Back to jobs
New

Senior Infrastructure Engineer

Bothell, WA

About Portal

Portal Space Systems is on a mission to expand humanity’s freedom of movement in space. We’re building the spacecraft that makes that mission possible. From our Bothell, WA headquarters, we design vehicles with the maneuverability, resilience, and adaptability needed for the next era of orbital operations. Every system we build is in service of a simple idea: space should be more accessible, responsive, and capable. Joining Portal means stepping into a team that believes in bold engineering, fast iteration, and the power of small groups to change what’s possible. If you want your work to directly shape the future of in-space mobility, join us.

Position Summary

The Senior Infrastructure Engineer owns the architecture and engineering of Portal’s infrastructure, using Azure to its full potential rather than treating the cloud as a place to park virtual machines. The role is responsible for identifying where managed services, automation, and cloud-native patterns can replace manually maintained infrastructure; maintaining a simple, single-site on-premises VMware footprint; engineering backup and disaster recovery; and serving as the technical escalation point and including on-call for critical incidents, for infrastructure issues beyond the scope of the service desk. This position works closely with the service desk and the engineering teams, and reports directly to the Director of IT, building infrastructure that scales as Portal plans for rapid growth.

Responsibilities

Cloud-Native Infrastructure Architecture & Engineering

  • Design cloud-native solutions on Azure: leveraging managed services, PaaS, serverless, and platform-native tooling, rather than defaulting to lift-and-shift VM replication of on-premises patterns
  • Continuously evaluate infrastructure for modernization opportunities, replacing manually maintained servers with managed services where they reduce operational burden and improve resilience
  • Maintain Portal’s on-premises footprint on a VMware cluster, running basic networking and VMs, keeping it simple and current rather
  • Design infrastructure that scales cost-effectively as Portal rapidly grows
  • Stay technically ready to extend infrastructure to on-site/edge processing if the business requires it, without prioritizing that buildout today

Network, Identity & M365 Platform Ownership

  • Own Portal’s network infrastructure (Fortinet stack) across on-premises and Azure Government
  • Serve as the primary in-house owner of Microsoft Entra ID and the broader Microsoft 365/Azure Government tenant, working alongside M365 and MSP support to demonstrate direct ownership of these systems
  • Design and maintain identity, conditional access, and network segmentation in support of least-privilege principles and the compliance framework (CMMC Level 2, DFARS, ITAR)

Backup, Disaster Recovery & Reliability

  • Own backup strategy and execution using Veeam across on-premises and cloud workloads
  • Engineer and maintain cloud-based disaster recovery for Portal’s on-premises VMware environment, treating DR as a continuously tested capability rather than a one-time project
  • Participate in an on-call to respond to critical infrastructure incidents outside business hours
  • Treat compute as disposable rather than precious: build with infrastructure as code so environments can be rebuilt on demand instead of hand-nursed back to health

Service Desk Escalation & Internal Customer Experience

  • Serve as the escalation point for the MSP-staffed tier-1 service desk on infrastructure issues (servers, network, Entra ID/M365) beyond their knowledge or authority
  • Treat repeat escalations as a design problem: fix the underlying cause so the same issue doesn’t come back, rather than resolving it ticket by ticket
  • Deliver responsive, high-quality support to Portal’s engineering organization, balancing the speed engineers expect with the standards infrastructure and security require
  • Anticipate infrastructure needs ahead of demand, so engineering teams are rarely blocked waiting on IT

Security, Compliance & GRC Engineering

    • Build security and compliance into the design of every solution by default, in support of Portal’s CMMC Level 2, DFARS, and ITAR obligations
    • Apply GRC engineering practices: automate compliance evidence collection and control monitoring so the compliance program scales with the business rather than relying on manual review
    • Favor elegant, intuitive designs and living tooling (dashboards, monitoring, and infrastructure-as-code state) as the primary record of how systems work; keep written documentation lean and reserved for what truly needs it
    • Balance robust, right-sized solutions against cost, avoiding both under-engineering that creates risk and over-engineering that wastes budget

