Senior Infrastructure Engineer, Government Systems

The engineering team at Chainalysis is inspired by solving the hardest technical challenges and building products that establish trust in cryptocurrencies. We're a global organization that thrives on challenging work and doing it alongside exceptionally talented teammates. Our industry evolves rapidly, and our mission is to build a flexible, AI-driven platform that automates entity resolution, optimizes data labeling pipelines, and creates predictive models that identify illicit patterns before they escalate.Our data and solutions have been used to solve some of the world's most high-profile criminal cases and grow consumer access to cryptocurrency safely. Now, by pairing the industry's most trusted blockchain data with agents that reason, investigate, and act, we help our customers scale their workflows as the cryptocurrency economy becomes increasingly mainstream.As a Senior Infrastructure Engineer in the Investigations group, you'll be a technical leader on the Government Systems team — the group responsible for the deployment platform and operational infrastructure that delivers Chainalysis Reactor to government and high-security customers. The mission of the Government Systems team is to ensure that Chainalysis's most security-sensitive customers can run Reactor reliably in their own environments — including networks with strict access controls and limited connectivity. Government Systems sits at the intersection of infrastructure operations and product delivery. Product teams own their application code, but rely on Government Systems to provision environments, manage release pipelines, and operate the deployment platform. As a senior engineer you will be the connective tissue between these groups — setting technical direction, resolving cross-cutting issues, and ensuring the platform evolves to meet growing demands.Note: This position requires eligibility to access U.S. Government information and systems. Due to applicable government security requirements, only U.S. citizens are eligible for this role. Due to collaboration with Europe, we are highly prioritizing candidates based in EST timezone.In this role, you'll:Lead the design and evolution of RKE2 Kubernetes clusters across development, acceptance, and production environments — driving upgrades, capacity planning, networking strategy, and operational resilienceArchitect and maintain infrastructure as code (Terraform) to provision and manage AWS-based environments, establishing patterns and modules that the team can scale with confidenceOwn the CI/CD platform (GitHub Actions) end-to-end — designing pipeline architecture, improving build performance, and ensuring releases flow reliably through staged environmentsDrive GitOps-based delivery strategy using Flux CD, defining standards for Helm charts and Kustomize overlays and ensuring consistent reconciliation across clustersDefine container image lifecycle policies — building, signing, storing, and distributing images across OCI registries for multiple deployment targetsIdentify and eliminate operational toil through automation, improving environment provisioning, configuration management, and deployment processes at a systemic levelEstablish and maintain monitoring, alerting, and incident response practices — owning dashboards, runbooks, and post-incident reviews that raise platform reliability over timeServe as a technical point of contact for product service teams integrating into the deployment pipeline — unblocking teams, troubleshooting complex environment issues, and advocating for infrastructure best practicesOwn the security posture of the deployment platform — managing secrets, certificates, RBAC policies, and security configurations to meet compliance and operational security requirementsMentor and grow other engineers on the team through code review, pairing, design discussions, and knowledge sharingWe're looking for candidates who have:Deep experience operating Kubernetes in production at scale — cluster lifecycle management, Helm, networking, persistent storage, performance tuning, and complex workload troubleshootingExpert-level proficiency with Terraform for provisioning and managing cloud infrastructure across multiple environments, including module design and state management strategiesStrong Linux systems administration skills (RHEL or similar — networking, storage, systemd, performance analysis, shell scripting)Extensive experience designing and maintaining CI/CD pipelines (GitHub Actions, Jenkins, or similar), with a focus on reliability, speed, and developer experienceDeep familiarity with AWS services commonly used in infrastructure (EC2, S3, VPC, IAM, EBS, Lambda, and related networking and security services)A strong operational mindset — you take ownership of reliability, think about failure modes proactively, and build automation to prevent recurring issues before they impact customersNice to have experience:Experience with GitOps tools such as Flux CD or ArgoCD in complex, multi-environment setups — including designing promotion strategies and managing driftFamiliarity with container registry operations, image distribution, OCI artifact management, and image signing or verification workflowsExperience managing databases in Kubernetes environments (e.g., PostgreSQL operators, stateful workloads, backup and recovery strategies)Familiarity with Kafka or other message brokers in a containerized environment, including operational management and scalingExperience with configuration management or automation tools (Ansible or similar) at fleet scaleAdvanced scripting proficiency in Python for infrastructure automation, tooling, and integration workExperience supporting environments with strict security or compliance requirements (FedRAMP, FIPS, IL environments, or similar)Exposure to or passion for the cryptocurrency technology ecosystemTechnologies we use:Kubernetes: RKE2, Helm, Kustomize, Flux CDCloud provider: AWS (EC2, S3, EBS, VPC, IAM, Lambda)Infrastructure as code: TerraformCI/CD: GitHub Actions, semantic-releaseMonitoring and alerting: Prometheus, Grafana, Datadog, HumioScripting and automation: Shell, PythonContainer registries: OCI/DockerDatabase management: PostgreSQLEvent streaming: KafkaOperating systems: RHEL, Rocky Linux, Amazon LinuxAI at ChainalysisAI is not a feature at Chainalysis - it is a new way of working. One that turns instructions into work done, and helps us move faster than the threats we're built to counter, and we expect our employees to take ownership of the output and ensure quality. As the world's most trusted blockchain analytics platform, Chainalysis sits at a rare intersection of proprietary data, regulatory relationships and crypto expertise that makes it uniquely placed to shape and lead the next era of AI-driven intelligence - and we expect everyone here, regardless of role, to be an active part of it.AI fluency is tied directly to how we measure performance and how we plan to win. There is no substitute for your own curiosity. We provide the tools, workflows, and space to experiment - but the expectation is that you develop these capabilities yourself, bring ideas, and collaborate across teams to reinvent the way work gets done. We are not using AI to do less. We are using it to do what was never possible before.About ChainalysisChainalysis is the blockchain data platform, making it easy to connect the movement of digital assets to real-world services. Powered by deep blockchain data and AI, organizations can investigate illicit activity, manage risk exposure, and develop innovative market solutions built on the industry's most trusted blockchain intelligence. Our mission is to build trust in blockchains, blending safety and security with an unwavering commitment to growth and innovation.You belong here. At Chainalysis, we believe that diversity of experience and thought makes us stronger. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us. We’re ensuring we keep learning by committing to continually revisit and reevaluate our diversity culture.We encourage applicants across any race, ethnicity, gender/gender expression, age, spirituality, ability, experience and more. If you need any accommodations to make our interview process more accessible to you due to a disability, don't hesitate to let us know. You can learn more here. We can’t wait to meet you.