Platform Engineer II, Foundation

Platform Engineering at Chainalysis provides the shared infrastructure, tooling, and developer experience layer that powers every engineering team. We are moving away from team-owned infrastructure silos and consolidating onto shared, scalable platform patterns. The Foundation discipline owns the substrate: cloud infrastructure, networking, Kubernetes, streaming, and security primitives. Everything else runs on what we build.

We are hiring a Platform Engineer II, to join the Foundation team. Your job is straightforward: build, improve, and operate the infrastructure primitives that every service at Chainalysis depends on — Kubernetes clusters, cloud networking, streaming infrastructure (Kafka / Warp Stream), secrets management, IAM, and the reconcile rs that make it all self-service and drift-free. This is an infrastructure-focused IC role at the C4 level, typically suited for someone with 3–5 years of experience.

You will work alongside senior engineers who will pair with you, review your work, and invest in your growth. You will report to the Senior Manager of Platform Engineering.

In this role, you'll:

• Build and maintain cloud infrastructure across AWS and GCP using Terraform — designing the modules and patterns that provision the substrate our services run on, and thinking beyond the immediate use case to how your work is consumed across the organization

• Operate and evolve multi-tenant Kubernetes clusters (EKS) serving the entire engineering organization — owning node lifecycle, upgrades, security contexts, and networking decisions that affect every team

• Own the operational side of our streaming infrastructure migration from managed Kafka (MSK) to Warp Stream, building and maintaining the tooling that supports it

• Contribute to platform tooling and reconcile rs that underpin our platform contract model — writing Go, working with the Kubernetes API, and building high-quality self-service primitives that engineering teams rely on to declare what their services need

• Design and maintain foundational networking and security infrastructure — transit gateways, GCP interconnect, ingress, security groups, IAM policies, and IRSA — getting the invisible plumbing right so nobody has to think about it

• Participate in on-call rotations and drive operational excellence — responding to infrastructure incidents, writing and improving runbooks, and feeding every incident pattern back into AI automation so the same class of issue never repeats

We're looking for candidates who have:

• 3+ years of platform engineering experience

• Hands-on experience with AWS services (EC2, EKS, IAM, S3, VPC, or similar) — we're looking for people who have built and operated real infrastructure, not certifications

• Working knowledge of Kubernetes in production — you have operated or deployed workloads on K8s clusters beyond a local environment

• Experience with infrastructure-as-code (Terraform strongly preferred; Pulumi or Cloud Formation acceptable)

• Proficiency in at least one of Go, Python, or shell scripting — Go is preferred because our reconciler work is in Go, but you should be ready to turn your hand to whatever the problem demands

• Comfort with CI/CD pipelines (Git Hub Actions, Argo, Jenkins, or similar) and hands-on experience with on-call and incident response — you understand what it means to be accountable for production systems

You might also have:

• Experience building Kubernetes operators or controllers — CRDs, reconcile rs, and the controller-runtime library

• Familiarity with streaming infrastructure (Kafka, Warp Stream, or similar event-driven systems) or depth in networking (VPCs, transit gateways, ingress controllers, DNS, load balancing, and security groups)

• Experience in regulated environments (SOC 2, ISO-27001, or similar…