 

What you bring to Portal

  • Strong hands-on Azure expertise: comfortable designing with managed services, PaaS, containers, and other cloud-native patterns, not just running VMs in the cloud, and with enough VMware fluency to operate and modernize a simple, single-cluster on-premises environment
  • Strong command of Microsoft Entra ID and the broader Microsoft 365/Azure ecosystem: conditional access, identity governance, and tenant administration
  • Comfort designing and troubleshooting enterprise networking (routing, switching, firewalls, VPN); Fortinet experience is a plus
  • Hands-on backup and disaster recovery engineering experience, including tools like Veeam, treating DR as a continuously tested capability rather than a checkbox
  • Practical experience with infrastructure as code and configuration management (Terraform, Bicep, Ansible, or similar), and a cloud-first mindset that treats instances as cattle rather than pets
  • Comfort applying GRC engineering practices — automating compliance evidence, monitoring, and control tracking — rather than relying on manual, document-heavy compliance processes
  • A bias toward elegant, self-explanatory solutions: using code, automation, and live observability tooling as the primary way systems are understood, rather than documentation that goes stale as systems drift
  • Ability to operate as both architect and implementer: comfortable proposing a design and then spending the hours to build, configure, and debug it until it works
  • Strong customer-service orientation toward technically demanding internal engineers, combined with an instinct to solve recurring issues permanently through better design rather than repeated fixes
  • Comfort working in a compliance-sensitive, ITAR-controlled environment, and willingness to participate in an on-call rotation for critical infrastructure incidents


Basic Qualifications 

  • 5+ years of experience in infrastructure, systems, or network engineering, including hands-on administration of Microsoft Azure IaaS and PaaS services
  • 2+ years of experience administering VMware or comparable on-premises virtualization environments
  • 2+ years of experience with backup and disaster recovery engineering, including tools such as Veeam and cloud-based DR solutions
  • 2+ years of experience administering Microsoft Entra ID (Azure AD) and the Microsoft 365 stack, including identity management, conditional access, and tenant configuration
  • 2+ years of experience with enterprise networking, including firewalls, switching, routing, and VPN/remote access administration
  • 2+ years of experience acting as an escalation point or technical lead for engineers or a service desk on infrastructure issues
  • 1+ years of experience with infrastructure as code, scripting, or automation using tools such as PowerShell, Terraform, or Bicep

Preferred Qualifications

  • Microsoft Azure certification (AZ-104, AZ-305, or similar)
  • Experience modernizing or migrating legacy on-premises workloads to cloud-native architectures (containers, PaaS, serverless), rather than straight lift-and-shift
  • Veeam certification (VMCE) or demonstrated advanced Veeam backup/DR experience
  • Experience with Fortinet or comparable enterprise network/security platforms
  • Security certification (CompTIA Security+, ISC2 CC, or equivalent), or willingness to obtain within 6 months of hire
  • Experience with GRC automation or compliance tooling (e.g., Drata, Vanta, or similar) and/or exposure to CMMC, NIST 800-171, or FedRAMP frameworks
  • Familiarity with Microsoft 365 GCC High, Azure Government, or other FedRAMP-aligned environments
  • Experience partnering with or overseeing an MSP relationship for service desk, networking, or M365 support
  • Experience with logging/observability platforms (e.g., Azure Monitor, Sentinel, Graylog, Datadog or similar)
  • Experience in or genuine interest in aerospace or space technology

Work Expectations

  • Willingness to participate in an on-call rotation for critical infrastructure incidents

ITAR Statement

This position may involve access to technical data and defense-related materials controlled under the International Traffic in Arms Regulations (ITAR). Eligibility to access ITAR-controlled items requires that candidates be U.S. persons, which includes U.S. citizens, lawful permanent residents, and other protected individuals as defined by U.S. law. Employment is contingent upon verification of ITAR eligibility and, where applicable, obtaining any required export authorization or license.

 

Equal Opportunity Statement

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Education

Select...
Select...
Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Portal Space Systems’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.