DevOps Engineer Lead (Web3)
Role details
Job location
Tech stack
Job description
- Plan, implement, and maintain cloud infrastructure (AWS/GCP), including Kubernetes cluster management, container orchestration, networking/security, performance optimization, and scaling.
- Automation & CI/CD
- CI/CD: Own GitHub Actions pipelines for core services; create/maintain Infrastructure as Code; automate builds/tests/deploys, release/versioning, and security scans.
- End-to-end testing: Own Docker/Compose-based E2E environments integrated with CI; seed realistic data and gate releases on failures.
- Core ENS services
- Metadata service: Operate and harden metadata.ens.domains(HA, caching, secrets, rollouts, SLOs).
- CCIP-Read gateways: Deploy/scale gateways, manage signing keys/rotation, monitor off-chain lookups/latency, uphold SLAs.
- Indexing: Run ENSIndexer across L1/L2 with private RPCs; manage Postgres (tuning, backups, schema changes); keep indexing lag low.
- Namechain/L2: Stand up and maintain L2 nodes; plan upgrades, snapshots, and monitoring; coordinate with external providers (RPC, provers).
- Reliability, security, and collaboration
- Instrument on-chain/service metrics; build alerts/dashboards; lead incident response and post-mortems.
- Enforce least-privilege access, secret hygiene, and key custody for gateways and infra.
- Partner with protocol/app engineers; maintain runbooks and concise architecture docs
Requirements
Do you have experience in TypeScript?, * 5+ years in DevOps/SRE/Infra running production systems (Kubernetes/containers) on AWS and/or GCP
- Strong CI/CD with GitHub Actions; hands-on with IaC (Terraform/Pulumi/Ansible)
- Automation in TypeScript/Node, Python, or Go
- Observability you've shipped: metrics, logs, alerts, dashboards (Prometheus/Grafana + centralized logging)
- Postgres basics (migrations, performance, backups) and Redis caching
- Security-first operator: Familiar with industry standards and best practices; able to serve as front-line triage for production/security issues and escalate when appropriate.
- Familiar with Ethereum/L2 concepts and operating nodes/RPC-driven services
- Clear communicator who documents well and thrives in a remote, async environment.
Its a Plus If You Have
- Shipped or contributed to ENS, CCIP-Read gateways, ENSNode/ENSIndexer, or Ponder-style indexers
- Hands-on with zkEVM/rollups (Linea, Scroll, zkSync), prover/verification infra, or cross-chain messaging
- Experience hosting/operating provers or managing relationships with node/prover providers
- Familiarity with trust-minimized gateways and key/cert rotation patterns
- Meaningful open-source contributions showcasing operational depth