Intern in the Mission Operations Infrastructure IT and Operations Control Centre Section - ESA European Space Agency
Intern in the Mission Operations Infrastructure IT and Operations Control Centre Section
Job Requisition ID: 18946Closing Date: 30 November 2024 23:59 CET/CEST
Publication: External Only
Type of Contract: Intern
Date Posted: 1 November 2024
Internship Opportunity in the Directorate of Operations.
LocationDarmstadt
Our team and missionThis position is based at the European Space Operations Centre (ESOC) - Darmstadt, Germany
Under the direct authority of the Director of Operations, the Mission Operations Department is responsible for the preparation and conducting of flight operations for all ESA missions. For this purpose, the Mission Operations Department is the primary interface of OPS towards the Programme Directorates.In addition to operational support to ESA customer missions, the Department is responsible for the support to missions of external customers and, in particular, to missions of other space agencies. Operational activities include both spacecraft and related ground segment operations.
The Mission Operations IT (MOI-IT) and Operations Control Centre team is devoted to providing essential infrastructure and platform services for mission operations. The team ensures that control rooms and the related IT infrastructure remain fit for purpose and that they continuously evolve to meet current and future needs.The managed physical and virtualised computing, storage, and communication systems provide the backbone for ESA’s operations capabilities, spanning ESOC and ESA’s network of antenna stations.
Candidates interested are encouraged to visit the ESA website: http://www.esa.intField(s) of activity for the internship
You can choose between the following topics:
- Topic 1: Container Image Registry for the Missions Operations Infrastructure IT (MOI-IT)
You will investigate and evaluate open-source tools to establish a robust container image registry that supports both images and artifacts. Key features to explore and implement include role-based access control (RBAC), vulnerability scanning, and the support of signed/trusted images to ensure security and compliance across MOI-IT.
The selected tool will be deployed, and its functionalities demonstrated, with a focus on integrating it into MOI-IT existing Kubernetes infrastructure and other container initiatives.
The project is essential for enhancing the security, efficiency, and reliability of missions containerized environments and offers a great opportunity for hands-on experience with cutting-edge container technologies and is highly impactful for MOI-IT Dev Ops practices.
- Topic 2: Backup in the Public Cloud
You will explore and evaluate the options from public cloud providers, considering backup vendor integrations, virtual tape services, archive services and the network infrastructure required.
The project will also require an assessment of Mean Time to Recovery (MTR) and cost analysis to ensure the chosen solution is both efficient and economical. You will have the opportunity to work with cutting-edge cloud technologies in leading public cloud providers.
With this project you will learn about backup solutions, different storage services and the constraints when operating a critical infrastructure. By the conclusion of the project, you will demonstrate an operational cloud backup solution, showcasing how it can replace the current on-prem infrastructure while meeting the defined recovery time and cost objectives.
- Topic 3: Infrastructure Configuration and Lifecycle Management
You will evaluate different open-source configuration management tools to support the complete lifecycle management of MOI-IT’s extensive infrastructure, which includes thousands of physical and virtual servers supporting ESA space missions.
This project will focus on identifying and implementing a tool that automates the provisioning and configuration of both physical and virtual servers.
The tool will integrate with configuration management software like Ansible to automate Operating System configuration, deployment of applications, automation of routine tasks, and manage infrastructure changes efficiently. It should include comprehensive interaction options such as a web interface, command line access, and a REST API to ensure robust, auditable management of the system.
Through this project, you will gain hands-on experience with automation tools, large-scale system management, and the operational processes involved in managing a critical computing infrastructure. This is an opportunity to work with open-source technologies and learn about the challenges in managing a large, mission-critical infrastructure.Behavioural competencies
Result Orientation
Operational Efficiency
Fostering Cooperation
Relationship Management
Continuous Improvement
Forward Thinking
For more information, please refer to ESA Core Behavioural Competencies guidebook
Education
You must be a university student, preferably in your final or second-to-last year of a university course at Master’s level and you need to remain enrolled at your University for the entire duration of the internship.
Additional requirements
The working languages of the Agency are English and French. A good knowledge of one of these is required. Knowledge of another Member State language would be an asset.
Topic 1: Container Image Registry for the Missions Operations Infrastructure IT (MOI-IT)- Familiarity with container technologies and Kubernetes orchestration;
- Awareness of public cloud platforms and open-source container registry tools (e.g., Harbor, Quay);
- Understanding of RBAC principles and how they apply to securing container registries;
- Familiarity with vulnerability scanning, trusted image practices, and container security best practices.
- Familiarity with public cloud services, especially storage and backup solutions;
- Basic knowledge of backup strategies, data recovery methods, and Mean Time to Recovery (MTR);
- Understanding of how on-prem infrastructure integrates with cloud services, especially in hybrid environment;
- Basic understanding of networking concepts (e.g., VPNs, data transfer, bandwidth considerations) for efficient cloud backup;
- Understanding of data encryption, security best practices, and compliance requirements for cloud-based backups.
- Familiarity with configuration management tools like (e.g., Ansible), including automating tasks and managing system configurations;
- Knowledge of provisioning, configuring, and managing the lifecycle of physical and virtual servers in both on-prem and cloud environments;
- Basic experience with managing Linux operating system, including installation, configuration, and troubleshooting;
- Understanding of networking protocols and services (e.g., PXE) involved in bare-metal provisioning and system deployment;
- Familiarity with interacting with REST APIs and using command-line tools for system management and automation.
Other information
ESA is an equal opportunity employer, committed to achieving diversity within the workforce and creating an inclusive working environment. We therefore welcome applications from all qualified candidates irrespective of gender, sexual orientation, ethnicity, beliefs, age, disability or other characteristics.Applications from women are encouraged.
At the Agency we value diversity, and we welcome people with disabilities. Whenever possible, we seek to accommodate individuals with disabilities by providing the necessary support at the workplace. The Human Resources Department can also provide assistance during the recruitment process.If you would like to discuss this further, please contact us via email at contact.human.resources@esa.int.
Please note that applications are only considered from nationals of one of the following States: Austria, Belgium, the Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Luxembourg, the Netherlands, Norway, Poland, Portugal, Romania, Spain, Sweden, Switzerland, and the United Kingdom.Nationals from Latvia, Lithuania, Slovakia and Slovenia, as Associate Member States, or Canada as a Cooperating State, can apply as well as those from Bulgaria, Croatia and Cyprus as European Cooperating States (ECS).