Flight Software Deployment Engineer

ICEYE; Espoo; Hybrid; EUR 70,000 - 100,000; Full time

Job summary

ICEYE in Espoo (Finland) is seeking a Flight Software Deployment Engineer to join the Build & Release Team. The role focuses on delivering reproducible, verifiable OTA updates for satellite constellations, combining embedded Linux development with build-system engineering.

You will own the packaging, signing, and distribution pipelines, collaborate with the Linux platform team, and ensure secure, immutable releases for flight hardware.

Qualifications

• Embedded software engineering with hands‑on embedded Linux development (ARM cross‑compile, kernel config, root filesystem)
• Production CI/CD experience with GitHub Actions and workflow hardening
• Proficiency in C/C++ builds and Python/Bash for automation
• Experience implementing release integrity controls, signing key management and cloud key storage

Responsibilities

• Hands on software engineering of satellite on‑board updating system for software/firmware updates
• Contribute to the build layer across the flight software domain to ensure consistent builds and packaging
• Harden packaging and signing pipelines with least‑privilege and proper approvals
• Collaborate with Linux platform team on how updates land on satellite onboard computers, ensuring safe installation

Skills

Embedded C/C++

ARM cross‑compile

CI/CD

GitHub Actions

Python

Bash

Security signing

PKI / trust chains

Tools

CMake

Buildroot

Job description

• Location: Warsaw, Poland/ Espoo, Finland
• Department: Flight Software Build & Release Team
• Reports to: Flight Software Build & Release Team Lead
• Employment type: Permanent
• Workplace model: Hybrid (3 days in the office)
• Employment is subject to applicable security screening (incl. SUPO, where required)

Role Highlights

• Flight Software Deployment Engineer
• Location: Warsaw, Poland/ Espoo, Finland
• Department: Flight Software Build & Release Team
• Reports to: Flight Software Build & Release Team Lead
• Employment type: Permanent
• Workplace model: Hybrid (3 days in the office)
• Employment is subject to applicable security screening (incl. SUPO, where required)

Why This Role Matters

The Build & Release team owns the path from source to flight-ready software across growing satellite constellations. This role exists because every artifact that reaches satellites in orbit must be reproducible, traceable, and verifiable. A bad update is not a simple rollback, it could mean a satellite becomes at risk.

This is not a generic SRE or DevOps role, the production environment is composed of satellites flying 500 km above our heads, and the software artifacts are cross‑compiled embedded binaries. The role is in the realm of half build engineering and half embedded Linux development, you need to be willing to work at both ends.

Satellites are treated to OTA updates regularly which our team must make sure are built and deployed the right way, utilizing software development best practices.

Who We Are

ICEYE is the world leader in sovereign intelligence from space. We deliver persistent monitoring capabilities to detect and respond to changes in any location on Earth.

ICEYE owns the world's largest and most advanced SAR (synthetic aperture radar) satellite constellation. To our customers we provide intelligence with unmatched quality, latency and revisit times, in any weather, day or night. To governments who choose to operate their own constellation we provide this proven capability as a sovereign system.

ICEYE‑built constellations serve customers in defence and intelligence, environmental monitoring, insurance and emergency management. We enable fast decisions that contribute to a safer future.

Founded and headquartered in Finland, ICEYE operates globally with over 1000 employees across Europe, North America, the Middle East, and Asia‑Pacific.

Your Day-to-day Responsibilities

• Hands on software engineering of our satellite on-board updating system, built to deploy software and firmware updates: features, maintenance, tests and documentation.
• Contribute to the build layer across the flight software domain, so every repository is built, versioned and packaged the same way.
• Enforce immutable releases and harden the packaging and signing pipelines: least‑privilege permissions, pinned workflows and dependencies, approvals, and proper signing key management.
• Work with the Linux platform team on how updates land on the satellite on-board computers, covering packaging format, filesystem layout and access control, making sure what we build installs cleanly and safely.

Must Haves

What we’re looking for

• Embedded software engineering experience, with hands‑on embedded Linux development: cross‑compilation for ARM or similar targets, kernel configuration, device tree overlays, root filesystem and image construction.
• Production CI/CD experience for compiled artifacts, not only containers or web deployments. GitHub Actions specifically is required, and workflow hardening experience is valuable.
• Working proficiency in C and C++ build environments, and in Python and Bash for automation.
• Experience implementing release integrity controls, immutable artifacts storage. Signing key management, PKI and trust chains, AWS object‑lock storage and cloud key management are all valuable here.
• Shipping software to embedded devices already in the field with a package‑based update mechanism, ideally opkg, under controlled release processes, quality gates and formal sign‑of

Nice To Haves

• Command of CMake, including multi‑repository setups, toolchain files, and shared build infrastructure that other teams consume. Buildroot experience is relevant here.

Application Process

• Conversation with talent acquisition (~30 min).
• Screening with the hiring manager (~60 min).
• Technical test - take home task to be completed in 3 to 5 working days.
• Technical deep‑dive (~90 min).
• On-site office visit & director interview (~60 min).

Working at ICEYE

At ICEYE, you’ll join a diverse and highly engaged team united by the ambition to make the impossible possible. As a global scale‑up, we combine speed and ambition with the opportunity to take real ownership from day one. Your growth, wellbeing, and success are a priority, with continuous professional development, training opportunities, and a culture where collaboration is how we win.

How We Work (Our Values)

Make the impossible possible: We set ambitious goals and stay calm under pressure. We bring grit, optimism, and ownership when things get hard, and we keep moving until we find a way.

• Be curious: Go deep, ask questions, listen carefully, and think critically. Understand the “why” behind decisions.
• See the big picture: Stay close to what’s happening across the company so you can make better decisions. Consider how your work affects others.
• Drive effective teamwork: Create psychological safety, invite different perspectives, and build inclusive teams. There are no bad questions.
• Act as one team: We win together. We match tasks to the right owner and stay agile as priorities shift.
• Have fun: What we do matters—and it should be enjoyable. Celebrate progress, take pride in results, and share the wins.

Benefits

Our benefits are designed to support your health and wellbeing, at work and beyond. We keep improving them based on employee feedback, and offerings vary by location. Talent Acquisition will confirm what applies for this role and location during the process.

Our Commitment to Diversity, Equity, and Inclusion

We want ICEYE to be a place where people can be themselves and do great work. Different backgrounds and perspectives make us stronger, which is why we work to create an environment where people feel included, respected, and able to speak up. Whatever your background, we want you to bring your authentic self to the table.

We’re committed to fair, inclusive hiring and equal opportunity. Everyone is welcome to apply. If you need any adjustments or support during the recruitment process, tell us—we’ll do our best to help.