Infrastructure Engineer (Platform)
About The Position
Northwood is a modern space infrastructure company building a global network of phased array ground stations for reliable, real-time communications with satellite missions. The Infrastructure Engineer owns and operates the cloud environment supporting that network, including mission-software clusters, identity systems, observability, and infrastructure as code. This is a core individual-contributor role on the Infrastructure team. The engineer independently owns a defined scope of cloud infrastructure, working closely with Platform software engineers to turn intended configurations into operating cloud systems. The role also collaborates with infrastructure, platform software, security, network engineering, compliance, and ground station operations.
Requirements
- 2–5 years of production infrastructure experience in SRE, DevOps, platform, cloud, or systems engineering.
- Cloud infrastructure depth, including multi-account organizations, IAM, VPC networking, and EKS or equivalent managed Kubernetes.
- Strong infrastructure-as-code experience, including state management, CI-driven plan and apply, and working in a shared monorepo.
- Working competence in Linux, networking fundamentals, containers and Kubernetes, CI/CD pipelines, and observability tooling.
- Demonstrated end-to-end ownership of a production system, including design, implementation, and operation.
- Production on-call experience with measurable reliability outcomes.
- Ability to code in Python, Go, or a similar language for automation, tooling, and integration work.
- Strong technical writing skills, including design documents, runbooks, and post-mortems.
Nice To Haves
- Experience with AWS GovCloud or other regulated or air-gapped cloud environments, including their service gaps and workarounds.
- Experience with secrets and identity infrastructure, such as Vault PKI, authentication methods and policy design, Okta or IAM Identity Center integration, and workload identity.
- Experience with observability at scale, including VictoriaMetrics or Prometheus, Grafana, alerting design, and log pipelines such as Vector or Loki.
- EKS experience, including multi-cluster ArgoCD, cluster lifecycle, node and network policy, and workload isolation.
- Cloudflare experience with Zero Trust, DNS, tunnels, or WAF.
- Experience implementing technical controls for CMMC, NIST 800-171, NIST 800-53, or FedRAMP in partnership with compliance.
- Experience with hybrid connectivity between cloud and on-premises or edge sites.
Responsibilities
- Own and operate cloud infrastructure components, including cloud accounts, hosted Kubernetes clusters, certificate authority, secrets, IAM, and the observability pipeline.
- Build and maintain infrastructure as code, and define and implement GitOps practices and CI gates for testing, auditing, and approving infrastructure changes.
- Implement cloud-side networking, including VPCs, transit route tables, VPNs, Direct Connect attachments, and egress and ingress inspection; partner with network engineering on cloud-to-site handoff.
- Participate in on-call for the cloud stack, independently resolve most incidents, and lead post-incident reviews for incidents owned.
- Partner with security engineering and compliance to implement controls, including policies, IAM boundaries, logging coverage, evidence collection, and CVE mitigation.
- Automate recurring manual work or address the underlying system causing it.
- Write and maintain current runbooks, design documents, and component documentation.
- Collaborate across infrastructure, platform software, security, and ground station operations on cross-cutting work.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
