ABOUT POLYGON LABS
Polygon Labs is a global blockchain payments company building and operating infrastructure to move money instantly, reliably, and at internet scale, with the mission to move all money onchain. It is building the Polygon Open Money Stack, an open and integrated stack of services and technologies to instantly and reliably move money anywhere, and put it to work. Its infrastructure has facilitated trillions of dollars in onchain value transfer and supported millions of transactions daily for some of the globe's largest banks, fintechs, enterprises, and consumer applications.
YOUR ROLE
You will independently execute defined infrastructure work that keeps Polygon's production systems reliable, secure, and operationally efficient. This role is hands-on and operational, with a focus on cloud infrastructure, Kubernetes, infrastructure as code, observability, incident response, and the secure lifecycle of secrets and configuration across services.
You will work core hours overlapping with the EU business day and contribute as a trusted infrastructure partner, including reviewing and approving infrastructure changes and supporting production systems through incidents and continuous improvement.
YOUR RESPONSIBILITIES
- Operate production Kubernetes environments on GKE, including day-to-day cluster operations, troubleshooting, maintenance, and reliability improvements.
- Build and maintain infrastructure as code using Pulumi, including Pulumi ESC for environments, secrets, and configuration, primarily in TypeScript and Python.
- Manage GitOps workflows with ArgoCD and maintain reliable CI/CD pipelines, including diagnosing pipeline-level race conditions.
- Operate GCP infrastructure across IAM, Pub/Sub, Cloud SQL, VPC, and Secret Manager. Tune Pub/Sub subscriptions through settings such as acknowledgement deadlines, dead-letter queue redrive behavior, and backlog alerting.
- Manage Cloudflare entirely as code, including Workers and DNS, and maintain lifecycle cleanup for stale preview environments.
- Own the secrets and configuration lifecycle across services, including provisioning, rotation, naming conventions, and preventing cross-service authentication drift.
- Respond independently to production incidents through triage, escalation, documentation, runbooks, and incident.io http://incident.io workflows.
- Review and approve infrastructure pull requests, helping maintain a high standard for safety, correctness, and operational readiness.
- Build and maintain Grafana dashboards and alerts, with working knowledge of the underlying agent and collector layer, including Grafana Alloy.
- Execute SOC2-driven infrastructure and security work and maintain appropriate separation between regulated or sensitive-data environments.
- Read and contribute to systems involving Go, TypeScript, and Python.
WHAT YOU'LL NEED
- Demonstrated production experience operating Kubernetes on GKE in a day-to-day infrastructure or platform engineering capacity.
- Hands-on Pulumi experience, including Pulumi ESC for managing environments, secrets, and configuration, with practical proficiency in both TypeScript and Python.
- Experience with ArgoCD, GitOps workflows, CI/CD pipelines, and debugging pipeline-level race conditions.
- Strong hands-on experience with GCP services including IAM, Pub/Sub, Cloud SQL, VPC, and Secret Manager, including subscription-level Pub/Sub tuning and alerting.
- Experience managing Cloudflare Workers and DNS as code, including cleaning up stale preview environments.
- Experience owning secrets and configuration across services, including provisioning, rotation, naming conventions, and preventing cross-service authentication drift.
- Demonstrated ability to independently triage and manage production incidents, including escalation, runbooks, and incident.io http://incident.io workflows.
- Ability to execute infrastructure work independently from defined requirements without requiring architecture-level hand-holding.
-…