Physical Security – Facilities Lead

About the Role  

Armada is seeking a Physical Security – Facilities Lead to own classified design, construction, and accreditation of Galleons for the U.S. Defense sector. 

Galleons are built, configured, shipped, and stood up in months, not years. Defense customers need those units accredited as SCIFs, SAPFs, collateral open-storage or closed areas, and related secure processing environments. You will turn ICD 705, DoDM 5205.07, and NISPOM (32 CFR Part 117) physical construction standards into repeatable design requirements, factory and site practices, and accreditation packages that scale with the product line. 

You will be the company authority on physical security for secure builds. You will sit with hardware, form-factor, manufacturing, deployment, federal, and security partners from concept through accreditation of the space. Where corporate facility protection overlaps a secure build, you will also set access control, intrusion detection, CPTED, and guard-force requirements as applicable. Corporate physical security is not a separate program. It is in scope only where it touches classified design, construction, or accreditation. 

This is a senior, hands-on individual contributor role. You will write the standard, walk the line, brief the Accrediting Official, and close the findings. You will exercise independent judgment on problems without precedent, be accountable for results across Armada's secure-build function, and direct the work of contractors, integrators, and cross-functional partners without having direct reports. 

What You'll Do (Key Responsibilities) 

Classified design and construction standards 

• Own physical construction and accreditation requirements for defense Galleons, including SCIFs and SAPFs under ICD 705 and the ICS 705 Technical Specifications, SAPFs under DoDM 5205.07, and collateral open-storage, closed, and discussion areas under 32 CFR Part 117 (NISPOM). 
• Translate those standards into design criteria, drawing notes, BOM constraints, and factory work instructions that hardware, mechanical, electrical, and manufacturing teams can build to. 
• Lead security design reviews across the Galleon family. Read and redline architectural, structural, electrical, and low-voltage drawings against ICD 705, TEMPEST, and NISPOM. 
• Define perimeter, access-control, intrusion-detection, and video requirements for secure configurations, including door, lock, and wall assemblies, STC and acoustic performance, and inspectable materials. 
• Own TEMPEST and emissions-security design input. Set red/black separation, shielding, filtering, grounding, and penetration criteria, and coordinate countermeasure reviews with customer TEMPEST authorities. 
• Specify Protected Distribution Systems where a Galleon or site requires them and inspect against the applicable CNSSI standard. 
• Build a repeatable secure-Galleon configuration so accreditation is a productized path, not a one-off for every build. 

Accreditation and government liaison 

• Serve as Armada’s liaison to Accrediting Officials, Special Security Officers, Facility Security Officers, DCSA Industrial Security Representatives, and customer security staff. 
• Author and maintain Construction Security Plans, Fixed Facility Checklists, inspectable-materials lists, TEMPEST questionnaires, and accreditation submittals. 
• Plan and run construction surveillance, site inspections, and quality assurance on factory, integration, and customer-site work. Hold general contractors, integrators, and internal build teams to the CSP. 
• Drive accreditation from design approval through inspection, remediation, and operational accreditation. Own the punch list. 
• Support capture and proposal teams on DD-254, contract security classification specifications, and physical-security volumes so bids do not promise a configuration that cannot be accredited. 

Program execution 

• Own the security workstream on defense Galleon programs. Set milestones, dependencies, and risks against hardware design, factory slot, shipment, and customer required-accreditation dates. 
• Partner with Large Form Factor and Edge Hardware leads, deployment, logistics, and federal mission teams so security requirements are in the design before steel is cut. 
• Stand up the operating rhythm for classified builds: design gates, inspection hold points, documentation control, and lessons learned into the next hull. 
• Author and maintain Armada's internal physical-security policies and standards for classified builds, and mentor engineering, manufacturing, and deployment teams so secure-build expertise scales across the company. 

Required Qualifications 

• U.S. citizenship. 
• Active U.S. Secret clearance required. 
• Bachelor's degree and 12+ years (or Master's degree and 8+ years) in physical security, industrial security, or secure-facility construction, with at least 5 years hands-on in design, build, and accreditation of SCIFs, SAPFs, or collateral open-storage areas. 
• Demonstrated ability to apply ICD 705 Technical Specifications to construction drawings and field conditions, not just cite them. 
• Working knowledge of 32 CFR Part 117 physical safeguards and of DoDM 5205.07 as it applies to SAPF construction and accreditation. 
• Experience as the technical interface to an Accrediting Official, Cognizant Security Office, or DCSA representative through accreditation. 
• Experience authoring Construction Security Plans and fixed-facility or equivalent accreditation packages. 
• Ability to read construction documents and reject noncompliant details on walls, doors, penetrations, power, grounding, and electronic security systems. 
• Experience with access control, intrusion detection, and alarm monitoring on accredited spaces (UL 2050 or equivalent). 
• Track record of driving a build to a date with engineers, contractors, and government security staff in the same room. 
• Recognized subject-matter expert who has set physical-security standards or policy for an organization and persuaded diverse senior internal and government stakeholders. 

Required Qualifications

• 10+ years in Business Systems, Enterprise Applications, or related roles with increasing scope. 
• Platform-agnostic technical fluency in how enterprise systems work: relational database structures, data flows, API and webhook integration patterns, static vs. dynamic configuration, and how upstream changes propagate downstream. The right candidate can describe any enterprise system — regardless of whether they’ve used it before — in terms of its underlying data model and CRUD operations. 
• Ability to read (not necessarily write) JavaScript and Apex code: you need to understand what custom logic is doing and assess compatibility with proposed changes, not just know it exists. 
• Demonstrated experience owning and scaling core systems for G&A and/or Finance functions. 
• Solid integration and data fluency: APIs, iPaaS tools (e.g., Workato, Boomi, MuleSoft), data quality concepts, and reporting infrastructure. 
• Strong change management instincts: you bring stakeholders along, drive adoption, and create durable operating habits. 
• Excellent communication and stakeholder management — able to translate between business outcomes and technical implementation, facilitate cross-functional trade-off conversations, and influence without authority. 
• Genuine enthusiasm for and working knowledge of AI/LLM tooling — and a track record of helping teams actually adopt new tools, not just deploy them. 

Preferred Qualifications

• Experience designing or implementing enterprise AI enablement programs (tool stack, training, workflow redesign). 
• Familiarity with GTM tooling (CRM, CPQ, forecasting) and/or R&D/engineering systems at a level sufficient to establish standards and ensure interoperability. 
• Experience with revenue workflows and controls (billing, collections, revenue recognition concepts). 
• Comfort prototyping or validating logic using SQL and/or scripting, or deep partnership with technical teams to do so. 
• Experience implementing security and compliance controls across business systems (audit readiness, access governance). 
• Relevant certifications (nice-to-have): NetSuite, Workday, Rippling, iPaaS platform certs.