AWS Cloud Infrastructure Engineer (Devsecops)

At SATLANTIS, we develop advanced space technologies that enable groundbreaking scientific and Earth observation missions. As we continue to scale our operations, we are strengthening our Finance team to ensure robust financial control, accurate reporting, and continuous improvement of our financial processes.

This role places you at the heart of our IT and Cybersecurity operations. As an AWS Cloud Infrastructure Engineer (DevSecOps), you'll help build, operate, secure, and continuously improve the cloud infrastructure that supports our technology and business operations.

You'll be part of the IT and Cybersecurity team, ensuring that our AWS cloud infrastructure is reliable, secure, scalable, and continuously evolving. Your technical expertise will help us operate cloud services, automate infrastructure, strengthen security controls, and provide robust platforms for our engineering, production and business teams.

• AWS infrastructure & networking: Administer, maintain, and troubleshoot AWS infrastructure, including compute, storage, IAM, VPCs, networking, and monitoring services.
• Infrastructure as Code & automation: Develop and maintain Terraform configurations and contribute to automated, version-controlled infrastructure deployments.
• Kubernetes & container platforms: Operate and troubleshoot Kubernetes and container environments, supporting deployments, networking, storage, and platform upgrades.
• DevSecOps & cloud security: Apply security-by-design principles across cloud infrastructure, including access control, network segmentation, encryption, secrets management, vulnerability scanning, and Kubernetes security.
• Monitoring & incident response: Maintain observability platforms and investigate infrastructure incidents, supporting the resolution and escalation of cloud and security-related issues.
• Backup, resilience & continuous improvement: Manage backup and recovery processes, identify opportunities for improvement, and help ensure the reliability and resilience of our cloud environments.
• Collaboration & documentation: Work closely with Software, IT Operations, and Cybersecurity teams, while maintaining technical documentation and providing evidence for audits and compliance activities.

• Technical foundation: You hold a Higher Vocational Training qualification or university degree in Systems Administration, Computer Networks, Telecommunications, Computer Science, Cybersecurity, or a related technical field. Equivalent professional experience may be accepted in place of formal academic qualifications.
• Experience and knowledge:
  • 3 years of relevant experience in Cloud Infrastructure, DevOps, SRE, or Systems Administration, with hands-on experience in AWS environments.
  • Practical knowledge of AWS infrastructure and networking, including EC2, IAM, VPC, subnets, routing, Security Groups, EBS, S3, and monitoring services.
  • Practical experience with Terraform, including writing and applying configurations and understanding Terraform state.
  • Practical knowledge of Kubernetes and Docker/OCI, including deployments, services, ingress, and basic pod troubleshooting.
  • Good Linux command-line administration skills, including processes, networking, permissions, logs, and systemd, together with scripting skills in Bash and basic Python.
  • Good Git skills and a solid understanding of TCP/IP, DNS, TLS, routing, and firewalling, with the ability to troubleshoot cloud connectivity issues.
  • Understanding of cloud security principles such as least privilege, secure secrets handling, segmentation, encryption, and logging.
• Autonomy and Teamwork: Ability to work independently and in a team.
• Communication skills: Native or equivalent Spanish and technical English.
• Preferred skills:
  • Experience with Helm and GitOps workflows using Argo CD, Flux, or equivalent tools.
  • Experience with AWS security and governance services such as CloudTrail, Config, GuardDuty, Security Hub, Inspector, KMS, Secrets Manager, or AWS Backup.
  • Experience with secrets-management and vulnerability-scanning tools such as HashiCorp Vault, External Secrets Operator, Sealed Secrets, Trivy, or equivalent solutions
  • Experience with Ansible and observability platforms such as Prometheus, Grafana, and Loki.
  • Relevant certifications such as AWS, CKA, or Terraform Associate, as well as experience with ISO 27001, ENS, regulated environments, aerospace, or defense.