Staff Infrastructure Engineer

The role

You will build and own a slice of the platform infrastructure, including multi-cloud Kubernetes, a self-serve PaaS, and agent-native infrastructure. You will manage reliability, databases, and compliance as code to support AI-powered intelligence solutions.

What you will do

• Manage multi-region, multi-cloud Kubernetes across US GCP, EU GCP, and AWS GovCloud
• Extend a self-serve internal PaaS with golden paths and guardrails
• Build agent-native infrastructure and secure sandboxes for AI agents
• Implement zero-trust secrets with Vault
• Perform reliability engineering including SLOs, error budgets, and disaster recovery
• Manage Postgres on Kubernetes, including migrations, replication, and redundancy
• Build compliance as code for SOC2 and FedRAMP posture
• Own an Area of Responsibility end to end
• Define metrics and fix root causes

Required qualifications

• Has taken infrastructure from zero to one
• Writes software in Go, Python, or similar
• Deep in GCP and/or AWS (compute, IAM, VPC, networking, storage, load balancing)
• Has run Kubernetes in production (GKE/EKS)
• Up to date with the state of the art for IaC
• Can debug low-level problems like networking issues, saturated nodes, slow queries, or failing deploys
• Fluent in modern platform toolchain including GitOps (Argo/Flux), containers, and CI/CD
• Strong instincts for security and databases
• Experience with zero-trust, secret management, systems hardening, and provisioning/migrating production databases
• AI fluency

Nice to have

• SOC2/FedRAMP exposure

Before you apply

• Review the job description carefully to highlight experience and impact
• Provide thoughtful and accurate answers to application questions
• Use of AI tools during interviews is not permitted without prior approval

About the company

TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. The company is a Series C company with $220M in total funding.