Sr. DevOps (8-12 yrs)

Advanced Space | Full-time | Onsite

We’re going to the Moon. Think you’ve got what it takes?

About the Role

At Advanced Space, we're enabling humanity's return to the Moon and building the technologies that will take us to Mars and beyond. We're looking for a Sr. DevOps Engineer with 8–12 years of experience to empower the successful execution of some of the most ambitious space missions in the industry.

In this role, you'll design, build, automate, and operate secure, scalable infrastructure supporting mission-critical aerospace workloads. You'll partner closely with engineering teams to deliver cloud infrastructure, Kubernetes platforms, CI/CD pipelines, and automation that enable reliable software delivery across development, test, and production environments.

We're looking for someone who thrives in technically demanding environments, enjoys solving complex infrastructure challenges, and is passionate about building secure, reliable platforms that enable engineers to deliver real missions, not just concepts.

This position is open to U.S. Citizens only. Visa sponsorship is not available.

The ability to obtain and maintain a Top Secret security clearance is required.

About Advanced Space

Advanced Space exists to enable the sustainable exploration, development, and settlement of space through innovative software, mission services, and technology solutions. As the owner and operator of NASA's CAPSTONE™ mission and the Prime Contractor for AFRL's Oracle mission, we're helping shape the future of cislunar exploration while supporting commercial, civil, and national security customers.

Our team combines deep technical expertise with an entrepreneurial mindset. We move quickly, collaborate across disciplines, and empower every engineer to make meaningful contributions. If you're passionate about solving challenging problems and seeing your work fly in space, you'll fit right in.

What You'll Actually Do

Build and operate secure cloud infrastructure.

Design, build, automate, and operate secure, scalable, highly available AWS infrastructure for mission-critical aerospace workloads. Develop reusable infrastructure-as-code modules and deployment workflows using Terraform, AWS CDK, or comparable tools.

Develop reliable CI/CD and Kubernetes platforms.

Build and improve GitLab CI/CD pipelines that enable repeatable software and infrastructure delivery. Operate container platforms using Kubernetes, preferably Amazon EKS, including workload deployment, Helm, scaling, cluster upgrades, access controls, and security hardening.

Design and maintain advanced cloud networking.

Implement AWS networking architectures across multi-account environments, including VPCs, routing, security groups, network ACLs, DNS, load balancing, private connectivity, VPC endpoints, Transit Gateway, Direct Connect, and site-to-site VPNs. Support AWS GovCloud (US) environments and their unique deployment and service requirements.

Strengthen identity, security, and compliance.

Implement federated identity and access management using SAML, OIDC, OAuth 2.0, AWS IAM Identity Center, and enterprise identity providers such as Okta, Keycloak, or Authentik. Apply DevSecOps practices throughout the delivery lifecycle, including least-privilege access, secrets management, encryption, policy enforcement, vulnerability scanning, automated compliance checks, and auditable change control.

Automate and improve platform operations.

Develop Python-based automation, internal tooling, API integrations, and operational utilities using sound software engineering practices. Establish observability through metrics, logs, traces, alerting, dashboards, and runbooks. Troubleshoot complex infrastructure, networking, identity management, Kubernetes, and CI/CD issues while supporting incident response and root-cause analysis.

Provide technical leadership and enable engineering teams.

Partner with engineering teams to deliver self-service platform capabilities, clear standards, practical documentation, and secure-by-default patterns. Mentor engineers, contribute to architecture reviews and platform roadmaps, and continuously improve the reliability, security, and scalability of our infrastructure.

Who Thrives Here

You have 8–12 years of progressively responsible experience in DevOps, platform engineering, site reliability engineering, cloud infrastructure, or a closely related discipline.

You have strong hands-on experience designing and operating production workloads in AWS .

You have experience delivering infrastructure through Terraform, AWS CDK, CloudFormation, or comparable infrastructure-as-code tools , with a strong preference for hands-on Terraform and/or CDK experience.

You're experienced in building, maintaining, and troubleshooting GitLab CI/CD pipelines or comparable CI/CD platforms.

You have production experience with Kubernetes , including containerized workloads, networking, RBAC, resource management, deployment strategies, and operational troubleshooting. Experience with Amazon EKS, Docker, and Helm is strongly preferred.

You have advanced AWS networking knowledge, including VPC design, subnetting, route tables, security groups, network ACLs, DNS, load balancers, private connectivity, and multi-account networking.

You understand federated identity and access management, including SAML, OIDC, OAuth 2.0, MFA, role-based access control, and least-privilege IAM design .

You have hands-on experience integrating or administering an identity provider such as Okta, Keycloak, Authentik , or an equivalent enterprise identity platform.

You're proficient in Python , including object-oriented programming, automated testing, API integrations, and maintainable automation or platform tooling. Experience with Bash and boto3 is expected.

You have experience applying infrastructure and application security practices, including IAM, encryption and KMS, secrets management, vulnerability management, centralized logging, monitoring, and security automation.

You have strong Linux and Git fundamentals.

You communicate technical decisions, risks, and tradeoffs effectively with engineers, program stakeholders, and customers.

You're a U.S. citizen and can obtain and maintain a Top Secret security clearance .

You take ownership. When you see a challenge, you work with the team to solve it.

Bonus Points if You Have Experience With

Designing, deploying, or operating workloads in AWS GovCloud (US) .

Working in regulated, government, civil-space, national-security, or defense-adjacent environments.

Compliance-oriented cloud operations involving FedRAMP, FISMA, NIST SP 800-53, DoD SRG, ITAR, CJIS , or CIS AWS Foundations Benchmark controls.

AWS Organizations, multi-account landing zones, Service Control Policies, cross-account roles, centralized logging, AWS Config, GuardDuty, Security Hub, CloudTrail, and VPC Flow Logs.

Policy-as-code or Kubernetes admission controls using OPA/Gatekeeper, Kyverno, or equivalent technologies.

GitOps practices and tools such as Argo CD or Flux.

Infrastructure monitoring and observability with CloudWatch, Prometheus, Grafana, OpenTelemetry, ELK/OpenSearch, or similar platforms.

Incident management, disaster recovery planning, backup and restore automation, and defining or validating recovery point objectives (RPOs) and recovery time objectives (RTOs).

AWS certifications such as AWS Certified DevOps Engineer – Professional, AWS Certified Security – Specialty, AWS Certified Advanced Networking – Specialty, or AWS Certified Solutions Architect – Professional.

A bachelor's degree in computer science, engineering, information systems, or a related field, or equivalent practical experience.

Success is Measured By

Delivering secure, scalable, and highly available AWS infrastructure that supports mission-critical aerospace workloads.

Building reliable, repeatable CI/CD pipelines and infrastructure automation that improve engineering productivity.

Operating secur