Edge Compute Engineer – Senior

About the role

We are seeking an Edge Compute Engineer to join the Latvia Design Center as the primary owner of our ground‑segment compute and storage stack, responsible for edge workloads across all AST gateway stations. This senior design‑and‑operate role defines the reference architecture, builds IaC‑driven fleet management, and takes hands‑on operational ownership.

Key responsibilities

• Define and own the edge compute reference architecture, including virtualization platform, VM/container topology, storage layout, virtual networking, and resource governance.
• Build and maintain Terraform‑based provisioning pipelines and PXE/TFTP boot management for consistent, repeatable gateway node deployment.
• Implement Ansible‑based configuration management and GitOps workflows to enforce auditable configuration state across all hypervisor nodes.
• Manage virtualization cluster operations (VMware or Kubernetes), covering VM/pod lifecycle, HA, storage pools, virtual networking, and patching automation.
• Maintain platform‑level observability integrated into Prometheus/Grafana/VictoriaMetrics and support capacity planning as the fleet expands.

Required profile

• Bachelor’s or Master’s degree in Computer Science, Telecommunications Engineering, or a related field, or equivalent professional experience.
• 5–8 years of hands‑on infrastructure or platform engineering experience with hypervisor administration, Linux systems, and infrastructure‑as‑code.
• Proven experience designing and operating distributed or edge compute environments.

Required skills

• VMware‑based virtualization or Kubernetes (cluster management, HA/DRS, virtual networking, storage pools).
• Linux system administration (RHEL, Ubuntu, Debian), systemd, networking, performance profiling, security hardening.
• Infrastructure‑as‑code tools: Terraform, PXE/TFTP, Packer.
• Configuration management: Ansible, GitOps (GitHub Actions, GitLab CI, Azure DevOps).
• Networking: Cisco/Juniper switching/routing, VLANs, IPsec/WireGuard VPN, PrivateLink, firewall management (pfSense/OPNsense).
• Security: mTLS, cert‑manager, IAM Roles Anywhere, encrypted storage, PKI lifecycle.
• Monitoring and observability: Prometheus, Grafana, VictoriaMetrics, ELK stack.
• Cloud integration: AWS EC2, Direct Connect, Site‑to‑Site VPN, IAM Roles Anywhere.