About the company
ICEYE is the world leader in sovereign intelligence from space. We deliver persistent monitoring capabilities to detect and respond to changes in any location on Earth. ICEYE owns the world's largest and most advanced SAR (synthetic aperture radar) satellite constellation. To our customers we provide intelligence with unmatched quality, latency and revisit times, in any weather, day or night. To governments who choose to operate their own constellation we provide this proven capability as a sovereign system.
ICEYE-built constellations serve customers in defence and intelligence, environmental monitoring, insurance and emergency management. We enable fast decisions that contribute to a safer future.
Founded and headquartered in Finland, ICEYE operates globally with over 1000 employees across Europe, North America, the Middle East, and Asia-Pacific.
Responsibilities
- Hands on software engineering of our satellite on-board updating system, built to deploy software and firmware updates: features, maintenance, tests and documentation.
- Contribute to the build layer across the flight software domain, so every repository is built, versioned and packaged the same way.
- Enforce immutable releases and harden the packaging and signing pipelines: least-privilege permissions, pinned workflows and dependencies, approvals, and proper signing key management.
- Work with the Linux platform team on how updates land on the satellite on-board computers, covering packaging format, filesystem layout and access control, making sure what we build installs cleanly and safely.
Requirements
Must haves:
- Embedded software engineering experience, with hands-on embedded Linux development: cross-compilation for ARM or similar targets, kernel configuration, device tree overlays, root filesystem and image construction.
- Production CI/CD experience for compiled artifacts, not only containers or web deployments. GitHub Actions specifically is required, and workflow hardening experience is valuable.
- Working proficiency in C and C++ build environments, and in Python and Bash for automation.
- Experience implementing release integrity controls, immutable artifacts storage. Signing key management, PKI and trust chains, AWS object-lock storage and cloud key management are all valuable here.
- Shipping software to embedded devices already in the field with a package-based update mechanism, ideally opkg, under controlled release processes, quality gates and formal sign-off.
Nice to haves:
- Command of CMake, including multi-repository setups, toolchain files, and shared build infrastructure that other teams consume. Buildroot experience is relevant here.
Conditions
- Employment type: Permanent
- Workplace model: Hybrid (3 days in the office)
- Employment is subject to applicable security screening (incl. SUPO, where required)
- Location: Warsaw, Poland / Espoo, Finland
- Benefits designed to support health and wellbeing, offerings vary by location.