Site Reliability Engineer

Blockdaemon Inc.; Town of Galway (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

Blockdaemon Inc. is seeking a hands-on Site Reliability Engineer to own our cloud infrastructure across AWS, GCP, and Azure with a focus on network security and egress control.

You will design, harden, and automate the multi-cloud foundation using Terraform, Ansible, and Helm, while operating GKE and managing Cloudflare, Tailscale, and API gateways. You will improve reliability with observability (Grafana), secure CI/CD (GitHub/GitLab/ArgoCD), and incident response processes.

Qualifications

• 5+ years in an SRE, infrastructure, or platform engineering role with multi-cloud production workload experience.
• Proven SRE fundamentals: SLOs, toil measurement, blameless postmortems, reliability data driven priorities.
• Hands-on experience with AWS, GCP, and Azure networking primitives.
• Expertise in IaC and configuration management using Terraform and Ansible.
• Solid network security background including egress control and proxy architectures.
• Production Kubernetes (GKE) experience with Helm and ArgoCD deployment patterns.
• Experience with Cloudflare or similar edge/CDN/WAF platforms and API gateways.
• Practical knowledge of zero-trust networking (Tailscale) and network access control.
• On-call experience with pager-driven incident responses and postmortems.
• Strong scripting/automation in Go or Python, building tooling and runbooks.
• Clear communicator able to collaborate with security, compliance, and engineering.

Responsibilities

• Own design, reliability, and hardening of multi-cloud infrastructure (AWS, GCP, Azure).
• Develop and maintain Terraform and Ansible as the source of truth for environments.
• Own network security: egress control, traffic segmentation, outbound controls across clouds.
• Manage Cloudflare footprint and API gateway layer (Zuplo).
• Operate and secure Tailscale as the zero-trust network; roll out access policies.
• Run production Kubernetes (GKE) with cluster hardening, network policy, secure deployment patterns.
• Build observability with Grafana to detect misconfigurations before incidents.
• Harden CI/CD and deployment pipelines (GitHub, GitLab, ArgoCD) from infra and supply chain security lens.
• Manage on-call rotation and incident response; drive root cause analysis and durable fixes.
• Identify toil and automate manual infrastructure tasks; bridge security and platform engineering.

Skills

SRE fundamentals

On-call experience

Communication

Go

Python

Tools

Terraform

Ansible

Kubernetes (GKE)

Cloudflare

Tailscale

Zuplo

ArgoCD

Grafana

GitHub

GitLab

Job description

Position Overview

Blockdaemon is looking for a hands-on Site Reliability Engineer to join our Security team and take ownership of the cloud infrastructure that our security posture depends on. This is fundamentally an infrastructure and networking role: you'll be the engineer who designs, hardens, and operates the multi cloud foundation (AWS, GCP, Azure) that everything else sits on top of, with a specific focus on network security, egress control, and infrastructure as code.

You'll work across our full cloud footprint, building and maintaining the Terraform and Ansible that define our environments, running production Kubernetes (GKE), and owning the network layer, including Cloudflare, Tailscale, and egress proxy infrastructure that controls how traffic moves in and out of our systems.

You'll have direct influence over how our cloud environments are structured, secured, and automated, and your work will have a visible, immediate impact on our risk posture and operational resilience.

Your Impact

• Own the design, reliability, and hardening of multi cloud infrastructure across AWS, GCP, and Azure

• Build and maintain infrastructure as code (Terraform, Ansible, Helm) as the source of truth for how environments are provisioned and configured

• Own network security architecture: egress proxy configuration, traffic segmentation, and outbound control across cloud environments

• Manage and evolve our Cloudflare footprint (DNS, WAF, edge security, traffic routing) and API gateway layer (Zuplo)

• Operate and secure Tailscale as our zero trust network access layer, including access policy design and rollout to new environments

• Run production Kubernetes (GKE) with an infrastructure security lens: cluster hardening, network policy, and secure deployment patterns

• Build observability (Grafana) for network and infrastructure health, so misconfigurations and anomalies are caught before they become incidents

• Harden CI/CD and deployment pipelines (GitHub, GitLab, ArgoCD) from an infrastructure and supply chain security perspective

• Manage on-call rotation and incident response for infrastructure and network layer issues, driving root cause analysis and durable fixes rather than one-off patches

• Reduce toil: identify manual infrastructure work and automate it.

• Act as the technical bridge between security and platform engineering on anything network or cloud infrastructure related

Role Requirement

• 5+ years in an SRE, infrastructure, or platform engineering role, with hands-on experience running production workloads across multiple cloud providers — this is not an entry point into SRE

• Proven experience with SRE fundamentals: defining SLOs, measuring toil, running blameless postmortems, and using reliability data to inform engineering priorities

• Strong, demonstrable experience with AWS, GCP, and Azure, including their networking primitives (VPCs, peering, firewall rules, load balancing)

• Proficiency with IaC and configuration management — Terraform and Ansible are both in daily use here and you'll be owning them, not just contributing to them

• Solid network security background, including experience designing or operating egress control and proxy architecture for security and compliance purposes

• Hands-on Kubernetes experience in production (we run GKE), including Helm and GitOps deployment patterns (we use ArgoCD)

• Experience with Cloudflare or a comparable edge/CDN/WAF platform, and familiarity with API gateway technologies

• Practical experience with Tailscale or another zero trust network access solution

• Genuine on-call experience: you've carried a pager, driven postmortems, and understand the difference between suppressing an alert and fixing the underlying problem

• Strong scripting and automation ability in Go or Python — you'll be writing tooling, runbooks, and automation scripts, not one-off fixes

• Clear communicator who can work directly with security, compliance, and engineering stakeholders without a translation layer

Nice-to-Have Skills

• Experience with Kafka or other streaming infrastructure, particularly for log and telemetry pipelines

• Experience supporting a SOC 2 or similar compliance program, ideally with Vanta or a comparable GRC platform

• Background in fintech, crypto, or another regulated industry where audit readiness and network controls are a constant, not a quarterly event

• Experience with Temporal or similar workflow orchestration for building reliable automation

• Exposure to secrets management (HashiCorp Vault) in a multi-cloud context

About Us:

We Power the Blockchain economy.

Blockdaemon powers the blockchain economy with its suite of industry-leading infrastructure solutions. We are a globally established, ISO-27001 certified partner with extensive protocol coverage, offering technical depth, industry-leading SLAs, 70+ global points of presence through 10+ cloud and bare metal providers, and 24/7 support for an unmatched institutional-grade experience. We provide integrated business solutions to exchanges, custodians, crypto platforms, financial institutions, and developers using our end-to-end suite of blockchain tools, including dedicated nodes, APIs, staking, liquid staking, MPC tech, and more. Blockdaemon provides its customers with the confidence to quickly and easily scale without compromising security or compliance.

We are a globally distributed team.

Blockdaemon is an Equal Opportunity Employer.