Senior Infrastructure Engineer

As a Senior Infrastructure Engineer at TRM Labs, you build the platform that every TRM product, internal AI agent, and investigation depends on. You're not maintaining a system someone else finished - you're building its next generation on the bleeding edge, for workloads where reliability and security are non-negotiable. TRM's platform lets financial institutions and governments trace illicit finance, disrupt crypto- and AI-enabled crime, and run some of the highest-stakes investigations in the world. Your infrastructure is what lets investigators and banks trust the data underneath them.

What you'll do

• Build and operate multi-region, multi-cloud Kubernetes across US GCP, EU GCP, and AWS GovCloud, turning "stand up another site" into a self-serve configuration instead of a bespoke project
• Extend a genuinely self-serve internal PaaS already used by 60+ engineers with minimal infrastructure involvement, adding golden paths, guardrails, and interfaces engineers enjoy
• Design agent-native infrastructure with secure sandboxes where AI agents build and ship, encoding operational knowledge into skills so the platform increasingly runs and heals itself
• Implement zero-trust secrets with Vault, replacing long-lived secrets with short-lived, dynamic credentials to close blast radius on leaked passwords
• Build reliability engineering that matters: SLOs, error budgets, real observability, and disaster recovery with validated cross-region restore and sub-hour RTO
• Treat databases as a first-class platform concern, managing Postgres on Kubernetes with migrations, replication, and redundancy for services that cannot fail
• Encode SOC2 and FedRAMP compliance into the platform so security is the default, not a scramble before an audit
• Own an Area of Responsibility end to end - define what "great" looks like for your slice of the platform, build the glide path to get there, obsess over metrics that tell you whether it's working, and fix root causes so a class of problems disappears

What you bring

• A track record taking infrastructure from zero to one - you've designed and shipped a platform capability that other engineers came to depend on, not just operated one that already existed
• Real software writing ability in Go, Python, or similar languages; you build tooling, automation, and services rather than only wiring up other people's tools
• Deep expertise in GCP and/or AWS across compute, IAM, VPC, networking, storage, and load balancing, comfortable operating across clouds
• Production Kubernetes experience (GKE/EKS) and familiarity with current state-of-the-art infrastructure as code
• Ability to debug low-level problems independently - networking issues, saturated nodes, slow queries, failing deploys - and get to root cause
• Fluency across the modern platform toolchain: GitOps (Argo/Flux), containers, CI/CD, and observability built on SLOs rather than dashboards
• Strong instincts for security and databases: zero-trust principles, secret management, systems hardening, and production database provisioning and migration
• AI fluency - you apply AI to accelerate repeatable workflows, structure and solve problems, improve output quality, and increase speed and leverage

Nice to have

• SOC2 or FedRAMP compliance exposure

What we offer

• Base salary of $205,000 to $245,000
• Remote-first role (US-based)
• Small, high-leverage team with weekly on-call rotation participation

About TRM Labs

TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM is a Series C company with $220M in total funding, backed by Goldman Sachs, Bessemer, Y Combinator, Thoma Bravo, and others. Headquartered in San Francisco, TRM operates as a distributed-first company with hubs in Los Angeles, San Francisco, New York, Washington D.C., London, and Singapore.