Sr. DevOps (8-12 yrs)

Advanced Space, LLC; Westminster (CO); On-site; USD 140,000 - 182,000; Full time

Benefits offered by this job

Signing bonus

Quarterly performance bonuses

Medical benefits

401(k)

Flexible time off

Relocation assistance

Job summary

Advanced Space is seeking a Sr. DevOps Engineer with 8–12 years of experience to design, build, and operate secure, scalable cloud infrastructure for mission-critical aerospace workloads. You will work with Terraform/CDK and AWS, lead CI/CD and Kubernetes platforms, and implement secure-by-default patterns across multi-account environments.

You must be a U.S. citizen able to obtain and maintain a Top Secret clearance; visa sponsorship is not available.

Qualifications

• 8–12 years of progressively responsible experience in DevOps/platform engineering.
• Strong hands-on experience designing and operating production workloads in AWS.
• Experience delivering infrastructure via Terraform, AWS CDK, CloudFormation or similar IaC tools, with preference for Terraform/CDK.
• Hands-on Kubernetes experience including EKS, Helm, RBAC, and cluster operations.
• Experience with GitLab CI/CD pipelines and secure-by-default patterns.
• Proficiency in Python for automation and tooling; Bash familiarity.
• U.S. citizen able to obtain and maintain Top Secret clearance; visa sponsorship not offered.

Responsibilities

• Build and operate secure, scalable AWS infrastructure for mission-critical workloads.
• Develop reusable IaC modules and deployment workflows using Terraform, CDK, or similar tools.
• Design and maintain CI/CD pipelines and Kubernetes platforms, including workload deployment and security hardening.
• Design advanced cloud networking across multi-account AWS environments, including VPCs, DNS, and connectivity.
• Strengthen identity, security, and compliance with federated identity and least-privilege access.
• Automate platform operations with Python-based tooling and ensure observability via metrics and logs.
• Provide technical leadership, mentoring, and architecture guidance to engineering teams.

Skills

AWS

Terraform

AWS CDK

Kubernetes

GitLab CI/CD

Python

Bash

Security & Compliance

Top Secret clearance

Docker

Helm

Tools

Docker

Helm

Job description

We’re going to the Moon. Think you’ve got what it takes?

About the Role

At Advanced Space, we're enabling humanity's return to the Moon and building the technologies that will take us to Mars and beyond. We're looking for a Sr. DevOps Engineer with 8–12 years of experience to empower the successful execution of some of the most ambitious space missions in the industry.

In this role, you'll design, build, automate, and operate secure, scalable infrastructure supporting mission-critical aerospace workloads. You'll partner closely with engineering teams to deliver cloud infrastructure, Kubernetes platforms, CI/CD pipelines, and automation that enable reliable software delivery across development, test, and production environments.

We're looking for someone who thrives in technically demanding environments, enjoys solving complex infrastructure challenges, and is passionate about building secure, reliable platforms that enable engineers to deliver real missions, not just concepts.

This position is open to U.S. Citizens only. Visa sponsorship is not available.

The ability to obtain and maintain a Top Secret security clearance is required.

About Advanced Space

Advanced Space exists to enable the sustainable exploration, development, and settlement of space through innovative software, mission services, and technology solutions. As the owner and operator of NASA's CAPSTONE™ mission and the Prime Contractor for AFRL's Oracle mission, we're helping shape the future of cislunar exploration while supporting commercial, civil, and national security customers.

Our team combines deep technical expertise with an entrepreneurial mindset. We move quickly, collaborate across disciplines, and empower every engineer to make meaningful contributions. If you're passionate about solving challenging problems and seeing your work fly in space, you'll fit right in.

What You'll Actually Do

Build and operate secure cloud infrastructure.

Design, build, automate, and operate secure, scalable, highly available AWS infrastructure for mission-critical aerospace workloads. Develop reusable infrastructure-as-code modules and deployment workflows using Terraform, AWS CDK, or comparable tools.

Develop reliable CI/CD and Kubernetes platforms.

Build and improve GitLab CI/CD pipelines that enable repeatable software and infrastructure delivery. Operate container platforms using Kubernetes, preferably Amazon EKS, including workload deployment, Helm, scaling, cluster upgrades, access controls, and security hardening.

Design and maintain advanced cloud networking.

Implement AWS networking architectures across multi-account environments, including VPCs, routing, security groups, network ACLs, DNS, load balancing, private connectivity, VPC endpoints, Transit Gateway, Direct Connect, and site-to‑site VPNs. Support AWS GovCloud (US) environments and their unique deployment and service requirements.

Strengthen identity, security, and compliance.

Implement federated identity and access management using SAML, OIDC, OAuth 2.0, AWS IAM Identity Center, and enterprise identity providers such as Okta, Keycloak, or Authentik. Apply DevSecOps practices throughout the delivery lifecycle, including least‑privilege access, secrets management, encryption, policy enforcement, vulnerability scanning, automated compliance checks, and auditable change control.

Automate and improve platform operations.

