Senior Platform Engineer

The Role

Our enterprise software team builds the digital backbone that powers K2 Space's satellite design, manufacturing, and mission operations. We develop tools that connect engineering, production, and mission control into a seamless ecosystem — enabling our hardware to get from concept to orbit faster than ever before.

As we continue to grow, we're looking for a Senior Platform Engineer on our Enterprise Information Systems team, you must possess strong technical skills and a sense of empathy for your fellow developers. You will work closely with other talented engineers, architects and senior stakeholders to design, implement, and deliver on our roadmap.

Our Ideal Candidate

• Distills Kubernetes & cloud networking (identity, routing, segmentation, exposure) into clear, lightweight abstractions that cut cognitive load for product teams
• Claims ownership of hard connectivity challenges end‑to‑end, including design, rollout, adoption, and lifecycle producing solutions with company‑wide impact
• Practices surgical precision in feature development, delivering high value while avoiding complexity that delays or bloats
• Delivers work permeated with excellence including readable code, automated tests, clear documentation, consistent maintenance, and polished observability
• Intuitively understands packet flow, service identity, and secure communication with a keen ability to simplify them
• Understands the importance of resilience and reliability in production operations and upgrades
  

Responsibilities And Accountabilities

• Design and evolve self‑service connectivity abstractions enabling scoped segmentation, governed exposure, adaptive ingress/egress, and traceable traffic
• Own service identity & trust (mTLS, cert automation, least‑privilege east‑west, governed egress) with broad coverage and low friction
• Engineer resilient traffic paths (timeouts, retries, circuit breaking, failure isolation) and harden them via chaos tests, automated remediation, and MTTR reduction
• Establish observability standards so end‑to‑end request path and applied policies are visible (source, identity, route, outcome, saturation, cost) across environments
• Provide approachable docs & diagnostics (guides, diagrams, 'why can't this connect?' flows) to shorten support loops
• Optimize performance & cost (latency budgets, cross‑AZ transfer, IP consumption, LB efficiency) and act on anomalies
• Apply threat & abuse modelling to connectivity surfaces (API exposure, egress, identity propagation) using industry principles while keeping solutions developer‑friendly
• Steward lifecycle and adoption including versioning, safe migrations, deprecations, usage telemetry, and proactive pruning of unused resources
• Mentor engineers and partner with adjacent DevX teams to embed networking abstractions into golden paths, raising organizational fluency and consistency
• Own, operate, and maintain network related infrastructure within and adjacent to EKS
  

Qualifications And Experience

• BS/MS in Computer Science (or equivalent) and 8+ years of experience building and operating distributed/platform systems with production Kubernetes/EKS ownership
• Proficiency in at least one language (Go, TypeScript, Python, Java) and disciplined SCM workflows (branching, reviews, automated gates)
• Solid grounding in cloud + Kubernetes networking, for example VPC & subnet layout, routing, east-west segmentation, service exposure, DNS/CoreDNS, policy enforcement, and CNI behaviour
• Practical service trust & identity knowledge such as mTLS, certificate automation/rotation, PKI/CA or SPIFFE/SPIRE concepts
• Working understanding of traffic resilience & performance: timeouts, retries, backoff, circuit breaking, rate limiting, failure isolation, latency and saturation analysis
• Experience with developer connectivity abstractions: K8s CRDs/operators, guardrails (admission, lint, simulation) and automated tests
• Competence in observability & SLOs (metrics, tracing, structured logs, L4/L7 telemetry, end‑to‑end request path, visibility into applied policies, SLI/SLO definition & enforcement)
• Experience with infrastructure as code and delivery: Terraform or CDK, GitOps (Argo/Flux), progressive/canary rollouts, policy-as-code integration
• Operational experience: chaos/fault injection, component upgrades (CNI, proxies, cert issuers), incident response
• Ability to communicate and mentor on networking & identity across varied fluency levels
• Working knowledge of eBPF / Cilium Hubble or Envoy extensions is an asset
• Exposure to Gateway API or service mesh (Istio, Linkerd, ambient), multi region failover, IPv6/dual stack planning is an asset
• Comfort with advanced DNS/discovery (split horizon, conditional forwarding), policy engines (Kyverno/OPA), API inventory & cost attribution metadata is an asset

Compensation and Benefits:

• Base salary range for this role is $165,000 - $215,000 + equity in the company
• Salary will be based on several factors including, but not limited to: knowledge and skills, education, and experience level
• Comprehensive benefits package including paid time off, medical/dental/vision/ coverage, life insurance, paid parental leave, and many other perks