Senior Infrastructure Engineer (Kubernetes, GCP, Pulumi)

Polygon Labs is a global blockchain payments company building and operating infrastructure to move money instantly, reliably, and at internet scale. The mission is to move all money onchain, supporting trillions of dollars in onchain value transfer and millions of daily transactions for global banks, fintechs, enterprises, and consumer applications.

Your Role

You will independently execute defined infrastructure work to ensure Polygon’s production systems remain reliable, secure, and operationally efficient. This hands-on, operational role focuses on:

• Cloud infrastructure, Kubernetes, infrastructure as code, observability, incident response, and secure lifecycle management of secrets and configurations.

You will work core hours overlapping with the EU business day, contributing as a trusted infrastructure partner by reviewing and approving infrastructure changes and supporting production systems through incidents and continuous improvement.

Your Responsibilities

• Operate production Kubernetes environments on GKE, including day-to-day cluster operations, troubleshooting, maintenance, and reliability improvements.

• Build and maintain infrastructure as code using Pulumi, including Pulumi ESC for environments, secrets, and configuration, primarily in TypeScript and Python.

• Manage GitOps workflows with ArgoCD and maintain reliable CI/CD pipelines, including diagnosing pipeline-level race conditions.

• Operate GCP infrastructure across IAM, Pub/Sub, Cloud SQL, VPC, and Secret Manager. Tune Pub/Sub subscriptions through settings such as acknowledgement deadlines, dead-letter queue redrive behavior, and backlog alerting.

• Manage Cloudflare entirely as code, including Workers and DNS, and maintain lifecycle cleanup for stale preview environments.

• Own the lifecycle of secrets and configuration across services, including provisioning, rotation, naming conventions, and preventing cross-service authentication drift.

• Independently respond to production incidents through triage, escalation, documentation, runbooks, and incident.io workflows.

• Review and approve infrastructure pull requests, ensuring high standards for safety, correctness, and operational readiness.

• Build and maintain Grafana dashboards and alerts, with working knowledge of the underlying agent and collector layer, including Grafana Alloy.

• Execute SOC2-driven infrastructure and security work and maintain appropriate separation between regulated or sensitive-data environments.

• Read and contribute to systems involving Go, TypeScript, and Python.

What You'll Need

• Demonstrated production experience operating Kubernetes on GKE in a day-to-day infrastructure or platform engineering capacity.

• Hands-on Pulumi experience, including Pulumi ESC for managing environments, secrets, and configuration, with practical proficiency in both TypeScript and Python.

• Experience with ArgoCD, GitOps workflows, CI/CD pipelines, and debugging pipeline-level race conditions.

• Strong hands-on experience with GCP services, including IAM, Pub/Sub, Cloud SQL, VPC, and Secret Manager, including subscription-level Pub/Sub tuning and alerting.

• Experience managing Cloudflare Workers and DNS as code, including cleaning up stale preview environments.

• Experience owning secrets and configuration across services, including provisioning, rotation, naming conventions, and preventing cross-service authentication drift.

• Demonstrated ability to independently triage and manage production incidents, including escalation, runbooks, and incident.io workflows.

• Ability to execute infrastructure work independently from defined requirements without requiring architecture-level hand-holding.

• Experience reviewing and approving infrastructure changes through pull requests.

• Working knowledge of Grafana dashboards, alerting, and the Grafana Alloy or comparable agent and collector layer.

• Security and compliance literacy, including the ability to execute SOC2-driven infrastructure work and operate effectively in regulated or sensitive-data environments.

• Ability to read Go and work comfortably across TypeScript and Python codebases.

• Availability to work core hours overlapping with the EU business day.