Senior Platform Engineer
About The Position
K2 is building the largest and highest-power satellites ever flown, unlocking performance levels previously out of reach across every orbit. Backed by $450M from leading investors including Altimeter Capital, Redpoint Ventures, T. Rowe Price, Lightspeed Venture Partners, Alpine Space Ventures, and others – with an additional $500M in signed contracts across commercial and US government customers – we’re mass-producing the highest-power satellite platforms ever built for missions from LEO to deep space. The rise of heavy-lift launch vehicles is shifting the industry from an era of mass constraint to one of mass abundance, and we believe this new era demands a fundamentally different class of spacecraft. Engineered to survive the harshest radiation environments and to fully capitalize on today’s and tomorrow’s massive rockets, K2 satellites deliver unmatched capability at constellation scale and across multiple orbits. With multiple launches planned through 2026 and 2027, we're Building Bigger to develop the solar system and become a Kardashev Type II (K2) civilization. If you are a motivated individual who thrives in a fast-paced environment and you're excited about contributing to the success of a groundbreaking Series C space startup, we’d love for you to apply. The Role Our enterprise software team builds the digital backbone that powers K2 Space’s satellite design, manufacturing, and mission operations. We develop tools that connect engineering, production, and mission control into a seamless ecosystem — enabling our hardware to get from concept to orbit faster than ever before. As we continue to grow, we’re looking for a Senior Platform Engineer on our Enterprise Information Systems team, you must possess strong technical skills and a sense of empathy for your fellow developers. You will work closely with other talented engineers, architects and senior stakeholders to design, implement, and deliver on our roadmap.
Requirements
- BS/MS in Computer Science (or equivalent) and 8+ years of experience building and operating distributed/platform systems with production Kubernetes/EKS ownership
- Proficiency in at least one language (Go, TypeScript, Python, Java) and disciplined SCM workflows (branching, reviews, automated gates)
- Solid grounding in cloud + Kubernetes networking, for example VPC & subnet layout, routing, east-west segmentation, service exposure, DNS/CoreDNS, policy enforcement, and CNI behaviour
- Practical service trust & identity knowledge such as mTLS, certificate automation/rotation, PKI/CA or SPIFFE/SPIRE concepts
- Working understanding of traffic resilience & performance: timeouts, retries, backoff, circuit breaking, rate limiting, failure isolation, latency and saturation analysis
- Experience with developer connectivity abstractions: K8s CRDs/operators, guardrails (admission, lint, simulation) and automated tests
- Competence in observability & SLOs (metrics, tracing, structured logs, L4/L7 telemetry, end‑to-end request path, visibility into applied policies, SLI/SLO definition & enforcement)
- Experience with infrastructure as code and delivery: Terraform or CDK, GitOps (Argo/Flux), progressive/canary rollouts, policy-as-code integration
- Operational experience: chaos/fault injection, component upgrades (CNI, proxies, cert issuers), incident response
- Ability to communicate and mentor on networking & identity across varied fluency levels
Nice To Haves
- Working knowledge of eBPF / Cilium Hubble or Envoy extensions is an asset
- Exposure to Gateway API or service mesh (Istio, Linkerd, ambient), multi region failover, IPv6/dual stack planning is an asset
- Comfort with advanced DNS/discovery (split horizon, conditional forwarding), policy engines (Kyverno/OPA), API inventory & cost attribution metadata is an asset
Responsibilities
- Design and evolve self‑service connectivity abstractions enabling scoped segmentation, governed exposure, adaptive ingress/egress, and traceable traffic
- Own service identity & trust (mTLS, cert automation, least‑privilege east‑west, governed egress) with broad coverage and low friction
- Engineer resilient traffic paths (timeouts, retries, circuit breaking, failure isolation) and harden them via chaos tests, automated remediation, and MTTR reduction
- Establish observability standards so end‑to-end request path and applied policies are visible (source, identity, route, outcome, saturation, cost) across environments
- Provide approachable docs & diagnostics (guides, diagrams, ‘why can’t this connect?’ flows) to shorten support loops
- Optimize performance & cost (latency budgets, cross‑AZ transfer, IP consumption, LB efficiency) and act on anomalies
- Apply threat & abuse modelling to connectivity surfaces (API exposure, egress, identity propagation) using industry principles while keeping solutions developer‑friendly
- Steward lifecycle and adoption including versioning, safe migrations, deprecations, usage telemetry, and proactive pruning of unused resources
- Mentor engineers and partner with adjacent DevX teams to embed networking abstractions into golden paths, raising organizational fluency and consistency
- Own, operate, and maintain network related infrastructure within and adjacent to EKS
Benefits
- Comprehensive benefits package including paid time off, medical/dental/vision/ coverage, life insurance, paid parental leave, and many other perks
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Number of Employees
101-250 employees
