Platform engineer in blockchain payments

Polygon Labs; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Remote‑first глобальная команда

Медицинское страхование

401k с 3%匹

$1 500 на обустройство домашнего офиса

$200 ежегодно на книги

$75 в месяц на интернет/телефон

Гибкий отпуск

Ноутбук от компании

Поддержка здоровья и благополучия

Job summary

Polygon Labs ищет инженера по инфраструктуре для эксплуатации и расширения продакшн‑окружений Kubernetes на GKE. В обязанности входит управление IaC через Pulumi (TS/Python), поддержка CI/CD и GitOps через ArgoCD, а также работа с GCP, Cloudflare и управлением секретами.

Требуется автономность, SOC2‑ориентированность и опыт чтения Go/TS/Python. Компания предлагает удаленную работу, конкурентный пакет компенсаций и льготы, включая медицинское страхование, 401k и комплект для дома.

Qualifications

• Опыт эксплуатации Kubernetes на GKE в продакшн окружении.
• Практический опыт Pulumi, включая ESC, для управляемых окружений, с TypeScript и Python.
• Опыт ArgoCD, GitOps, CI/CD и устранения race conditions.
• Опыт работы с сервисами GCP (IAM, Pub/Sub, Cloud SQL, VPC, Secret Manager) и настройкой подписок Pub/Sub.
• Управление Cloudflare как кодом (Workers и DNS) и очистка превью окружений.
• Опыт управления секретами и конфигурациями между сервисами, предотвращение дрейфа авторизации.
• Умение реагировать на инциденты в продакшне, документирование, runbooks, incident.io.
• Умение работать автономно над инфраструктурой без архитектурной поддержки.
• Опыт ревью инфраструктурных PR.
• Базовые знания Grafana и алертинга (Grafana Alloy или аналог).
• Безопасность и SOC2, регламентированные среды.
• Умение читать Go и работать с TS/Python кодами.
• Готовность работать в часах, пересекающихся с EU.

Responsibilities

• Эксплуатация продакшн Kubernetes на GKE, устранение инцидентов и повышение надежности.
• Разработка и поддержка инфраструктуры как код через Pulumi (TypeScript/Python).
• Управление GitOps через ArgoCD и CI/CD пайплайны, устранение race‑conditions.
• Эксплуатация служб GCP: IAM, Pub/Sub, Cloud SQL, VPC, Secret Manager и настройка уведомлений.
• Настройка подписок Pub/Sub: deadlines, dead-letter, backlog‑alerting.
• Управление Cloudflare как кодом (Workers/DNS) и очистка превью окружений.
• Управление секретами и конфигурацией между сервисами, предотвращение дрейфа авторизации.
• Триаж инцидентов, эскалация, создание runbooks и работа через incident.io.
• Ревью и утверждение изменений инфраструктуры через PR.
• Построение Grafana дашбордов и алертов, работа с агентом/collector.
• Обеспечение SOC2‑соответствия и работу в регламентированных средах.
• Чтение Go и работа с кодами на TypeScript и Python.
• Участие в гибких графиках, overlaps с европейским бизнес‑днем.

Skills

Kubernetes

Pulumi

TypeScript

Python

ArgoCD

GitOps

CI/CD

GCP

Cloudflare

Secrets management

Go

Incident management

Grafana

SOC2

Tools

Pulumi»

ArgoCD

Grafana

Go

Job description

Описание:

Polygon Labs is a global blockchain payments company building and operating infrastructure to move money instantly, reliably, and at internet scale, with the mission to move all money onchain. It is building the Polygon Open Money Stack, an open and integrated stack of services and technologies to instantly and reliably move money anywhere, and put it to work.

Задачи:

• Operate production Kubernetes environments on GKE, including day‑to‑day cluster operations, troubleshooting, maintenance, and reliability improvements.
• Build and maintain infrastructure as code using Pulumi, including Pulumi ESC for environments, secrets, and configuration, primarily in TypeScript and Python.
• Manage GitOps workflows with ArgoCD and maintain reliable CI/CD pipelines, including diagnosing pipeline‑level race conditions.
• Operate GCP infrastructure across IAM, Pub/Sub, Cloud SQL, VPC, and Secret Manager.
• Tune Pub/Sub subscriptions through settings such as acknowledgement deadlines, dead‑letter queue redrive behavior, and backlog alerting.
• Manage Cloudflare entirely as code, including Workers and DNS, and maintain lifecycle cleanup for stale preview environments.
• Own the secrets and configuration lifecycle across services, including provisioning, rotation, naming conventions, and preventing cross‑service authentication drift.
• Respond independently to production incidents through triage, escalation, documentation, runbooks, and incident.io workflows.
• Review and approve infrastructure pull requests, helping maintain a high standard for safety, correctness, and operational readiness.
• Build and maintain Grafana dashboards and alerts, with working knowledge of the underlying agent and collector layer, including Grafana Alloy.
• Execute SOC2‑driven infrastructure and security work and maintain appropriate separation between regulated or sensitive‑data environments.
• Read and contribute to systems involving Go, TypeScript, and Python.

Требования:

• Demonstrated production experience operating Kubernetes on GKE in a day‑to‑day infrastructure or platform engineering capacity.
• Hands‑on Pulumi experience, including Pulumi ESC for managing environments, secrets, and configuration, with practical proficiency in both TypeScript and Python.
• Experience with ArgoCD, GitOps workflows, CI/CD pipelines, and debugging pipeline‑level race conditions.
• Strong hands‑on experience with GCP services including IAM, Pub/Sub, Cloud SQL, VPC, and Secret Manager, including subscription‑level Pub/Sub tuning and alerting.
• Experience managing Cloudflare Workers and DNS as code, including cleaning up stale preview environments.
• Experience owning secrets and configuration across services, including provisioning, rotation, naming conventions, and preventing cross‑service authentication drift.
• Demonstrated ability to independently triage and manage production incidents, including escalation, runbooks, and incident.io workflows.
• Ability to execute infrastructure work independently from defined requirements without requiring architecture‑level hand‑holding.
• Experience reviewing and approving infrastructure changes through pull requests.
• Working knowledge of Grafana dashboards, alerting, and the Grafana Alloy or comparable agent and collector layer.
• Security and compliance literacy, including the ability to execute SOC2‑driven infrastructure work and operate effectively in regulated or sensitive‑data environments.
• Ability to read Go and work comfortably across TypeScript and Python codebases.
• Availability to work core hours overlapping with the EU business day.

Условия:

• Remote first global workforce
• Industry leading Medical, Dental and Vision health insurance*
• Company matching 401k with 3% match*
• $1,500 Home Office Set Up Allowance (life‑time max)
• $200 Annual Book Allowance Program
• $75 Monthly internet or phone reimbursement
• Flexible Time Off
• Company issued laptop
• Egg freezing, mental health, and employee wellness benefits
• In certain countries medical, dental and vision is fully covered for employees & their dependents. This is country and plan specific.
• 401k is for United States employees only