Senior Infrastructure Engineer, Government Systems

The engineering team at Chainalysis is inspired by solving the hardest technical challenges and creating products that build trust in cryptocurrencies. We’re a global organization with teams in Denmark, UK, Canada, the USA, and Israel who thrive on the challenging work we do and doing it with other exceptionally talented teammates. Our industry changes every day and our job is to create user facing products supported by a flexible and scalable data platform allowing us to adapt to those rapid changes and bring value to our customers.

As a Senior Infrastructure Engineer in the Investigations group, you'll be a technical leader on the Government Systems team — the group responsible for the deployment platform and operational infrastructure that delivers Chainalysis Reactor to government and high-security customers.

Note:
This position requires eligibility to access U.S. Government information and systems. Due to applicable government security requirements, only U.S. citizens are eligible for this role. Due to collaboration with Europe, we are highly prioritizing candidates based in EST timezone.

• Lead the design and evolution of RKE2 Kubernetes clusters across development, acceptance, and production environments — driving upgrades, capacity planning, networking strategy, and operational resilience
• Architect and maintain infrastructure as code (Terraform) to provision and manage AWS-based environments, establishing patterns and modules that the team can scale with confidence
• Own the CI/CD platform (Git Hub Actions) end-to-end — designing pipeline architecture, improving build performance, and ensuring releases flow reliably through staged environments
• Drive Git Ops-based delivery strategy using Flux CD, defining standards for Helm charts and Kustomize overlays and ensuring consistent reconciliation across clusters
• Define container image lifecycle policies — building, signing, storing, and distributing images across OCI registries for multiple deployment targets
• Identify and eliminate operational toil through automation, improving environment provisioning, configuration management, and deployment processes at a systemic level
• Establish and maintain monitoring, alerting, and incident response practices — owning dashboards, runbooks, and post-incident reviews that raise platform reliability over time
• Serve as a technical point of contact for product service teams integrating into the deployment pipeline — unblocking teams, troubleshooting complex environment issues, and advocating for infrastructure best practices
• Own the security posture of the deployment platform — managing secrets, certificates, RBAC policies, and security configurations to meet compliance and operational security requirements
• Mentor and grow other engineers on the team through code review, pairing, design discussions, and knowledge sharing

• Deep experience operating Kubernetes in production at scale — cluster lifecycle management, Helm, networking, persistent storage, performance tuning, and complex workload troubleshooting
• Expert-level proficiency with Terraform for provisioning and managing cloud infrastructure across multiple environments, including module design and state management strategies
• Strong Linux systems administration skills (RHEL or similar — networking, storage, systemd, performance analysis, shell scripting)
• Extensive experience designing and maintaining CI/CD pipelines (Git Hub Actions, Jenkins, or similar), with a focus on reliability, speed, and developer experience
• Deep familiarity with AWS services commonly used in infrastructure (EC2, S3, VPC, IAM, EBS, Lambda, and related networking and security services)
• A strong operational mindset — you take ownership of reliability, think about failure modes proactively, and build automation to prevent recurring issues before they impact customers

• Experience with Git Ops tools such as Flux CD or ArgoCD in complex, multi-environment setups — including designing promotion strategies and managing drift
• Familiarity with container registry operations, image distribution, OCI artifact management, and image signing or verification workflows
• Experie…