Cloud Engineer

Job description

Job description Team & Reporting Line: Cloud Infrastructure Our Mission At constellr, we use thermal intelligence from space to understand what is happening on Earth - where, when and at scale. Our satellite constellation delivers high-resolution land surface temperature data, giving governments, defence organisations, commercial operators and global institutions the intelligence they need to monitor change, assess risk and make better-informed decisions. From national security and critical infrastructure to agriculture and climate resilience, constellr turns temperature into actionable intelligence for a changing world. Your Role You'll join our central Infrastructure team to help constellr build and operate the cloud infrastructure behind our software systems — the Ground Segment for satellite operations, Data and User Segments, and Space Engineering-related systems as well as the interface to our business IT and on-prem teams. We currently operate platform-style and are largely self-organised, but with a real ops component: we support other teams via tickets, incident response, and bug fixes, and own infrastructure reliability end-to-end. Beyond day-to-day operations, we proactively shape “golden paths” for engineering teams company-wide rather than only reacting to requests. Security and cloud agnosticity are first-class concerns for us — we work toward high standards (e.g., ISO/IEC 27001) and collaborate closely with our Security/Compliance and IT departments, who own dedicated responsibilities in this area. We’re hiring at a mid-to-senior level where tenure isn’t the leading indicator, more importantly you are expected to be able to see the bigger picture and weigh trade-offs across systems and teams, proactively surface issues and are comfortable owning topics end-to-end. Key responsibilities Design and operate infrastructure across multiple cloud providers (currently AWS, expanding to an EU-sovereign provider ) , using IaC (Terraform/ Terramate ) with an eye toward security and portability while avoiding unnecessary vendor lock-in . Take ownership of key systems and topics alongside the team while c ontribut ing actively to shared team responsibilities and outcomes, not just your own backlog . I mprove the reliability, performance, and scalability of systems deployed in the cloud . Manage secrets, encryption, and workload certificates (SOPS, KMS/HSM equivalents) consistently across cloud environments . Partner with the Security/Compliance department on ISO / IEC 27001 controls, risk assessments, and audits; implement infrastructure controls satisfying security requirements (access control, segregation of duties, auditability, data residency ) . C ontribute to improv ing the observability stack to better monitor systems in the cloud and on-prem. Help spread domain and tech knowledge across the team to prevent siloing. Support other engineering teams via tickets and incident response while identifying recurring pain points to turn into paved-road solutions (golden paths, self-service tooling, standardized platform patterns) . Own the cloud side of shared boundaries with Ops IT — cloud network design and address ranges, off-site backup targets, identity and privileged access into cloud resources — and keep those interfaces documented and reviewable. Provide architectural support and guidance to other engineering teams on select ed cloud, platform, and security topics. Contribute to and maintain infrastructure documentation and onboarding materials . Job requirements About you Required: Significant hands-on experience designing, securing, administering and operating software systems in the cloud. Hands-on experience with AWS or a comparable hyperscaler in a production setting. Experience with containerization, Kubernetes, and cloud-agnostic deployment technologies. Experience with VPCs, cloud networking, and modern zero-trust/mesh networking tools (e.g., Tailscale). Solid working knowledge of Terraform; comfortable adopting Terramate (or similar IaC orchestration tooling) if you haven't used it yet. Experience with observability stacks (Prometheus, Grafana, time-series stores). Solid working knowledge in practical security fundamentals: secrets/encryption management, IAM least-privilege, network segmentation, audit logging . Comfortable with Linux systems and VM administration. A track record of owning systems end-to-end while being a reliable, collaborative team member. Nice to Have : Experience with EU sovereign providers such as STACKIT or Scaleway. Experience with incident response / operational practices. Exposure to ISO/IEC 27001 (or comparable public-sector/security-relevant certifications), or interest in contributing to certification efforts. Experience with GitOps/CD tooling (e.g., Argo CD, Argo Workflows). Experience with configuration management tooling (e.g. Ansible). Experience in aerospace, satellite ground segment, or other regulated/mission-critical environments. Experience with cloud- agnostic secrets management (e.g., OpenBao) . Openness to being on-call . Why join constellr? High-Impact National Security Mission: Be part of an ambitious mission to launch the world’s first commercial thermal infrared constellation, delivering sovereign-grade "behavioural" intelligence from space to close critical blind spots for defence, intelligence, and maritime surveillance agencies. Fast-Paced "New Space" Innovation: Work at the leading edge of a rapidly evolving defence sector. By leveraging modern, agile New Space methodologies, you will help design, build, and deploy dual-use thermal payloads into operational orbit at a speed and scale that traditional aerospace models simply cannot match. Broad Interdisciplinary Exposure: Accelerate your professional growth by collaborating daily with a diverse, international cohort of astrophysicists, software developers, and defence-system engineers. Inclusive & Scientific Culture: Join a high-trust team deeply committed to diversity, inclusion, and scientific excellence, where academic curiosity is paired with high autonomy and a flat hierarchy. Financial Upside & Well-being: Benefit from a Virtual Share Option Plan (VSOP) for permanent employees, giving you a true stake in the company's growth, alongside highly flexible hybrid working models.