Cloud Engineer

Job description

Team & Reporting Line: Cloud Infrastructure 

Our Mission  

At constellr, we use thermal intelligence from space to understand what is happening on Earth - where, when and at scale. Our satellite constellation delivers high-resolution land surface temperature data, giving governments, defence organisations, commercial operators and global institutions the intelligence they need to monitor change, assess risk and make better-informed decisions.

From national security and critical infrastructure to agriculture and climate resilience, constellr turns temperature into actionable intelligence for a changing world.

Your Role

You'll join our central Infrastructure team to help constellr build and operate the cloud infrastructure behind our software systems - the Ground Segment for satellite operations, Data and User Segments, and Space Engineering-related systems as well as the interface to our business IT and on-prem teams. 

We currently operate platform-style and are largely self-organised, but with a real ops component: we support other teams via tickets, incident response, and bug fixes, and own infrastructure reliability end-to-end. Beyond day-to-day operations, we proactively shape “golden paths” for engineering teams company-wide rather than only reacting to requests. Security and cloud agnosticity are first-class concerns for us - we work toward high standards (e.g., ISO/IEC 27001) and collaborate closely with our Security/Compliance and IT departments, who own dedicated responsibilities in this area. 

We’re hiring at a mid-to-senior level where tenure isn’t the leading indicator, more importantly you are expected to be able to see the bigger picture and weigh trade-offs across systems and teams, proactively surface issues and are comfortable owning topics end-to-end. 

Key responsibilities

• Design and operateinfrastructure across multiple cloud providers (currently AWS, expanding to an EU-sovereign provider), using IaC(Terraform/Terramate) with an eye toward security and portability while avoiding unnecessary vendor lock-in. 

• Take ownership of key systems and topics alongside theteamwhile contributingactively to shared team responsibilities and outcomes, not just your own backlog. 

• Improve the reliability, performance, and scalability of systems deployed in the cloud. 

• Manage secrets, encryption, and workload certificates (SOPS, KMS/HSM equivalents) consistently across cloud environments. 

• Partner with theSecurity/Compliance departmenton ISO/IEC27001 controls, risk assessments, and audits; implement infrastructure controls satisfying security requirements (access control, segregation of duties, auditability, data residency). 

• Contribute to improvingthe observability stack to better monitor systems in the cloud and on-prem. 

• Help spreaddomain and tech knowledge across the team to prevent siloing. 

• Support other engineering teams via tickets and incident response while identifyingrecurring pain points to turn into paved-road solutions (golden paths, self-service tooling, standardized platform patterns). 

• Own the cloud side of shared boundaries with Ops IT - cloud network design and address ranges, off-site backup targets, identityand privileged access into cloud resources - and keep those interfaces documented and reviewable. 

• Provide architectural support and guidance to other engineering teams on selectedcloud, platform, and security topics. 

• Contribute to and maintaininfrastructure documentation and onboarding materials. 

Job requirements

About you  

Required:  

• Significant hands-on experience designing, securing, administering and operating software systems in the cloud. 

• Hands-on experience with AWS or a comparable hyperscaler in a production setting. 

• Experience with containerization, Kubernetes, and cloud-agnostic deployment technologies. 

• Experience with VPCs, cloud networking, and modern zero-trust/mesh networking tools (e.g., Tailscale). 

• Solid working knowledge of Terraform; comfortable adopting Terramate (or similar IaC orchestration tooling) if you haven't used it yet. 

• Experience with observability stacks (Prometheus, Grafana, time-series stores). 

• Solid working knowledge in practical security fundamentals: secrets/encryption management, IAM least-privilege, network segmentation, audit logging. 

• Comfortable with Linux systems and VM administration. 

• A track record of owning systems end-to-end while being a reliable, collaborative team member. 

Nice to Have: 

• Experience with EU sovereign providers such as STACKIT or Scaleway. 

• Experience with incident response / operational practices. 

• Exposure to ISO/IEC 27001 (or comparable public-sector/security-relevant certifications), or interest in contributing to certification efforts. 

• Experience with GitOps/CD tooling (e.g., Argo CD, Argo Workflows). 

• Experience with configuration management tooling (e.g. Ansible). 

• Experience in aerospace, satellite ground segment, or other regulated/mission-critical environments. 

• Experience with cloud-agnostic secrets management (e.g., OpenBao). 

• Openness to being on-call. 

Why join constellr?

• High-Impact National Security Mission:  Be part of an ambitious mission to launch the world’s first commercial thermal infrared constellation, delivering sovereign-grade "behavioural" intelligence from space to close critical blind spots for defence, intelligence, and maritime surveillance agencies.
• Fast-Paced "New Space" Innovation:  Work at the leading edge of a rapidly evolving defence sector. By leveraging modern, agile New Space methodologies, you will help design, build, and deploy dual-use thermal payloads into operational orbit at a speed and scale that traditional aerospace models simply cannot match.
• Broad Interdisciplinary Exposure:  Accelerate your professional growth by collaborating daily with a diverse, international cohort of astrophysicists, software developers, and defence-system engineers.
• Inclusive & Scientific Culture:  Join a high-trust team deeply committed to diversity, inclusion, and scientific excellence, where academic curiosity is paired with high autonomy and a flat hierarchy.
• Financial Upside & Well-being:  Benefit from a Virtual Share Option Plan (VSOP) for permanent employees, giving you a true stake in the company's growth, alongside highly flexible hybrid working models.