Senior Infrastructure Engineer

This is a fully remote position, open to applicants in Virginia, +1 more state.

📋 Description

• Design and manage AWS infrastructure, encompassing VPC, subnets, NLB/ALB, IAM, EKS, EC2, S3, Route 53, and hybrid connectivity to on-premises, private, and air-gapped networks.

• Establish and manage production-grade Kubernetes clusters utilizing EKS, Rancher (RKE2), and/or Red Hat OpenShift 4.

• Conduct Kubernetes upgrades, capacity planning, networking, storage, and day-2 operations.

• Implement and oversee GitOps workflows with Argo CD, including declarative cluster and application states, app-of-apps patterns, sync policies, drift detection, and progressive rollouts.

• Author, version, and sustain Helm charts across various environments.

• Develop repeatable delivery processes in disconnected environments using Zarf or similar packaging and mirroring tools.

• Codify infrastructure and platform configurations using Terraform, Helm, and Kustomize.

• Create and fortify CI/CD pipelines from development through restricted production and BCP targets.

• Integrate certificate management, secrets management, container registries, storage, and observability as reusable platform components.

• Establish standards for monitoring, alerting, logging, runbooks, incident response, and capacity/cost management.

• Report directly to the Manager of Infrastructure.

• Undertake additional responsibilities as assigned.

⛳️ Requirements

• Minimum of five years in infrastructure, platform, DevOps, or SRE engineering, with at least three years of experience managing Kubernetes in production.

• Bachelor's degree in a relevant field or equivalent experience (four years).

• Strong hands-on experience with AWS, covering networking, compute, storage, and IAM, including hybrid/on-prem connectivity methodologies.

• Proven experience in operating Kubernetes in production within one or more enterprise distributions — Amazon EKS, Rancher/RKE2, or OpenShift 4.

• Demonstrated proficiency with GitOps methodologies using Argo CD (or Flux) as the primary deployment tool.

• Excellent skills in authoring and maintaining Helm charts, alongside a solid understanding of Kubernetes primitives (workloads, networking, RBAC, storage, CRDs/operators).

• Familiarity with the Kubernetes Operator deployment model, deploying and managing workloads via operators and CRDs (OLM/OperatorHub).

• Strong infrastructure-as-code capabilities, preferably with Terraform.

• Comfort with Linux systems administration and scripting (Bash, as well as Python or Go).

• Experience in building on hardened, non-CVE/zero-known-vulnerability base images (e.g., Chainguard, Iron Bank, or distroless/minimal baselines) and implementing supply-chain security practices.

• Experience with production monitoring and observability using Prometheus and Grafana (exporters, PromQL, alerting, dashboards).

• Excellent written and verbal communication skills, with the ability to work independently across the full lifecycle of a platform component.

• U.S. citizenship, lawful permanent residency, protected-individual status, or eligibility to obtain necessary U.S. Department of State authorizations for ITAR compliance.

🏝️ Benefits

• Medical, dental, vision, disability, group term life and AD&D, voluntary life and AD&D insurance.

• BlackSky covers 100% of employee-only premiums for medical, dental, and vision and contributes $100/month for out-of-pocket expenses.

• 15 days of paid time off (PTO).

• 11 company holidays.

• Four floating holidays (pro-rated based on hire date).

• One day of paid volunteer leave per year.

• Parental leave.

• 401(k) pre-tax and Roth deferral options with employer matching.

• Flexible Spending Accounts.

• Employee Stock Purchase Program.

• Employee Assistance and Travel Assistance Programs.

• Employer matching donations.

• Opportunities for professional development.

• Choice between Mac or PC.

• Awesome swag.