Software Engineer II, Foundation

Role Overview

You will join the Foundation discipline within Platform Engineering at Chainalysis. This team owns the shared “substrate” that other engineering teams depend on: cloud infrastructure, networking, Kubernetes, streaming, and security primitives.

Responsibilities

• Build and maintain cloud infrastructure across AWS and GCP using Terraform (designing reusable modules/patterns that provision the platform substrate).
• Operate and evolve multi-tenant Kubernetes clusters on EKS (node lifecycle, upgrades, security contexts, and networking decisions affecting all teams).
• Own the streaming infrastructure migration from managed Kafka (MSK) to WarpStream, including tooling to support it.
• Contribute to platform tooling and reconcilers that support the platform contract model:
  • write Go
  • work with the Kubernetes API
  • build self-service, drift-free infrastructure primitives
• Design and maintain foundational networking and security infrastructure, including:
  • transit gateways, GCP interconnect, ingress, security groups, IAM policies, IRSA
• Participate in on-call rotations and drive operational excellence:
  • respond to incidents
  • write/improve runbooks
  • feed incident patterns back into automation

Requirements

• 3+ years of software engineering or infrastructure engineering experience (Software Engineer II; typically 3–5 years).
• Hands-on AWS experience (EC2, EKS, IAM, S3, VPC, or similar), with evidence of building and operating real infrastructure.
• Production experience with Kubernetes (operated/deployed workloads beyond local environments).
• Infrastructure-as-Code: Terraform strongly preferred (Pulumi or CloudFormation acceptable).
• Proficiency in Go, Python, or shell scripting (Go preferred for reconciler work).
• Comfort with CI/CD pipelines (GitHub Actions, Argo, Jenkins, or similar).
• Hands-on on-call and incident response experience.

Nice to Have

• Experience building Kubernetes operators/controllers (CRDs, reconcilers, controller-runtime).
• Familiarity with streaming/event-driven systems (Kafka, WarpStream) and/or deep networking knowledge (VPC, transit gateways, ingress, DNS, load balancing, security groups).
• Experience with regulated environments (SOC 2, ISO-27001, etc.) and/or GitOps patterns (ArgoCD, Flux).
• Strong motivation for platform engineering and reducing toil to improve other engineers’ productivity.