Senior Infrastructure Engineer (Platform)

The role

The Infrastructure Engineer – Cloud owns and operates a cloud infrastructure environment supporting a global network of ground stations. You will work with Platform software engineers to implement and maintain cloud infrastructure, identity systems, and observability stacks.

What you will do

• Own and operate cloud infrastructure components including cloud accounts, k8s clusters, CA, secrets, IAM, and observability pipeline.
• Build and maintain infrastructure as code.
• Define and implement GitOps practices and CI gates.
• Implement cloud-side networking including VPCs, transit route tables, VPNs, Direct Connect, and egress/ingress inspection.
• Carry on-call for the cloud stack.
• Resolve incidents independently and run post-incident reviews.
• Partner with security engineering and compliance on controls implementation.
• Automate manual work to reduce toil.
• Write and maintain runbooks, design docs, and component documentation.
• Collaborate across infrastructure, platform software, security, and ground station operations.

Required qualifications

• 2–7 years of production infrastructure experience (SRE, DevOps, platform, cloud, or systems engineering).
• Depth in cloud: multi-account organizations, IAM, VPC networking, EKS or equivalent managed Kubernetes.
• Strong IaC experience: state management, CI-driven plan and apply, working in a shared monorepo.
• Working competence across Linux, networking fundamentals, containers and Kubernetes, CI/CD pipelines, and observability tooling.
• Demonstrated end-to-end ownership of a production system: design, implementation, operation.
• On-call experience in a production environment with measurable reliability outcomes.
• Comfortable in code (Python, Go, or similar) for automation, tooling, and integration work.
• Strong technical writing: design docs, runbooks, post-mortems.

Nice to have

• AWS GovCloud or other regulated or air-gapped cloud environments.
• Secrets and identity infrastructure: Vault, Okta or IAM Identity Center integration, workload identity.
• Observability at scale: VictoriaMetrics or Prometheus, Grafana, alerting design, log pipelines (Vector, Loki).
• EKS: multi-cluster ArgoCD, cluster lifecycle, node and network policy, workload isolation.
• Cloudflare: Zero Trust, DNS, tunnels, WAF.
• Compliance partnership: implementing technical controls for CMMC, NIST 800-171, NIST 800-53, FedRAMP.
• Hybrid connectivity between cloud and on-prem or edge sites.

Before you apply

• To conform to U.S. Government space technology export regulations, you must be a U.S. citizen, lawful permanent resident of the U.S., protected individual as defined by 8 U.S.C. 1324b(a)(3), or eligib

About the company

Northwood is a modern space infrastructure company building a global network of phased array and parabolic ground stations. They design, build, and deploy scalable systems for satellite missions.