AST SpaceMobile and our global partners are building the first and only space-based cellular broadband network to be accessible by standard smartphones. Called SpaceMobile, this ultra-powerful network is being designed to provide connectivity at 4G/5G speeds everywhere on the planet – on land, at sea and in flight.
Position Overview
We are seeking a Edge Compute Engineer to join the Latvia Design Center as the primary owner of our ground-segment compute and storage stack running the edge workloads running across all AST ground gateway stations. The Edge Compute Engineer owns the design, provisioning, and lifecycle of this platform across the full gateway fleet globally.
This is a design-and-operate role for a senior engineer who can define the edge compute reference architecture, build an IaC-driven fleet management stack, and take hands-on operational ownership. As the fleet scales, this role will also shape the edge compute platform for future edge functions beyond the current scope.
Key Responsibilities:
- Define and own the edge compute reference architecture: virtualization platform (VMware-based virtualization or Kubernetes), VM/container topology, storage layout, virtual networking, and resource governance across the gateway fleet
- Design the platform to support confirmed edge workloads with headroom and architectural provision for deployment of future edge workloads
- Maintain architecture documentation, platform design records, and operational runbooks
- Build and maintain Terraform-based provisioning pipelines and PXE/TFTP-based boot and instance management for consistent, repeatable gateway node deployment
- Implement Ansible-based configuration management and GitOps workflows to enforce auditable configuration state across all hypervisor nodes remotely
- Manage virtualization cluster operations (VMware-based virtualization or Kubernetes): VM/pod lifecycle, HA, storage pools, virtual networking, and patching automation
- Maintain platform-level observability integrated into the central Prometheus/Grafana/VictoriaMetrics stack and support capacity planning as the fleet expands
- Enforce OS hardening baselines, PKI/certificate lifecycle (IAM Roles Anywhere, mTLS), encrypted storage, and firewall rules aligned with AST’s security governance
- Coordinate with on-site teams or vendors for server firmware, BIOS, and RAID configuration as needed; maintain accurate hardware and software inventory across the fleet
Qualifications
Education:
Bachelor’s or Master’s degree in Computer Science, Telecommunications Engineering, or a related field — or equivalent professional experience.
Experience:
A minimum of 5 to 8 years of hands-on experience in infrastructure or platform engineering, with a strong focus on hypervisor administration, Linux systems, and infrastructure-as-code. Demonstrated experience designing and operating distributed or edge compute environments.
- Deep hands-on VMware-based virtualization or Kubernetes (K8s) — cluster management, HA/DRS, virtual networking, storage pools
- Advanced administration (RHEL, Ubuntu, Debian) — systemd, network stack tuning, performance profiling, security hardening
- Terraform for infrastructure provisioning; PXE/TFTP-based boot and instance management; fleet-scale state management
- Ansible and GitOps workflows for drift-free, pipeline-driven configuration enforcement
- Cisco/Juniper networking (switching/routing), VLANs, VPN (IPsec/WireGuard), PrivateLink/private connectivity, last-mile network management, firewall management
- AWS hybrid cloud - Direct Connect, Site-to-Site VPN, PrivateLink integration with on-premises infrastructure
- Certificate lifecycle management, mTLS, IAM Roles Anywhere, access control for production edge infrastructure
- Prometheus, Grafana, VictoriaMetrics — hypervisor and VM health dashboards and alerting
- Docker and Kubernetes sufficient to support containerized workloads on the edge platform
- English proficiency at B2 level or above; able to collaborate effectively with peers in a globally distributed team
Soft Skills:
- Platform ownership mindset - treats the edge compute fleet as a product to be designed, documented, and evolved, not just kept alive
- Proactive risk awareness - spots capacity constraints, configuration drift, and security gaps before they become incidents
- Disciplined remote operator - rigorous about change management, rollback planning, and validation procedures when working on live infrastructure without physical access
- Clear technical communicator - documents architecture and runbooks precisely enough that a new team member can operate the fleet independently
- Collaborative across disciplines - works naturally with OSS architects, DevOps engineers, security, and network teams without needing a detailed brief for each interaction
- Composed under pressure - methodical and structured during incident response, even when coordinating across time zones with remote site teams
Technology Stack:
- VMware-based virtualization or Kubernetes (K8s)
- Terraform, PXE/TFTP, Packer
- Ansible, GitOps (GitHub Actions, GitLab CI, Azure DevOps)
- RHEL, Ubuntu, Debian
- Docker, Kubernetes
- Cisco / Juniper (or equivalent), VLANs, IPsec / WireGuard VPN, PrivateLink, last-mile network management, firewall management (pfSense / OPNsense or equivalent)
- mTLS, cert-manager or equivalent
- Prometheus, Grafana, VictoriaMetrics, ELK stack
- AWS EC2, PrivateLink, Site-to-Site VPN / Direct Connect, IAM Roles Anywhere
- Git, Jira, Confluence, draw.io
Physical Requirements
- Ability to work in a standard office or remote home-office environment and use a computer for extended periods
- Ability to participate in occasional after-hours incident response actions
This job description may not be inclusive to the duties and responsibilities listed. Additional tasks may be assigned to the employee from time to time or the scope of the job may change as needed by business demands.
AST SpaceMobile is an Equal Opportunity, at will Employer; employment is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.