Site Reliability Engineer

Blockdaemon is looking for a hands-on Site Reliability Engineer to join our Security team and take ownership of the cloud infrastructure that our security posture depends on. This is fundamentally an infrastructure and networking role: you'll be the engineer who designs, hardens, and operates the multi cloud foundation (AWS, GCP, Azure) that everything else sits on top of, with a specific focus on network security, egress control, and infrastructure as code.

You'll work across our full cloud footprint, building and maintaining the Terraform and Ansible that define our environments, running production Kubernetes (GKE), and owning the network layer, including Cloudflare, Tailscale, and egress proxy infrastructure that controls how traffic moves in and out of our systems.

You'll have direct influence over how our cloud environments are structured, secured, and automated, and your work will have a visible, immediate impact on our risk posture and operational resilience.

Your Impact

- Own the design, reliability, and hardening of multi cloud infrastructure across AWS, GCP, and Azure

- Build and maintain infrastructure as code (Terraform, Ansible, Helm) as the source of truth for how environments are provisioned and configured

- Own network security architecture: egress proxy configuration, traffic segmentation, and outbound control across cloud environments

- Manage and evolve our Cloudflare footprint (DNS, WAF, edge security, traffic routing) and API gateway layer (Zuplo)

- Operate and secure Tailscale as our zero trust network access layer, including access policy design and rollout to new environments

- Run production Kubernetes (GKE) with an infrastructure security lens: cluster hardening, network policy, and secure deployment patterns

- Build observability (Grafana) for network and infrastructure health, so misconfigurations and anomalies are caught before they become incidents

- Harden CI/CD and deployment pipelines (GitHub, GitLab, ArgoCD) from an infrastructure and supply chain security perspective

- Manage on-call rotation and incident response for infrastructure and network layer issues, driving root cause analysis and durable fixes rather than one-off patches

- Reduce toil: identify manual infrastructure work and automate it.

- Act as the technical bridge between security and platform engineering on anything network or cloud infrastructure related