polygon-labs - Platform Engineer

• You will independently execute defined infrastructure work that keeps Polygon's production systems reliable, secure, and operationally efficient. This role is hands-on and operational, with a focus on cloud infrastructure, Kubernetes, infrastructure as code, observability, incident response, and the secure lifecycle of secrets and configuration across services. • You will work core hours overlapping with the EU business day and contribute as a trusted infrastructure partner, including reviewing and approving infrastructure changes and supporting production systems through incidents and continuous improvement. • Operate production Kubernetes environments on GKE, including day-to-day cluster operations, troubleshooting, maintenance, and reliability improvements. • Build and maintain infrastructure as code using Pulumi, including Pulumi ESC for environments, secrets, and configuration, primarily in TypeScript and Python. • Manage GitOps workflows with ArgoCD and maintain reliable CI/CD pipelines, including diagnosing pipeline-level race conditions. • Operate GCP infrastructure across IAM, Pub/Sub, Cloud SQL, VPC, and Secret Manager. Tune Pub/Sub subscriptions through settings such as acknowledgement deadlines, dead-letter queue redrive behavior, and backlog alerting. • Manage Cloudflare entirely as code, including Workers and DNS, and maintain lifecycle cleanup for stale preview environments. • Own the secrets and configuration lifecycle across services, including provisioning, rotation, naming conventions, and preventing cross-service authentication drift. • Respond independently to production incidents through triage, escalation, documentation, runbooks, and incident.io http://incident.io workflows. • Review and approve infrastructure pull requests, helping maintain a high standard for safety, correctness, and operational readiness. • Build and maintain Grafana dashboards and alerts, with working knowledge of the underlying agent and collector layer, including Grafana Alloy. • Execute SOC2-driven infrastructure and security work and maintain appropriate separation between regulated or sensitive-data environments. • Read and contribute to systems involving Go, TypeScript, and Python.