Sr. DevOps (8-12 yrs)

Advanced Space | Full-time | Onsite We’re going to the Moon. Think you’ve got what it takes? About the Role At Advanced Space, we're enabling humanity's return to the Moon and building the technologies that will take us to Mars and beyond. We're looking for a Sr. DevOps Engineer with 8–12 years of experience to empower the successful execution of some of the most ambitious space missions in the industry. In this role, you'll design, build, automate, and operate secure, scalable infrastructure supporting mission-critical aerospace workloads. You'll partner closely with engineering teams to deliver cloud infrastructure, Kubernetes platforms, CI/CD pipelines, and automation that enable reliable software delivery across development, test, and production environments. We're looking for someone who thrives in technically demanding environments, enjoys solving complex infrastructure challenges, and is passionate about building secure, reliable platforms that enable engineers to deliver real missions, not just concepts. This position is open to U.S. Citizens only. Visa sponsorship is not available. The ability to obtain and maintain a Top Secret security clearance is required. About Advanced Space Advanced Space exists to enable the sustainable exploration, development, and settlement of space through innovative software, mission services, and technology solutions. As the owner and operator of NASA's CAPSTONE™ mission and the Prime Contractor for AFRL's Oracle mission, we're helping shape the future of cislunar exploration while supporting commercial, civil, and national security customers. Our team combines deep technical expertise with an entrepreneurial mindset. We move quickly, collaborate across disciplines, and empower every engineer to make meaningful contributions. If you're passionate about solving challenging problems and seeing your work fly in space, you'll fit right in. What You'll Actually Do Build and operate secure cloud infrastructure. Design, build, automate, and operate secure, scalable, highly available AWS infrastructure for mission-critical aerospace workloads. Develop reusable infrastructure-as-code modules and deployment workflows using Terraform, AWS CDK, or comparable tools. Develop reliable CI/CD and Kubernetes platforms. Build and improve GitLab CI/CD pipelines that enable repeatable software and infrastructure delivery. Operate container platforms using Kubernetes, preferably Amazon EKS, including workload deployment, Helm, scaling, cluster upgrades, access controls, and security hardening. Design and maintain advanced cloud networking. Implement AWS networking architectures across multi-account environments, including VPCs, routing, security groups, network ACLs, DNS, load balancing, private connectivity, VPC endpoints, Transit Gateway, Direct Connect, and site-to-site VPNs. Support AWS GovCloud (US) environments and their unique deployment and service requirements. Strengthen identity, security, and compliance. Implement federated identity and access management using SAML, OIDC, OAuth 2.0, AWS IAM Identity Center, and enterprise identity providers such as Okta, Keycloak, or Authentik. Apply DevSecOps practices throughout the delivery lifecycle, including least-privilege access, secrets management, encryption, policy enforcement, vulnerability scanning, automated compliance checks, and auditable change control. Automate and improve platform operations. Develop Python-based automation, internal tooling, API integrations, and operational utilities using sound software engineering practices. Establish observability through metrics, logs, traces, alerting, dashboards, and runbooks. Troubleshoot complex infrastructure, networking, identity management, Kubernetes, and CI/CD issues while supporting incident response and root-cause analysis. Provide technical leadership and enable engineering teams. Partner with engineering teams to deliver self-service platform capabilities, clear standards, practical documentation, and secure-by-default patterns. Mentor engineers, contribute to architecture reviews and platform roadmaps, and continuously improve the reliability, security, and scalability of our infrastructure. Who Thrives Here You have 8–12 years of progressively responsible experience in DevOps, platform engineering, site reliability engineering, cloud infrastructure, or a closely related discipline. You have strong hands-on experience designing and operating production workloads in AWS . You have experience delivering infrastructure through Terraform, AWS CDK, CloudFormation, or comparable infrastructure-as-code tools , with a strong preference for hands-on Terraform and/or CDK experience. You're experienced in building, maintaining, and troubleshooting GitLab CI/CD pipelines or comparable CI/CD platforms. You have production experience with Kubernetes , including containerized workloads, networking, RBAC, resource management, deployment strategies, and operational troubleshooting. Experience with Amazon EKS, Docker, and Helm is strongly preferred. You have advanced AWS networking knowledge, including VPC design, subnetting, route tables, security groups, network ACLs, DNS, load balancers, private connectivity, and multi-account networking. You understand federated identity and access management, including SAML, OIDC, OAuth 2.0, MFA, role-based access control, and least-privilege IAM design . You have hands-on experience integrating or administering an identity provider such as Okta, Keycloak, Authentik , or an equivalent enterprise identity platform. You're proficient in Python , including object-oriented programming, automated testing, API integrations, and maintainable automation or platform tooling. Experience with Bash and boto3 is expected. You have experience applying infrastructure and application security practices, including IAM, encryption and KMS, secrets management, vulnerability