track decisions and ensure follow-through on conditions or expirations.
• Track open compliance findings and remediation activities, prepare status updates, and flag aging or high-severity items for escalation.

Third-Party & Supply Chain Risk

• Contribute to vendor and supplier security review activities, including evaluating vendor security questionnaires, reviewing supplier control attestations, and assessing residual risk for inclusion in procurement and program decisions.
• Support assessment of subcontractor and supplier flow-down compliance, including coordinating with sourcing and program management on supplier security obligations and remediation.

Audit & Assessment Support

• Support internal and external audit, assessment, and certification activities, including C3PAO engagements, ISO 27001 surveillance audits, customer assessments, and regulator inquiries.
• Coordinate evidence collection with system owners and control operators; validate that evidence is accurate, complete, and appropriately scoped before submission.
• Participate in assessor and auditor interviews as a subject matter contributor on specific controls and artifacts.

Cross-Functional Collaboration

• Partner with legal and sourcing on contract review, redlines, and flow-down language; with security program management on milestones, schedules, and audit coordination; and with security engineering and IT on evidence, control implementation detail, and remediation planning.
• Serve as a knowledgeable point of contact for internal teams seeking to understand what a given regulatory or contractual requirement means in practice.

What Success Looks Like in Year One

• Established a repeatable contract review intake process with legal and sourcing, including a maintained library of standard cybersecurity flow-down clauses and review turnaround expectations.
• Produced an end-to-end Requirements Traceability Matrix for at least one active federal program, traceable from contract clauses through framework controls to evidence sources.
• Stood up the operational risk register and routine risk reporting cadence, with at least one full assessment cycle completed and risk treatment decisions documented.
• Maintained the ISMS documentation set in audit-ready condition through at least one external assessment or surveillance cycle.

Required Qualifications:

• Five or more years of progressive experience in cybersecurity governance, risk, and compliance; IT audit; or a closely related discipline, with substantial hands-on exposure to framework interpretation and contract requirement analysis.
• Demonstrated working knowledge of NIST SP 800-171 and NIST SP 800-53, including control families, assessment procedures, and common implementation patterns.
• Experience contributing to SSP and POA&M artifacts, compliance matrices, or Requirements Traceability Matrices in a regulated environment.
• Practical experience supporting at least one formal audit, certification, or assessment cycle (for example CMMC, ISO 27001, SOC 2, FedRAMP, or comparable).
• Strong technical writing skills, including the ability to produce accurate, concise, and audience-appropriate compliance documentation. Writing samples may be requested as part of the interview process.
• Demonstrated comfort and interest in reading contractual and regulatory language carefully and translating it into specific, actionable internal requirements. This is a core part of the role, not an occasional task.
• Comfort working across multiple stakeholder groups — legal, sourcing, engineering, IT, security operations, and program management — and adjusting communication style accordingly.
• Bachelor's degree in Information Security, Information Systems, Business, a related field, or equivalent practical experience.

Preferred Qualifications:

• Direct experience with CMMC 2.0 assessment preparation, including familiarity with DFARS 252.204-7012 and 48 CFR Part 204.
• Familiarity with ISO 27001, FedRAMP, SOC 2, NIS2, GDPR data security obligations, or EU dual-use export control regimes.
• Experience handling Controlled Unclassified Information (CUI) in accordance with NARA and DoD requirements.
• Exposure to aerospace, defense, space, or other regulated technology environments.
• Experience reviewing or negotiating cybersecurity flow-down language in customer or supplier contracts.
• Working familiarity with Governance, Risk, and Compliance (GRC) tooling such as ServiceNow GRC, Archer, Hyperproof, Drata, Vanta, or equivalent.
• Industry certifications such as CISA, CRISC, CISSP, CGRC (formerly CAP), ISO 27001 Lead Implementer / Lead Auditor, CMMC Registered Practitioner (RP), or CMMC Certified Professional / Certified Assessor (CCP / CCA).
• Active US security clearance, or eligibility to obtain one.

Spire operates a hybrid work model, and this position will require you to work a minimum of three days per week in the office.

Access to US export-controlled software and/or technology may be required for this role. If needed, Spire will arrange the necessary licenses—this is not something candidates need to have before applying. #LI-DC1

Position Summary

We are seeking a highly analytical and detail‑oriented Analyst to join our team. This role plays a key part in validating and coding audit deliverables, developing performance monitoring reporting, quantifying financial impact, and driving efficiency through automation and advanced analytics. The ideal candidate brings experience with internal controls, audit testing, and risk assessment, along with a proven ability to deliver high‑quality results in a fast‑paced, collaborative environment.

