Platform Engineer (Kubernetes, GCP, Pulumi)

About the role

Polygon Labs, a global blockchain payments company building the Polygon Open Money Stack, is hiring a Platform Engineer. You will independently run production infrastructure that keeps the systems reliable, secure and efficient, working core hours that overlap the EU business day. The role is hands-on and operational, covering cloud infrastructure, Kubernetes, infrastructure as code, observability, incident response and the secure lifecycle of secrets and configuration.

Key responsibilities

• Operate production Kubernetes environments on GKE, including day-to-day cluster operations, troubleshooting, maintenance and reliability improvements.
• Build and maintain infrastructure as code with Pulumi, including Pulumi ESC for environments, secrets and configuration, mainly in TypeScript and Python.
• Manage GitOps workflows with ArgoCD and maintain reliable CI/CD pipelines, including diagnosing pipeline race conditions.
• Run GCP infrastructure (IAM, Pub/Sub, Cloud SQL, VPC, Secret Manager) and tune Pub/Sub subscriptions.
• Manage Cloudflare entirely as code, including Workers and DNS, and clean up stale preview environments.
• Own the secrets and configuration lifecycle across services, including provisioning, rotation and naming conventions.
• Respond independently to production incidents through triage, escalation, runbooks and incident.io workflows.
• Review and approve infrastructure pull requests, and build Grafana dashboards and alerts with working knowledge of the underlying agent and collector layer, including Grafana Alloy.
• Execute SOC2-driven infrastructure and security work and keep regulated or sensitive-data environments separate.

Required profile

• Demonstrated production experience running Kubernetes on GKE in a day-to-day infrastructure or platform capacity.
• Ability to work independently from defined requirements, without needing architecture-level hand-holding.
• Availability to work core hours overlapping the EU business day.

Required skills

• Pulumi, including Pulumi ESC, with practical proficiency in TypeScript and Python.
• ArgoCD, GitOps, CI/CD pipelines and debugging pipeline race conditions.
• GCP services: IAM, Pub/Sub, Cloud SQL, VPC, Secret Manager, including subscription-level Pub/Sub tuning.
• Cloudflare Workers and DNS as code.
• Secrets management, SOC2 compliance and security literacy.
• Working knowledge of Grafana dashboards, alerting and Grafana Alloy; able to read Go, TypeScript and Python.

What we offer

• Remote-first global workforce.
• Medical, dental and vision insurance, with company-matching 401k (US employees only).
• $1,500 home office set-up allowance (lifetime max) and $200 annual book allowance.
• $75 monthly internet or phone reimbursement, flexible time off and a company laptop.
• Egg freezing, mental health and employee wellness benefits.