Flight Software Deployment Engineer

ICEYE; Warszawa; On-site; PLN 388,000 - 517,000; Full time

Job summary

ICEYE is seeking a Flight Software Deployment Engineer to join the Hybrid team in Warsaw and Espoo. You will own the software deployment path from build to flight-ready updates, working across embedded Linux and OTA update tooling to ensure secure, traceable releases for satellites.

The role emphasizes cross-compiled embedded binaries, immutable releases, and tight integration with CI/CD pipelines. You will collaborate with the Build & Release Team to harden packaging and ensure safe deployment

Qualifications

• Embedded software engineering with hands-on embedded Linux development and cross-compilation for ARM targets.
• Production CI/CD experience for compiled artifacts; GitHub Actions required; workflow hardening advantageous.
• Proficient in C/C++ build environments and Python/Bash for automation.
• Experience with release integrity: signing, PKI, AWS KMS, trust chains, and immutable artifacts storage.

Responsibilities

• Hands-on software engineering of the satellite on-board updating system: features, maintenance, tests, and documentation.
• Contribute to the build layer across the flight software domain to ensure consistent builds, versioning, and packaging.
• Harden packaging and signing pipelines with least-privilege, approvals, and robust key management.
• Collaborate with the Linux platform team on OTA update deployment strategies, including filesystem layout and access control for safe installs.

Skills

Embedded software

CI/CD

GitHub Actions

C/C++ development

Python/Bash automation

Release integrity controls

PKI and signing

OPKG packaging

Cross-compilation

Education

Embedded systems degree

Tools

GitHub Actions

Buildroot

opkg

Job description

Role highlights:

• Flight Software Deployment Engineer

• Location: Warsaw, Poland/ Espoo, Finland

• Department: Flight Software Build & Release Team

• Reports to: Flight Software Build & Release Team Lead

• Employment type: Permanent

• Workplace model: Hybrid (3 days in the office)

• Employment is subject to applicable security screening (incl. SUPO, where required)

Why this role matters:

The Build & Release team owns the path from source to flight-ready software across growing satellite constellations. This role exists because every artifact that reaches satellites in orbit must be reproducible, traceable, and verifiable. A bad update is not a simple rollback, it could mean a satellite becomes at risk.

This is not a generic SRE or DevOps role, the production environment is composed of satellites flying 500 km above our heads, and the software artifacts are cross-compiled embedded binaries. The role is in the realm of half build engineering and half embedded Linux development, you need to be willing to work at both ends.

Satellites are treated to OTA updates regularly which our team must make sure are built and deployed the right way, utilizing software development best practices.

Who We Are

ICEYE is the world leader in sovereign intelligence from space. We deliver persistent monitoring capabilities to detect and respond to changes in any location on Earth.

ICEYE owns the world's largest and most advanced SAR (synthetic aperture radar) satellite constellation. To our customers we provide intelligence with unmatched quality, latency and revisit times, in any weather, day or night. To governments who choose to operate their own constellation we provide this proven capability as a sovereign system.

ICEYE-built constellations serve customers in defence and intelligence, environmental monitoring, insurance and emergency management. We enable fast decisions that contribute to a safer future.

Founded and headquartered in Finland, ICEYE operates globally with over 1000 employees across Europe, North America, the Middle East, and Asia-Pacific.

Your day-to-day responsibilities

• Hands on software engineering of our satellite on-board updating system, built to deploy software and firmware updates: features, maintenance, tests and documentation.

• Contribute to the build layer across the flight software domain, so every repository is built, versioned and packaged the same way.

• Enforce immutable releases and harden the packaging and signing pipelines: least-privilege permissions, pinned workflows and dependencies, approvals, and proper signing key management.

• Work with the Linux platform team on how updates land on the satellite on-board computers, covering packaging format, filesystem layout and access control, making sure what we build installs cleanly and safely.

What we’re looking for

Must haves:

• Embedded software engineering experience, with hands-on embedded Linux development: cross-compilation for ARM or similar targets, kernel configuration, device tree overlays, root filesystem and image construction.

• Production CI/CD experience for compiled artifacts, not only containers or web deployments. GitHub Actions specifically is required, and workflow hardening experience is valuable.

• Working proficiency in C and C++ build environments, and in Python and Bash for automation.

• Experience implementing release integrity controls, immutable artifacts storage. Signing key management, PKI and trust chains, AWS object-lock storage and cloud key management are all valuable here.

• Shipping software to embedded devices already in the field with a package-based update mechanism, ideally opkg, under controlled release processes, quality gates and formal sign-of

Nice to haves:

• Command of CMake, including multi-repository setups, toolchain files, and shared build infrastructure that other teams consume. Buildroot experience is relevant here.

Application Process

• Conversation with talent acquisition (~30 min).

• Screening with the hiring manager (~60 min).

• Technical test - take home task to be completed in 3 to 5 working days.

• Technical deep-dive (~90 min).

• On-site office visit & director interview (~60 min).

Working at ICEYE

At ICEYE, you’ll join a diverse and highly engaged team united by the ambition to make the impossible possible. As a global scale-up, we combine speed and ambition with the opportunity to take real ownership from day one. Your growth, wellbeing, and success are a priority, with continuous professional development, training opportunities, and a culture where collaboration is how we win.

How We Work (Our Values)

Make the impossible possible: We set ambitious goals and stay calm under pressure. We bring grit, optimism, and ownership when things get hard, and we keep moving until we find a way.

• Be curious: Go deep, ask questions, listen carefully, and think critically. Understand the "why" behind decisions.

• See the big picture: Stay close to what’s happening across the company so you can make better decisions. Consider how your work affects others.

• Drive effective teamwork: Create psychological safety, invite different perspectives, and build inclusive teams. There are no bad questions.

• Act as one team: We win together. We match tasks to the right owner and stay agile as priorities shift.

• Have fun: What we do matters—and it should be enjoyable. Celebrate progress, take pride in results, and share the wins.

Benefits

Our benefits are designed to support your health and wellbeing, at work and beyond. We keep improving them based on employee feedback, and offerings vary by location. Talent Acquisition will confirm what applies for this role and location during the process.

Our Commitment to Diversity, Equity, and Inclusion

We want ICEYE to be a place where people can be themselves and do great work. Different backgrounds and perspectives make us stronger, which is why we work to create an environment where people feel included, respected, and able to speak up. Whatever your background, we want you to bring your authentic self to the table.

We’re committed to fair, inclusive hiring and equal opportunity. Everyone is welcome to apply. If you need any adjustments or support during the recruitment process, tell us—we’ll do our best to help.