Cloud Engineer

Job description Team & Reporting Line: Cloud Infrastructure Our Mission At constellr, we use thermal intelligence from space to understand what is happening on Earth - where, when and at scale. Our satellite constellation delivers high-resolution land surface temperature data, giving governments, defence organisations, commercial operators and global institutions the intelligence they need to monitor change, assess risk and make better-informed decisions. From national security and critical infrastructure to agriculture and climate resilience, constellr turns temperature into actionable intelligence for a changing world. Your Role You'll join our central Infrastructure team to help constellr build and operate the cloud infrastructure behind our software systems — the Ground Segment for satellite operations, Data and User Segments, and Space Engineering-related systems as well as the interface to our business IT and on-prem teams. We currently operate platform-style and are largely self-organised, but with a real ops component: we support other teams via tickets, incident response, and bug fixes, and own infrastructure reliability end-to-end. Beyond day-to-day operations, we proactively shape “golden paths” for engineering teams company-wide rather than only reacting to requests. Security and cloud agnosticity are first-class concerns for us — we work toward high standards (e.g., ISO/IEC 27001) and collaborate closely with our Security/Compliance and IT departments, who own dedicated responsibilities in this area. We’re hiring at a mid-to-senior level where tenure isn’t the leading indicator, more importantly you are expected to be able to see the bigger picture and weigh trade-offs across systems and teams, proactively surface issues and are comfortable owning topics end-to-end. Key responsibilities Design and operate infrastructure across multiple cloud providers (currently AWS, expanding to an EU-sovereign provider ) , using IaC (Terraform/ Terramate ) with an eye toward security and portability while avoiding unnecessary vendor lock-in . Take ownership of key systems and topics alongside the team while c ontribut ing actively to shared team responsibilities and outcomes, not just your own backlog . I mprove the reliability, performance, and scalability of systems deployed in the cloud . Manage secrets, encryption, and workload certificates (SOPS, KMS/HSM equivalents) consistently across cloud environments . Partner with the Security/Compliance department on ISO / IEC 27001 controls, risk assessments, and audits; implement infrastructure controls satisfying security requirements (access control, segregation of duties, auditability, data residency ) . C ontribute to improv ing the observability stack to better monitor systems in the cloud and on-prem. Help spread domain and tech knowledge across the team to prevent siloing. Support other engineering teams via tickets and incident response while…