Senior Infrastructure Engineer, Government Systems

As a Senior Infrastructure Engineer in the Investigations group, you'll be a technical leader on the Government Systems team - the group responsible for the deployment platform and operational infrastructure that delivers Chainalysis Reactor to government and high-security customers. The mission of the Government Systems team is to ensure that Chainalysis's most security-sensitive customers can run Reactor reliably in their own environments - including networks with strict access controls and limited connectivity. Government Systems sits at the intersection of infrastructure operations and product delivery. Product teams own their application code, but rely on Government Systems to provision environments, manage release pipelines, and operate the deployment platform. As a senior engineer you will be the connective tissue between these groups - setting technical direction, resolving cross-cutting issues, and ensuring the platform evolves to meet growing demands. Note: This position requires eligibility to access U.S. Government information and systems. Due to applicable government security requirements, only U.S. citizens are eligible for this role. Due to collaboration with Europe, we are highly prioritizing candidates based in EST timezone. In this role, you'll: - Lead the design and evolution of RKE2 Kubernetes clusters across development, acceptance, and production environments - driving upgrades, capacity planning, networking strategy, and operational resilience - Architect and maintain infrastructure as code (Terraform) to provision and manage AWS-based environments, establishing patterns and modules that the team can scale with confidence - Own the CI/CD platform (GitHub Actions) end-to-end - designing pipeline architecture, improving build performance, and ensuring releases flow reliably through staged environments - Drive GitOps-based delivery strategy using Flux CD, defining standards for Helm charts and Kustomize overlays and ensuring consistent reconciliation across clusters - Define container image lifecycle policies - building, signing, storing, and distributing images across OCI registries for multiple deployment targets - Identify and eliminate operational toil through automation, improving environment provisioning, configuration management, and deployment processes at a systemic level - Establish and maintain monitoring, alerting, and incident response practices - owning dashboards, runbooks, and post-incident reviews that raise platform reliability over time - Serve as a technical point of contact for product service teams integrating into the deployment pipeline - unblocking teams, troubleshooting complex environment issues, and advocating for infrastructure best practices - Own the security posture of the deployment platform - managing secrets, certificates, RBAC policies, and security configurations to meet compliance and operational security requirements - Mentor and grow other engineers on the team through code review, pairing, design discussions, and knowledge sharing We're looking for candidates who have: - Deep experience operating Kubernetes in production at scale - cluster lifecycle management, Helm, networking, persistent storage, performance tuning, and complex workload troubleshooting - Expert-level proficiency with Terraform for provisioning and managing cloud infrastructure across multiple environments, including module design and state management strategies - Strong Linux systems administration skills (RHEL or similar - networking, storage, systemd, performance analysis, shell scripting) - Extensive experience designing and maintaining CI/CD pipelines (GitHub Actions, Jenkins, or similar), with a focus on reliability, speed, and developer experience - Deep familiarity with AWS services commonly used in infrastructure (EC2, S3, VPC, IAM, EBS, Lambda, and related networking and security services) - A strong operational mindset - you take ownership of reliability, think about failure modes proactively, and build automation to prevent recurring issues before they impact customers Nice to have experience: - Experience with GitOps tools such as Flux CD or ArgoCD in complex, multi-environment setups - including designing promotion strategies and managing drift - Familiarity with container registry operations, image distribution, OCI artifact management, and image signing or verification workflows - Experience managing databases in Kubernetes environments (e.g., PostgreSQL operators, stateful workloads, backup and recovery strategies) - Familiarity with Kafka or other message brokers in a containerized environment, including operational management and scaling - Experience with configuration management or automation tools (Ansible or similar) at fleet scale - Advanced scripting proficiency in Python for infrastructure automation, tooling, and integration work - Experience supporting environments with strict security or compliance requirements (FedRAMP, FIPS, IL environments, or similar) - Exposure to or passion for the cryptocurrency technology ecosystem Technologies we use: - Kubernetes: RKE2, Helm, Kustomize, Flux CD - Cloud provider: AWS (EC2, S3, EBS, VPC, IAM, Lambda) - Infrastructure as code: Terraform - CI/CD: GitHub Actions, semantic-release - Monitoring and alerting: Prometheus, Grafana, Datadog, Humio - Scripting and automation: Shell, Python - Container registries: OCI/Docker - Database management: PostgreSQL - Event streaming: Kafka - Operating systems: RHEL, Rocky Linux, Amazon Linux