Network Engineer (Satellite Ground Systems)

Astro Digital; San Jose (CA); On-site; USD 150,000 - 190,000; Full time

Job summary

Astro Digital is seeking a Ground Systems Engineer to architect, integrate, and maintain the digital backbone connecting satellites to mission control. You will work with GSaaS providers, Satellite Operations, IT, and Ground Software teams to ensure secure telemetry, tracking, and command and payload data flows.

Responsibilities include designing network topologies, integrating external providers, and maintaining ICDs.

Qualifications

• Bachelor's or master's degree in a related technical field or equivalent hands-on experience.
• 4+ years in system design with a focus on networking or ground software.
• Strong Linux, scripting, and network security fundamentals.

Responsibilities

• Architect and maintain the network topology between ground stations, cloud, and mission control.
• Integrate and manage external GSaaS providers via APIs and configs.
• Design secure VPNs, IPsec, and cloud routing for TT&C and data flows.
• Develop ICDs and translate requirements into software configurations.
• Troubleshoot network, software, and data-flow issues during satellite passes.
• Ensure COMSEC and secure data transit with key management.

Skills

Linux OS

Python scripting

TCP/IP networking

VPNs & firewalls

REST/gRPC

Ground station APIs

Wireshark analysis

SDR/Modem integration

Cloud concepts (AWS Direct Connect)

Technical documentation

GSaaS provider experience

CCSDS familiarity

Terraform/Ansible/Docker

Education

B.S./M.S. in Computer Science or related field

Tools

Git

REST APIs

Job description

Astro Digital designs, builds, and operates a diverse range of small satellite systems supporting space-based turnkey missions for several business applications, including earth observation, communications, in-orbit demonstrations, risk reduction, science, and exploration. Astro Digital is headquartered in Littleton, Colorado.

About the Role

As a Ground Systems Engineer focusing on networking and software, your primary role will be to architect, integrate, and maintain the digital backbone connecting our satellites to our mission control. You will work directly with external Ground Station-as-a-Service (GSaaS) providers, Satellite Operations, IT, and Ground Software teams. Your goal is to ensure seamless, secure, and automated telemetry, tracking, and command (TT&C) and payload data flows. The ability to gather information from teammates, hold a well-formed mental picture of complex network topologies and software architectures, and synthesize these inputs into a robust, scalable system is crucial.

Responsibilities

• Provider Integration: Serve as the primary technical point of contact for external ground station providers (e.g., Leaf Space, RBC Signals, KSAT Lite, AWS Ground Station), managing API integrations, software configurations, and operational nuances.
• Network Architecture: Design, implement, and maintain secure network topologies (VPNs, IPsec tunnels, cloud routing, firewall rules) between global ground station networks, cloud infrastructure, and mission control.
• Data Flow Management: Manage the software and network bring-up of new ground stations, coordinating end-to-end data flow testing, packet routing, and characterization with Satellite Operations.
• Systems Engineering: Compile and maintain ground segment Interface Control Documents (ICDs) from different providers; translate these requirements into actionable software configurations for the ground and operations teams.
• Troubleshooting: Provide the first line of defense for network, software, and data-flow issues during satellite passes (ranging from minor packet loss to complete operational halting).
• Security: Act as the communications security (COMSEC) and network security point of contact, ensuring secure data transit (encryption in transit/rest) and managing authentication/keys across providers.
• Modem & Radio Software Integration: Work with software-defined radios (SDRs) and commercially available software modems to ensure compatibility and reliable signal processing pipelines.

Qualifications

• B.S. or M.S. in Computer Science, Computer Engineering, Electrical/Electronics Engineering, Aerospace Engineering, Information Technology, or a related technical field — or equivalent hands-on experience.
• 4+ years of experience in system design, focusing on network engineering, ground software, or IT infrastructure.

Required Skills

• Strong proficiency in Linux-based operating systems and command-line environments.
• Proficiency in at least one scripting language (Python heavily preferred) for automation and API interaction.
• Solid understanding of network engineering fundamentals (TCP/IP, UDP, VPNs, routing, firewalls, and secure networking).
• Hands-on experience with IPsec VPN tunnels, AWS Direct Connect, and packet-level troubleshooting with Wireshark.
• Experience integrating and interacting with RESTful APIs or gRPC services.
• Familiarity with commercially available ground modems, SDRs, or signal processing frameworks (e.g., GNU Radio, Kratos, qRadio).
• Desire to define and solve problems independently, tempered with experience to know when to seek input.
• Ability to listen carefully, decipher meaning, avoid preconceptions, ignore ego, and work with a team towards the best design possible within given constraints.
• Strong written and verbal communication skills, with a dedication to carefully documenting network topologies and software architectures.

Preferred Skills

• Direct experience integrating and operating with commercial GSaaS providers (KSAT, Leaf Space, RBC Signals, etc.).
• Familiarity with satellite communications protocols and space data standards (e.g., CCSDS).
• Experience with Cloud environments (AWS, GCP) and Infrastructure as Code (e.g., Terraform, Ansible, Docker).
• Ham radio operator, enthusiast, or a strong fundamental understanding of RF concepts as they relate to software and networking.

Export Control Statement

This position requires access to export-controlled commodities, technical data, technology, software, and services. U.S. citizenship, U.S. legal permanent resident status, or protected person status under 22 CFR §120.15 and 8 U.S.C. § 1324b(a)(3) is required.