Infrastructure DevOps Software Engineer III

Application close date:
Applications will be accepted on an ongoing basis until the requisition is closed.

At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We’re working to develop reusable, safe, and low-cost space vehicles and systems within a culture of safety, collaboration, and inclusion. Join our team of problem solvers as we add new chapters to the history of spaceflight!

This role is part of the Blue Origin Engines business unit, where our focus is the design, development, manufacturing, and testing of engines and propulsion systems. Built for multiple uses, our family of engines is powering the next generation of rockets for commercial, civil, national security, and human spaceflight.

As part of a small team, you will help build the internal cloud platform that Engines software and data teams build on every day. You will own significant components of that platform — reusable infrastructure-as-code modules, golden paths, Kubernetes services, and self-service automation — and you will support multiple internal customer teams running on shared environments with differing security, scale, and lifecycle needs. This hands-on position requires demonstrated depth authoring reusable IaC, operating production Kubernetes at scale, and applying site reliability engineering practices to systems you did not write. We operate with a strong bias for automation and an AI-first approach to development. Together, our teams deliver the platform and automation that allow high-velocity development teams to ship safely and often.

We are looking for someone to apply their technical expertise, leadership skills, and commitment to quality to positively impact safe human spaceflight. Passion for our mission and vision is required!

Responsibilities:

As a Platform DevSecOps Engineer III, you will own platform components from design through verification and ongoing operation, working with minimal oversight and general guidance on new assignments. You will independently develop solutions to problems of diverse scope, use technical judgment to select the methods and technologies best suited to the solution while balancing risk, lead root cause analysis on major-scope production issues, and own technical reviews and documentation for your projects. You will provide input to schedule, budget, and milestones, provide technical feedback that improves the solutions of other engineers, and participate in company-wide tool development and process improvement efforts. Specific responsibilities include:

- Design, build, and own reusable infrastructure-as-code modules in Pulumi and Terraform, treating them as versioned products with clear interfaces, defaults, tests, documentation, and deprecation paths.
- Build and maintain golden paths and paved-road templates that let development teams provision compliant, production-ready infrastructure without deep cloud expertise.
- Own the design and operation of shared AWS platform services, including account and network topology, identity and access patterns, and environment promotion strategy.
- Design and operate production Kubernetes platforms on Amazon EKS, including cluster architecture, networking, autoscaling, upgrade strategy, multi-tenancy, and resource governance.
- Build platform capabilities that support microservice architectures, including service scaffolding, ingress and service discovery, secrets delivery, and production readiness standards.
- Apply a strong bias for automation, eliminating manual and repetitive operational work through code, tooling, and self-service capabilities.
- Use AI coding assistants and agentic development tooling as a routine part of the development workflow to accelerate module development, test generation, refactoring, and documentation.
- Build AI-assisted automation into platform operations, such as automated triage, log and alert summarization, remediation suggestions, and change impact analysis.
- Establish and follow responsible practices for AI-assisted development, including human review, test coverage, secure handling of proprietary and export-controlled information, and validation of generated code and configuration.
- Design and build CI/CD pipelines and deployment patterns (blue/green, canary, progressive rollout, automated rollback) that enable teams to deploy safely and frequently.
- Establish and improve DevSecOps practices across the platform lifecycle, including automated security scanning, policy-as-code, secrets management, image hardening, IAM least-privilege design, and vulnerability and patch remediation workflows.
- Own observability for platform infrastructure and microservices, including metrics, logging, distributed tracing, dashboards, and alerting strategy, and drive alert quality to reduce noise and mean time to detection.
- Define and instrument SLIs, SLOs, and error budgets in partnership with customer teams, and drive reliability improvements against them.
- Lead incident response and postmortems, perform root cause analysis on major-scope production failures, and drive corrective and preventive actions to closure.
- Define and execute performance, capacity, scalability, resiliency, and cloud cost optimization efforts across the platform.
- Define and implement security and compliance controls in accordance with Blue Origin standards and export control (ITAR/EAR) requirements.

Minimum Qualifications: