Is Your IT Ready for SpaceX in Louisiana?

If you want SpaceX supplier work in Louisiana, chances are they will ask about your IT before they ask about your shop. Most shops around here are not ready for that conversation...yet.

SpaceX is building Starbase Louisiana in Vermilion Parish, about an hour from Lafayette. LED announced a $100 billion launch campus. Construction by the end of 2027. First launch targeted as soon as 2029.

To build it, they have to buy steel, fabrication, logistics, dirt work, and engineering from somebody. That somebody should be us. Louisiana companies.

That said, they are not handing you a PO because you are local and your cousin says you do good work.

What LED actually announced

From Louisiana Economic Development and the 25 August 2026 release:

• Vermilion Parish. Dateline Pecan Island. SpaceX's fourth and largest launch site.

• About $100 billion to build the campus.

• 3,000 direct new jobs over 10 years, average salary $92,600, and about 8,100 indirect jobs.

• Full buildout: five launch complexes (two pads each), propellant farms, a production facility, power, vehicle processing, and employee housing.

• Construction beginning by the end of 2027. First launch targeted as soon as 2029.

• SpaceX joined Source Louisiana, LED's path for Louisiana suppliers and contractors.

  
  

Treat that as an announced plan. Permits, wetlands review, and construction still have to happen.

What this means if you want the vendor work

Lafayette is the nearest major office market we already serve. Construction, industrial, professional services, and manufacturers feel this first.

Now picture winning the bid. Headcount has to go from 40 to 120 inside eighteen months. Revised drawings land mid-project and have to be on every crew's tablet the same afternoon. Can you stand up 20 new hires in ten days and have them working, badged, and in the right systems on day one? When a foreman resigns on a Friday, is his access gone by Friday night, or does it linger for three weeks because nobody told IT? Are change orders and purchase orders living in a real system with an audit trail, or in a shared workbook that gets emailed around and forked into four versions?

That isn't a cybersecurity question. That's an operations question. I've watched companies lose contracts with operators like Elon because they couldn't move at his pace.

The IT bar for a Louisiana SpaceX supplier

Big companies do not ask if you have IT. They ask how mature it is.

MFA on everything. Server backups you have actually tested. Endpoint detection. A written incident response plan. If your answer is 'my nephew handles our computers,' you are probably not getting the work.

A shop that is ready can show:

1. MFA on everything. Including the owner. Phishing and business email compromise are how money and drawings leave the building.

2. Backups you have restored on purpose. Backup and disaster recovery, tested. Not a USB in a desk.

3. Endpoint detection that is actually watched. Not a sticker on a tower.

4. A written incident response plan. Who you call, what you isolate, what you tell the customer.

5. A helpdesk that answers. If your provider is a ticket black hole, you will feel it when a job site cannot print a drawing.

   
   

Construction firms already live this: job-site networks, shared files, crews that cannot wait. A spaceport supply chain is the same problem with a harder customer.

If you share drawings or other export-controlled data, chances are you will also have to treat it like ITAR work: DDTC registration if you manufacture or handle defense articles or technical data, U.S. persons only, encryption on everything. That is months, not a weekend. We have not seen an official SpaceX-Louisiana page that says every vendor must be ITAR-registered. Do not wait for the PO to find out you needed it.

ITAR is not CMMC

Do not mix this up. CMMC is a Department of Defense program. It applies when you handle FCI or CUI on DoD work. ITAR is a different rule set.

If you already sit in a defense or aerospace supply chain (or you want both), read our CMMC guide for Louisiana businesses. The same hygiene (MFA, logging, backups, incident response) is what a commercial prime will ask for, even when the acronym is different.

Six questions before you register

Answer these before you register on Source Louisiana and hope.

• Is MFA on for every user, including the owner?

• When did you last restore a file from backup on purpose?

• Is endpoint detection actually running and monitored?

• Do you have a written incident response plan, and a number to call?

• Can your IT systems scale with high-pace growth?

• Is service software in a real system, or is it a spreadsheet somebody emails around?

  
  

If three of those are no, you are not ready. That is fixable. Construction on Starbase Louisiana starts in 2027, per LED. The vendor lists get built before that. You have about 12 months to become the kind of company that passes scrutiny and survives the growth after it. Plenty of time if you start now.

Not enough if you wait for the RFP.

That is the work we do at S1. Managed IT and co-managed (your staff stays, we add coverage). Lafayette HQ, Baton Rouge office. We get Louisiana businesses ready for the questions the big guys are going to ask, and ready for the work that follows. Talk to us.

FAQ

Is SpaceX building in Louisiana? 

• Yes. LED announced a $100 billion SpaceX launch campus in Vermilion Parish. Construction is expected by the end of 2027, and the first launch is targeted as soon as 2029. It is not operating today.

Where is Starbase Louisiana? 

• Starbase Louisiana is the announced SpaceX campus in Vermilion Parish. LED's release is datelined to Pecan Island, about an hour from Lafayette.

What IT does a SpaceX vendor need? 

• MFA on everything, tested backups, endpoint detection, a written incident response plan, and operations that can hire, offboard, and cost a job without a spreadsheet. They do not ask if you have IT. They ask how mature it is.

Does SpaceX send vendors an IT questionnaire? 

• They will ask how mature your IT is. Some vendors get a CSF-style questionnaire. Official spacex.com/supplier does not publish an IT form, so we cannot say every Louisiana vendor gets one.

Do I need CMMC to work with SpaceX? 

• No sourced SpaceX-Louisiana rule requires CMMC. CMMC is a Department of Defense program for work that handles FCI or CUI. You still need real security to pass a commercial vendor review.

Do I need to be ITAR certified to work with SpaceX? 

• Not as a blanket rule we can source. If you share export-controlled drawings or technical data, chances are you will have to treat it as ITAR: registration, U.S. persons, encryption. ITAR is not CMMC.

How do Louisiana companies get on the SpaceX vendor list? 

• LED says SpaceX joined Source Louisiana. Register there. A listing is not the same as being ready, and vendor lists get built before 2027 construction.