jobapplier

Site Reliability Engineer

Blockdaemon

Skills

Required

  • SRE / infrastructure / platform engineering
  • cloud
  • AWS
  • GCP
  • Azure
  • Terraform
  • Ansible
  • network security
  • Cloudflare
  • edge / CDN / WAF
  • Go / Python
  • Kubernetes
  • Kafka

Preferred

  • multi-cloud
  • SOC 2
  • Vanta
  • GRC
  • crypto
  • HashiCorp
  • Vault
  • DNS

Join Blockdaemon, a leading blockchain infrastructure platform, as a Site Reliability Engineer. In this hands-on role, you will take ownership of the cloud infrastructure that underpins our security posture. You will design, harden, and operate our multi-cloud foundation (AWS, GCP, Azure) with a specific focus on network security, egress control, and infrastructure as code. Your work will have a visible and immediate impact on our risk posture and operational resilience.

Responsibilities

  • Conception, durcissement et exploitation de l'infrastructure multi-cloud (AWS, GCP, Azure) avec un accent particulier sur la sécurité du réseau.
  • Construction et maintenance de l'infrastructure en tant que code (Terraform, Ansible, Helm) comme source de vérité pour la provision et la configuration des environnements.
  • Gestion et évolution de notre empreinte Cloudflare (DNS, WAF, sécurité de l'edge, routage du trafic) et de la couche de passerelle API (Zuplo).
  • Genuine on-call experience: you've carried a pager, driven postmortems, and understand the difference between suppressing an alert and fixing the underlying problem

Requirements

  • Proficiency with IaC and configuration management — Terraform and Ansible are both in daily use here and you'll be owning them, not just contributing to them
  • Solid network security background, including experience designing or operating egress control and proxy architecture for security and compliance purposes
  • 5+ years in an SRE, infrastructure, or platform engineering role, with hands-on experience running production workloads across multiple cloud providers — this is not an entry point into SRE
  • Strong scripting and automation ability in Go or Python — you'll be writing tooling, runbooks, and automation scripts, not one-off fixes
  • Clear communicator who can work directly with security, compliance, and engineering stakeholders without a translation layer
  • Practical experience with Tailscale or another zero trust network access solution
  • Hands-on Kubernetes experience in production (we run GKE), including Helm and GitOps deployment patterns (we use ArgoCD)
  • Strong, demonstrable experience with AWS, GCP, and Azure, including their networking primitives (VPCs, peering, firewall rules, load balancing)
  • Experience with Cloudflare or a comparable edge/CDN/WAF platform, and familiarity with API gateway technologies
  • Proven experience with SRE fundamentals: defining SLOs, measuring toil, running blameless postmortems, and using reliability data to inform engineering priorities
  • Experience with Kafka or other streaming infrastructure, particularly for log and telemetry pipelines
  • Experience with Temporal or similar workflow orchestration for building reliable automation

Preferred

  • Experience supporting a SOC 2 or similar compliance program, ideally with Vanta or a comparable GRC platform
  • Background in fintech, crypto, or another regulated industry where audit readiness and network controls are a constant, not a quarterly event
  • Exposure to secrets management (HashiCorp Vault) in a multi-cloud context