Apply on Employer Site

K2 Space Corporation · 2 days ago

Senior Platform Engineer

Los Angeles, CA

Full-time

Onsite

Senior Level, Lead/Staff

$165K/yr - $215K/yr

8+ years exp

K2 Space Corporation is building the largest and highest-power satellites ever flown, backed by significant investment and contracts. They are seeking a Senior Platform Engineer to join their Enterprise Information Systems team, responsible for developing tools that connect engineering, production, and mission control for satellite design and operations.

AerospaceMachinery ManufacturingManufacturingSpace Travel

No H1B

U.S. Citizen Only

Responsibilities

Design and evolve self‑service connectivity abstractions enabling scoped segmentation, governed exposure, adaptive ingress/egress, and traceable traffic

Own service identity & trust (mTLS, cert automation, least‑privilege east‑west, governed egress) with broad coverage and low friction

Engineer resilient traffic paths (timeouts, retries, circuit breaking, failure isolation) and harden them via chaos tests, automated remediation, and MTTR reduction

Establish observability standards so end‑to‑end request path and applied policies are visible (source, identity, route, outcome, saturation, cost) across environments

Provide approachable docs & diagnostics (guides, diagrams, ‘why can’t this connect?’ flows) to shorten support loops

Optimize performance & cost (latency budgets, cross‑AZ transfer, IP consumption, LB efficiency) and act on anomalies

Apply threat & abuse modelling to connectivity surfaces (API exposure, egress, identity propagation) using industry principles while keeping solutions developer‑friendly

Steward lifecycle and adoption including versioning, safe migrations, deprecations, usage telemetry, and proactive pruning of unused resources

Mentor engineers and partner with adjacent DevX teams to embed networking abstractions into golden paths, raising organizational fluency and consistency

Own, operate, and maintain network related infrastructure within and adjacent to EKS

Qualification

KubernetesCloud networkingService identityObservabilityProgramming GoProgramming TypeScriptProgramming PythonProgramming JavaInfrastructure as codeTraffic resilienceMentoringCommunicationProblem-solving

Required

BS/MS in Computer Science (or equivalent) and 8+ years of experience building and operating distributed/platform systems with production Kubernetes/EKS ownership

Proficiency in at least one language (Go, TypeScript, Python, Java) and disciplined SCM workflows (branching, reviews, automated gates)

Solid grounding in cloud + Kubernetes networking, for example VPC & subnet layout, routing, east-west segmentation, service exposure, DNS/CoreDNS, policy enforcement, and CNI behaviour

Practical service trust & identity knowledge such as mTLS, certificate automation/rotation, PKI/CA or SPIFFE/SPIRE concepts

Working understanding of traffic resilience & performance: timeouts, retries, backoff, circuit breaking, rate limiting, failure isolation, latency and saturation analysis

Experience with developer connectivity abstractions: K8s CRDs/operators, guardrails (admission, lint, simulation) and automated tests

Competence in observability & SLOs (metrics, tracing, structured logs, L4/L7 telemetry, end‑to‑end request path, visibility into applied policies, SLI/SLO definition & enforcement)

Experience with infrastructure as code and delivery: Terraform or CDK, GitOps (Argo/Flux), progressive/canary rollouts, policy-as-code integration

Operational experience: chaos/fault injection, component upgrades (CNI, proxies, cert issuers), incident response

Ability to communicate and mentor on networking & identity across varied fluency levels

Preferred

Working knowledge of eBPF / Cilium Hubble or Envoy extensions is an asset

Exposure to Gateway API or service mesh (Istio, Linkerd, ambient), multi region failover, IPv6/dual stack planning is an asset

Comfort with advanced DNS/discovery (split horizon, conditional forwarding), policy engines (Kyverno/OPA), API inventory & cost attribution metadata is an asset