Position Responsibilities:

• Research and analyze pharmacy claims to ensure accuracy and contractual compliance across benefit setup, pricing, and guarantees
• Perform audit risk assessments, annual logic reviews and ongoing monitoring activities
• Analyze, reconcile and validate large datasets across multiple internal systems; develop and maintain SQL/Python queries for audit reporting and performance monitoring
• Create audit deliverable reporting, quantify financial impact of potential and confirmed audit findings, and build dashboards to identify trends and risks
• Identify and implement automation and process improvements across audit, reporting, and reconciliation workflows
• Maintain and enhance code, reporting tools, and dashboards to improve reliability, efficiency, and scalability
• Define and document technical requirements, data specifications, and methodologies to support transparency and repeatability
• Collaborate with internal and technology teams to improve data quality, workflows, and controls
• Provide ad-hoc analysis to support evolving business and audit needs
• Responsible for the adherence to the Capital Rx Code of Conduct including reporting of noncompliance

Required Qualifications:

• Bachelor’s degree in a quantitative or business-related field (e.g., Actuarial Science, Statistics, Economics, Finance, Data Analytics, or Business Administration)
• 2+ years of of experience in data analytics, audit, or a related role
• Experience in healthcare, PBM, or pharmacy claims; knowledge of pharmacy benefits, pricing, guarantees, and pharmacy claims analysis preferred
• Proficiency with SQL (Snowflake preferred), Excel, Tableau
• Familiarity with Python and project management/version control tools (e.g., Jira, Confluence, GitHub)
• Strong attention to detail with an intellectual and professional curiosity along with a passion for continuous improvement
• Track record of leading cross-functional initiatives, driving high performance, meeting deadlines, and executing on deliverables
• Effective communicator with both technical and non-technical stakeholders
• Extremely flexible, highly organized, and able to shift priorities easily

This Senior IAM Engineer will own the Okta for Government High (FedRAMP High) tenant, which serves as the enterprise Identity Provider and Identity Governance platform for a 1,500+ user organization. The role is the primary technical resource responsible for the build, enhancement, and operation of key functions, including SSO integrations, Identity Governance (OIG), Lifecycle Management, Workflows automation, and Adaptive MFA policy.

In the first three months, you will help develop the core program documentation and workflows. You will collaborate with external teams like IT, Legal and People to integrate into company processes. You will work with our technical security experts to build Identity and Access management processes and procedures.

Responsibilities

• Own the Okta for Government High (FedRAMP High) tenant — configuration, health, lifecycle, and security posture
• Manage Universal Directory: on-prem AD Agent sync, HRIS attribute mastering, profile mappings, and group rules
• Build and maintain all SSO app integrations via the Okta Integration Network (OIN) using SAML, OIDC, and SCIM
• Own and maintain Okta Adaptive MFA policies: factor enrollment rules, risk-based step-up authentication, FIDO2/YubiKey/PIV/CAC configuration
• Maintain the Okta System Log to Microsoft Sentinel log streaming pipeline and retention configuration
• Own Okta Identity Governance (OIG): entitlement catalog, access certification campaign setup, SoD policy rules, and access request workflow design
• Own, Build and Maintain Okta Lifecycle Management: JML automation rules, HRIS connector configuration, and auto-provisioning and deprovisioning into all connected applications, access review triggers, and automated remediation
• Design, build, and document all Okta-side enhancements including new app onboarding, policy changes, and IGA configuration updates
• Write test cases for all Okta-side changes; execute UAT jointly with the Identity Governance & Operations Analyst before production promotion
• Support Identity Operations Specialist on Tier 2 Okta escalations and Workflow troubleshooting
• Assist Identity Governance & Operations Analyst with OIG campaign configuration and certification reporting

Requirements:

• 4+ years of hands-on Okta administration and engineering experience
• Demonstrated experience with Okta SSO app integrations via SAML 2.0 and OIDC
• Experience with Okta Lifecycle Management and HRIS connector configuration
• Experience building Okta Workflows for provisioning automation
• Experience with Okta Adaptive MFA policy configuration including FIDO2/WebAuthn and hardware token enrollment
• Experience with Okta Universal Directory including AD Agent deployment and profile mastering

Compliance Requirements: this role will be subject to US Federal regulations, therefore:

• Must be a U.S. Citizen or Lawful Permanent Resident (Green Card holder) — U.S. Person 
• Ability to obtain and maintain a security clearance or pass a background investigation consistent with CUI access
  
  

Preferred Qualifications:

• Experience with Okta for Government High (FedRAMP High) or FedRAMP Moderate environments — strong preference
• Okta Identity Governance (OIG) experience — access certifications, SoD, entitlement management
• Experience federating Okta to Microsoft Entra ID / GCCH as a SAML Service Provider
• Familiarity with CMMC, ITAR, GDPR, SOX, SOC 2 compliance requirements
• Experience with SCIM 2.0 provisioning to downstream applications
• Okta Identity Governance certification (preferred)

The approximate base salary range for this position is $126,887 - $166,127. The total compensation package includes base, bonus, equity, and a range of benefit options found on our career site.

