Northwood is a space infrastructure company building a global network of phased array ground stations supported by cloud infrastructure. The Senior Infrastructure Engineer (Platform) owns and operates cloud infrastructure components including Kubernetes clusters, identity systems, observability stacks, and infrastructure-as-code, working independently on a defined scope with direct collaboration with platform software engineers.
What You'll Do
- Own and operate all components of the cloud infrastructure stack: cloud accounts, hosted Kubernetes clusters, certificate authorities, secrets management, IAM, and observability pipelines
- Build and maintain infrastructure as code, implementing GitOps practices with proper CI gates for testing, auditing, and approving infrastructure changes
- Implement cloud networking including VPCs, transit route tables, VPNs, and Direct Connect attachments; partner with network engineering on cloud-to-site handoff
- Carry on-call responsibility for the cloud stack, resolve majority of incidents independently, and run post-incident reviews
- Partner with security and compliance teams on controls implementation including policies, IAM boundaries, logging coverage, and CVE mitigation
What You Need
- 2-7 years of production infrastructure experience in SRE, DevOps, platform, cloud, or systems engineering
- Deep expertise in cloud platforms: multi-account organizations, IAM, VPC networking, EKS or equivalent managed Kubernetes
- Strong infrastructure-as-code experience with state management, CI-driven plan and apply, and shared monorepo workflows
- Working competence across Linux, networking fundamentals, containers, Kubernetes, CI/CD pipelines, and observability tooling
- Demonstrated end-to-end ownership of production systems including design, implementation, and operation; on-call experience with measurable reliability outcomes
- Proficiency in Python, Go, or similar languages for automation, tooling, and integration work
- Strong technical writing skills for design documents, runbooks, and post-mortems
Nice to Have
- Depth in AWS GovCloud or other regulated/air-gapped cloud environments
- Secrets and identity infrastructure experience: Vault (PKI, auth methods, policy design), Okta or IAM Identity Center integration, workload identity
- Observability at scale: VictoriaMetrics or Prometheus, Grafana, alerting design, log pipelines (Vector, Loki)
- Multi-cluster ArgoCD, cluster lifecycle management, node and network policy, workload isolation on EKS
- Cloudflare experience: Zero Trust, DNS, tunnels, WAF
- Compliance partnership experience implementing technical controls for CMMC, NIST 800-171, NIST 800-53, FedRAMP
- Hybrid connectivity between cloud and on-premises or edge sites