Operate and secure Tailscale as our zero trust network access layer, including access policy design and rollout to new environments
Run production Kubernetes (GKE) with an infrastructure security lens: cluster hardening, network policy, and secure deployment patterns
Build observability (Grafana) for network and infrastructure health, so misconfigurations and anomalies are caught before they become incidents
Harden CI/CD and deployment pipelines (GitHub, GitLab, ArgoCD) from an infrastructure and supply chain security perspective
Manage on-call rotation and incident response for infrastructure and network layer issues, driving root cause analysis and durable fixes rather than one-off patches
Reduce toil: identify manual infrastructure work and automate it.
Act as the technical bridge between security and platform engineering on anything network or cloud infrastructure related
Role Requirement
5+ years in an SRE, infrastructure, or platform engineering role, with hands-on experience running production workloads across multiple cloud providers — this is not an entry point into SRE
Proven experience with SRE fundamentals: defining SLOs, measuring toil, running blameless postmortems, and using reliability data to inform engineering priorities
Strong, demonstrable experience with AWS, GCP, and Azure, including their networking primitives (VPCs, peering, firewall rules, load balancing)
Proficiency with IaC and configuration management — Terraform and Ansible are both in daily use here and you'll be owning them, not just contributing to them
Solid network security background, including experience designing or operating egress control and proxy architecture for security and compliance purposes
Hands-on Kubernetes experience in production (we run GKE), including Helm and GitOps deployment patterns (we use ArgoCD)
Experience with Cloudflare or a comparable edge/CDN/WAF platform, and familiarity with API gateway technologies
Practical experience with Tailscale or another zero trust network access solution
Genuine on-call experience: you've carried a pager, driven postmortems, and understand the difference between suppressing an alert and fixing the underlying problem
Strong scripting and automation ability in Go or Python — you'll be writing tooling, runbooks, and automation scripts, not one-off fixes
Clear communicator who can work directly with security, compliance, and engineering stakeholders without a translation layer
Nice-to-Have Skills
Experience with Kafka or other streaming infrastructure, particularly for log and telemetry pipelines
Experience supporting a SOC 2 or similar compliance program, ideally with Vanta or a comparable GRC platform
Background in fintech, crypto, or another regulated industry where audit readiness and network controls are a constant, not a quarterly event
Experience with Temporal or similar workflow orchestration for building reliable automation
Exposure to secrets management (HashiCorp Vault) in a multi-cloud context
About Us
We Power the Blockchain economy.
Blockdaemon powers the blockchain economy with its suite of industry-leading infrastructure solutions. We are a globally established, ISO-27001 certified partner with extensive protocol coverage, offering technical depth, industry-leading SLAs, 70+ global points of presence through 10+ cloud and bare metal providers, and 24/7 support for an unmatched institutional-grade experience. We provide integrated business solutions to exchanges, custodians, crypto platforms, financial institutions, and developers using our end-to-end suite of blockchain tools, including dedicated nodes, APIs, staking, liquid staking, MPC tech, and more. Blockdaemon provides its customers with the confidence to quickly and easily scale without compromising security or compliance.
We are a globally distributed team.
Blockdaemon is an Equal Opportunity Employer.