Location: This role is based out of our College Park, Boulder, CO, or Bothell, WA offices, or can be remote in the US. 
Travel: Up to 1 week per quarter
Job ID:  1460

Who we are:  

We're transforming one of the world’s oldest industries with cutting-edge technology and an innovative approach. Backed by top-tier investors and recognized by Time as one of the "best Inventions of 2024" and Fast Company as one of 2024's "Next Big Things in Tech", Electra is scaling rapidly and we're looking for bold, driven individuals to help us reshape the future of iron production. If you're ready to make a real impact in a company that's redefining heavy industry for a cleaner, smarter world, we want to hear from you.

What you will do:  

The Senior Program Manager will own the planning, coordination, and delivery of Electra’s highest‑priority, cross‑functional programs, ensuring execution rigor of our corporate plan while embedding market and value‑chain insights into decision‑making. This role blends program management with strategic analysis across the end‑to‑end steelmaking value chain, starting with North America and expanding globally. Strong technical acumen and experience managing large capital projects will be critical to success. 

Responsibilities include:

• Lead end‑to‑end program management for technology scale‑up for demonstration and commercial plants, and operational readiness initiatives
• Build and maintain program roadmaps, milestones, critical paths, dependencies, and integrated schedules across multiple workstreams
• Drive risk management, issue escalation/resolution, and contingency planning; maintain program RAID logs (Risks, Assumptions, Issues, Dependencies)
• Ensure delivery on time, within scope, and on budget; run regular governance cadences, stage‑gates, and executive reviews
• Implement change control processes and align decisions with OKRs and strategic priorities
• Serve as the central point of contact aligning Strategy, Development/Engineering, Engineering, Construction, Operations, Supply Chain, Finance, Policy/Regulatory, and Executive Leadership
• Coordinate with external partners (analysts, advisors, suppliers) to ensure seamless execution and information flow
• Prepare executive-level presentations and decision decks for leadership and board reviews; deliver clear dashboards and program updates
• Investigate the end‑to‑end steelmaking value chain: upstream iron sources and supply markets → downstream steel customers and end‑use sectors (automotive, infrastructure, transportation, appliances, etc.)
• Partner with business development and finance on supply/demand and competitor analyses; extract data and trends from industry, analyst, and financial reports 
• Analyze logistics, renewable energy options, and associated costs to inform site selection and program decisions 
• Identify “where‑to‑play” and “how‑to‑win” options for Electra; translate strategic choices into executable program charters 
• Support techno‑economic and financial modeling to validate scenarios (e.g., TEA, NPV/IRR, sensitivity analyses); ensure assumptions are documented and aligned
• Build business cases and decision frameworks for portfolio prioritization and sequencing
• Define, build, and improve the organizational and analytical processes to develop and review Electra’s strategy (annual and quarterly planning, stage‑gate governance)
• Collaborate with internal and external experts to gather insights, align on assumptions, and maintain positive relationships across time zones to preserve access to data and know‑how
• Establish and maintain the strategy calendar, inputs/outputs, and operating mechanisms that tie strategy to program execution
• Implement program management frameworks, tooling, and best practices (e.g., Primavera P6, MS Project, Smartsheet, Jira/Confluence, Asana, Power BI)
• Define and track KPIs across schedule, cost, quality, safety, and readiness; drive retrospectives and continuous improvement

What we need you to bring to the team:   

• Bachelor’s degree in Engineering, Business, or related field
• 8+ years of professional program or project management experience leading complex, cross-functional initiatives in industrial, manufacturing, climate-tech, or technology environments (excluding internships, co-ops, or academic projects)
• 2+ years of experience in operations- or capital-intensive development environments (e.g., large-scale construction, infrastructure, commissioning, scale-up, or transformation initiatives), demonstrating strong analytical rigor
• Proven ability to independently solve complex problems by applying established principles, sound judgment, and adaptable approaches
• Strong commercial acumen and understanding of key business and financial drivers; comfort with techno-economic and financial modeling
• Awareness of economic, industry, and external trends that may impact Electra’s strategy, programs, and priorities
• Demonstrated organizational and program management skills, including governance, stakeholder alignment, communication, and change management
• Ability to prepare clear, executive-level presentations and board-ready materials to support informed decision-making
• Experience leading projects or workstreams and providing guidance or mentoring without direct people management responsibility
• Effective communicator who can influence and collaborate across functions and levels of the organization
• Proven ability to operate in a fast-paced, scaling environment, including transitions from R&D to 24/7 production while maintaining an innovation-focused culture