Platform Engineer - AWS Cloud

Axiom Space is a human space exploration company, building era-defining space infrastructure and delivering technology-driven solutions that will empower civilization to transcend Earth. Beginning with Axiom Station, successor to the International Space Station, the company is pioneering a next-generation orbital settlement that will foster groundbreaking innovation and research in microgravity and drive the global space economy of tomorrow. Today, guided by the vision of leading humanity's expansion off planet, Axiom Space is the principal provider of commercial human spaceflight services and developer of advanced spacesuits for the Moon and beyond. For more information about Axiom Space, visit www.axiomspace.com. Axiom Space fosters a work environment inclusive of all perspectives. We are the pioneers of commercial space, leading the transformation of low-Earth orbit into a global space marketplace. Our mission-driven team is seeking a bold and dynamic Platform Engineer (AWS Cloud) who is fueled by high accountability, execution horsepower, and driven to understand our world, science/technology, and life itself, for the benefit of all on Earth and beyond. Position Summary Since Axiom Space is a very complex work environment, we are looking for a resilient, high-energy Platform Engineer (AWS Cloud), who designs, builds, and operates the AWS-first cloud infrastructure that Axiom's engineering and business teams run on. This person drives automation, infrastructure-as-code, and platform reliability practices that let internal teams ship faster and safer, while maintaining working familiarity with Azure and Microsoft 365 to support occasional cross-platform workloads. This role serves as an escalation point for platform architecture and technical issues beyond the scope of entry-level engineers, and contributes to the continuous improvement of Axiom's enterprise cyber security program under the direction of senior IT leadership. Key Duties & Responsibilities Designs, builds, and maintains infrastructure-as-code (Terraform or CloudFormation) to provision and manage AWS GovCloud environments — accounts, networking (VPC), and compute — in a repeatable, version-controlled way via AWS Landing Zone Accelerator (LZA) based architectureServes as the primary escalation point for AWS platform architecture, systems design, and technical issues beyond the scope of entry-level engineersBuilds and maintains CI/CD pipelines (AWS CodePipeline, GitHub Actions, or Jenkins) that automate build, test, and deployment workflows for internal engineering teamsAdministers and evolves Axiom's AWS environment as the primary cloud platform — accounts, networking, compute, and core services (EC2, S3, and related)Builds and maintains container and orchestration platforms (Docker, Kubernetes/EKS) to support internal application workloadsManages identity and access management (IAM) within AWS IAM and supports SSO/SAML/SCIM integrations, ensuring least-privilege access across the platformImplements monitoring, logging, and observability (e.g., CloudWatch) to track platform health, and reviews incidents and performance data to determine root cause and drive remediationPreserves platform assets by implementing disaster recovery and backup automation, and develops, maintains, and tests business continuity plans for cloud environmentsDevelops and maintains internal tooling and self-service capabilities that give engineering teams safe, automated access to the AWS platformRecommends cloud platform engineering strategies, tooling, and standards by evaluating organizational outcomes, identifying problems, and anticipating requirementsMay provide technical guidance to entry-level platform and IT engineers and review their AWS-related work as neededMaintains basic working familiarity with Azure and Microsoft 365 administration to support occasional cross-platform workloadsCommunicating project progress, status, and potential issues to stakeholders and leadershipImplementing and maintaining agile project management methodologies throughout the project lifecyclePerform additional job duties as assigned Qualifications To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Education & Experience The majority of that experience should be spent building and operating production workloads on AWSBachelor's degree in Systems Engineering, Engineering Science, or Engineering Management, 4+ years of experience, or an equivalent combination of education and experienceTrack record of making things happen in ambiguous, fast-moving environmentsUses good judgement to problem-solve proactively, positively impacting hard challengesDemonstrated organization skills to meet tight deadlines with high quality results Core Skills Passion for space and the missionEntrepreneurial, growth mindsetHigh EQ and ability to collaborate within teams and cross-functionallyTech-solutioning in using systems and tools to move smarter and faster Computer Skills To perform this job successfully, an individual should have knowledge of: Strong AWS administration (IAM, VPC networking, EC2/compute, S3, and core services) as the primary cloud platform — deep, hands-on expertise expectedInfrastructure-as-code experience (Terraform or CloudFormation) and configuration management (Ansible or equivalent)CI/CD pipeline experience (AWS CodePipeline, GitHub Actions, or Jenkins) and scripting proficiency in Python or BashContainers and orchestration (Docker, Kubernetes/EKS, or equivalent)Identity and access management (IAM): users, groups, roles, and least-privilege policy design within AWSWorking knowledge of Azure Cloud administration (compute, networking, storage, governance) and Microsoft 365 (including SharePoint and OneDrive administration) sufficient to support occasional Azure-hosted workloadsGeneral server hardware familiarity (Windows and Linux), general IT security and firewall management, and backup administration experienceWired and wireless networking, DHCP, and DNS; virtualization via VMware or equivalent; patch management via Windows Update or third-partyStorage administration (users, access controls, and content governance across cloud storage) Preferred Certifications Candidates holding one or more of the following are strongly preferred: AWS Certified Solutions Architect – Associate or ProfessionalAWS Certified DevOps Engineer – ProfessionalAWS Certified SysOps Administrator – Associate Core Competencies Embody our core values of leadership, innovation, and teamwork. In addition, to perform the job successfully, an individual should demonstrate the following competencies: AccountabilityTechnical RigorExecution DisciplinePride of Delivery Work Environment Generally, an office environment, but can involve inside or outside work depending on the task Requirements This position may require access to export controlled technical data or technology subject to NASA regulations, International Traffic in Arms Regulations (ITAR), or Export Administration Regulations (EAR). In accordance with U.S. export control laws, final candidates may be required to undergo additional export control screening to determine eligibility for access. Meeting these requirements is a condition of employmentManagement has the prerogative to select at any level for which the position is advertisedMust be willing to work evenings and weekends as needed to meet critical project milestones Physical Requirements Work may involve sitting or standing for extended periods (90% of the time)May require lifting and carrying up to 25 lbs. (5% of the time)Equipment and MachinesStandard office equipment (PC, phone, printer, etc.) Axiom Space is proud to be an equal opportunity employer. Axiom Space does not discriminate on the basis of race, regional color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with disability, or other applicable legally protected characteristics.