Develop Python‑based automation, internal tooling, API integrations, and operational utilities using sound software engineering practices. Establish observability through metrics, logs, traces, alerting, dashboards, and runbooks. Troubleshoot complex infrastructure, networking, identity management, Kubernetes, and CI/CD issues while supporting incident response and root‑cause analysis.

Provide technical leadership and enable engineering teams.

Partner with engineering teams to deliver self‑service platform capabilities, clear standards, practical documentation, and secure‑by‑default patterns. Mentor engineers, contribute to architecture reviews and platform roadmaps, and continuously improve the reliability, security, and scalability of our infrastructure.

Who Thrives Here

You have 8–12 years of progressively responsible experience in DevOps, platform engineering, site reliability engineering, cloud infrastructure, or a closely related discipline.

You have strong hands‑on experience designing and operating production workloads in AWS.

You have experience delivering infrastructure through Terraform, AWS CDK, CloudFormation, or comparable infrastructure‑as‑code tools, with a strong preference for hands‑on Terraform and/or CDK experience.

You're experienced in building, maintaining, and troubleshooting GitLab CI/CD pipelines or comparable CI/CD platforms.

You have production experience with Kubernetes, including containerized workloads, networking, RBAC, resource management, deployment strategies, and operational troubleshooting. Experience with Amazon EKS, Docker, and Helm is strongly preferred.

You have advanced AWS networking knowledge, including VPC design, subnetting, route tables, security groups, network ACLs, DNS, load balancers, private connectivity, and multi‑account networking.

You understand federated identity and access management, including SAML, OIDC, OAuth 2.0, MFA, role‑based access control, and least‑privilege IAM design.

You have hands‑on experience integrating or administering an identity provider such as Okta, Keycloak, Authentik, or an equivalent enterprise identity platform.

You're proficient in Python, including object‑oriented programming, automated testing, API integrations, and maintainable automation or platform tooling. Experience with Bash and boto3 is expected.

You have experience applying infrastructure and application security practices, including IAM, encryption and KMS, secrets management, vulnerability management, centralized logging, monitoring, and security automation.

You have strong Linux and Git fundamentals.

You communicate technical decisions, risks, and tradeoffs effectively with engineers, program stakeholders, and customers.

You're a U.S. citizen and can obtain and maintain a Top Secret security clearance.

You take ownership. When you see a challenge, you work with the team to solve it.

Bonus Points if You Have Experience With

Designing, deploying, or operating workloads in AWS GovCloud (US).

Working in regulated, government, civil‑space, national‑security, or defense‑adjacent environments.

Compliance‑oriented cloud operations involving FedRAMP, FISMA, NIST SP 800-53, DoD SRG, ITAR, CJIS, or CIS AWS Foundations Benchmark controls.

AWS Organizations, multi‑account landing zones, Service Control Policies, cross‑account roles, centralized logging, AWS Config, GuardDuty, Security Hub, CloudTrail, and VPC Flow Logs.

Policy‑as‑code or Kubernetes admission controls using OPA/Gatekeeper, Kyverno, or equivalent technologies.

GitOps practices and tools such as Argo CD or Flux.

Infrastructure monitoring and observability with CloudWatch, Prometheus, Grafana, OpenTelemetry, ELK/OpenSearch, or similar platforms.

Incident management, disaster recovery planning, backup and restore automation, and defining or validating recovery point objectives (RPOs) and recovery time objectives (RTOs).

AWS certifications such as AWS Certified DevOps Engineer – Professional, AWS Certified Security – Specialty, AWS Certified Advanced Networking – Specialty, or AWS Certified Solutions Architect – Professional.

A bachelor's degree in computer science, engineering, information systems, or a related field, or equivalent practical experience.

Success is Measured By

Delivering secure, scalable, and highly available AWS infrastructure that supports mission‑critical aerospace workloads.

Building reliable, repeatable CI/CD pipelines and infrastructure automation that improve engineering productivity.

Operating secure, resilient Kubernetes platforms that support development, test, and production environments.

Implementing robust cloud networking and identity management across multi‑account AWS environments.

Strengthening security, compliance, observability, and operational resilience through automated DevSecOps practices.

Improving incident response, troubleshooting disaster recovery, and overall platform reliability.

Enabling engineering teams through self‑service capabilities, reusable infrastructure patterns, and clear technical documentation.

Mentoring engineers and contributing to platform architecture, technical standards, and long‑term infrastructure strategy.

Why Join Advanced Space

Build the cloud infrastructure that powers real missions to the Moon and beyond.

Develop secure, scalable platforms supporting cutting‑edge aerospace software and mission operations.

Collaborate with talented engineers solving some of the industry's most challenging technical problems.

Take ownership of DevOps initiatives that directly impact mission success.

Help shape the infrastructure, automation, and security practices that support the next generation of lunar and deep‑space missions.

Join a team that's passionate about delivering innovation to orbit—and beyond.

Base Salary: $140,000–$182,000 (based on experience, qualifications, and location)

Signing bonus

Quarterly performance bonuses

Company-sponsored medical benefits and 401(k)

Flexible time off

Relocation assistance

This position is located in Westminster, CO.

Advanced Space is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive workplace for all employees. Employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other protected characteristic.