Site Reliability Engineer

Blockdaemon is hiring a hands-on Site Reliability Engineer for its Security team. The role designs, secures, and operates multi-cloud infrastructure, with a focus on network security, infrastructure as code, production Kubernetes, observability, and incident response.

Responsibilities:

• Own the design, reliability, and hardening of multi cloud infrastructure across AWS, GCP, and Azure
• Build and maintain infrastructure as code (Terraform, Ansible, Helm) as the source of truth for how environments are provisioned and configured
• Own network security architecture: egress proxy configuration, traffic segmentation, and outbound control across cloud environments
• Manage and evolve our Cloudflare footprint (DNS, WAF, edge security, traffic routing) and API gateway layer (Zuplo)
• Operate and secure Tailscale as our zero trust network access layer, including access policy design and rollout to new environments
• Run production Kubernetes (GKE) with an infrastructure security lens: cluster hardening, network policy, and secure deployment patterns
• Build observability (Grafana) for network and infrastructure health, so misconfigurations and anomalies are caught before they become incidents
• Harden CI/CD and deployment pipelines (GitHub, GitLab, ArgoCD) from an infrastructure and supply chain security perspective
• Manage on-call rotation and incident response for infrastructure and network layer issues, driving root cause analysis and durable fixes rather than one-off patches
• Reduce toil: identify manual infrastructure work and automate it
• Act as the technical bridge between security and platform engineering on anything network or cloud infrastructure related

Requirements:

• 5+ years in an SRE, infrastructure, or platform engineering role, with hands-on experience running production workloads across multiple cloud providers — this is not an entry point into SRE
• Proven experience with SRE fundamentals: defining SLOs, measuring toil, running blameless postmortems, and using reliability data to inform engineering priorities
• Strong, demonstrable experience with AWS, GCP, and Azure, including their networking primitives (VPCs, peering, firewall rules, load balancing)
• Proficiency with IaC and configuration management — Terraform and Ansible are both in daily use here and you'll be owning them, not just contributing to them
• Solid network security background, including experience designing or operating egress control and proxy architecture for security and compliance purposes
• Hands-on Kubernetes experience in production (we run GKE), including Helm and GitOps deployment patterns (we use ArgoCD)
• Experience with Cloudflare or a comparable edge/CDN/WAF platform, and familiarity with API gateway technologies
• Practical experience with Tailscale or another zero trust network access solution
• Genuine on-call experience: you've carried a pager, driven postmortems, and understand the difference between suppressing an alert and fixing the underlying problem
• Strong scripting and automation ability in Go or Python — you'll be writing tooling, runbooks, and automation scripts, not one-off fixes
• Clear communicator who can work directly with security, compliance, and engineering stakeholders without a translation layer
• Experience with Kafka or other streaming infrastructure, particularly for log and telemetry pipelines
• Experience supporting a SOC 2 or similar compliance program, ideally with Vanta or a comparable GRC platform
• Background in fintech, crypto, or another regulated industry where audit readiness and network controls are a constant, not a quarterly event
• Experience with Temporal or similar workflow orchestration for building reliable automation
• Exposure to secrets management (HashiCorp Vault) in a multi-cloud context