Site Reliability Engineer (Canton Network)

About the Role

MPCH is looking for a hands-on Site Reliability Engineer (SRE) to join our Engineering (InfraOps) team, responsible for the stability, scalability, and security of our blockchain infrastructure. You will be a key operator in a distributed blockchain network environment, maintaining validator nodes and network-critical components across cloud platforms — with a strong bias toward automation, observability, and resilience.

This role sits at the intersection of blockchain infrastructure, cloud engineering, and SRE practice. You will be part of an on-call rotation providing 24/7 coverage, and you will be expected to respond to, investigate, and resolve incidents with urgency and rigor.

Key Responsibilities

Canton Network Operations

• Operate, maintain, and upgrade Canton Network validator nodes and participant nodes in production environments
• Monitor Canton ledger health, synchronization status, and domain connectivity; respond to degradation events
• Manage Canton domain and sequencer configurations, participant onboarding, and topology changes
• Execute planned maintenance windows including node upgrades, certificate rotations, and key management procedures
• Participate in network governance processes including identity and namespace management

Cloud Infrastructure (GCP / AWS)

• Provision and manage infrastructure on Google Cloud Platform (primary) and AWS (secondary) using both consoles and CLI tooling
• Administer compute (GKE, GCE, EKS, EC2), networking (VPCs, firewall rules, load balancers, peering), storage, and IAM across environments
• Manage Kubernetes clusters hosting Canton workloads — deployments, statefulsets, resource quotas, PodDisruptionBudgets, and cluster upgrades
• Own cloud cost hygiene: right-sizing, reserved capacity planning, and resource tagging discipline

Infrastructure as Code & Automation

• Author, review, and maintain Terraform modules for all infrastructure provisioning — no manual snowflakes
• Enforce GitOps workflows; all infrastructure changes go through version control and CI/CD pipelines
• Leverage AI-assisted tooling (e.g., GitHub Copilot, Claude, or similar) to accelerate IaC authoring, runbook generation, and incident analysis
• Continuously improve automation to reduce toil and MTTR

SRE / On-Call Duties

• Participate in a 24/7 on-call rotation with defined escalation paths
• Respond to pages, triage alerts, and lead incident response for Canton and infrastructure-layer issues
• Write thorough post-mortems with blameless root cause analysis and tracked action items
• Build and refine alerting rules, dashboards, and runbooks in partnership with the broader InfraOps team
• Maintain and test disaster recovery and business continuity procedures for validator infrastructure

Security & Compliance

• Apply hardening standards to all node infrastructure; manage secrets via Vault or equivalent secrets management tooling
• Own TLS/mTLS certificate lifecycle for Canton components
• Support audit and compliance activities including access reviews, change logs, and evidence collection

Required Qualifications

• 3+ years of experience in infrastructure, cloud operations, or SRE roles in production environments
• Solid, hands-on experience with Google Cloud Platform (Compute Engine, GKE, Cloud Networking, IAM, Cloud Monitoring); familiarity with AWS is a plus
• Proficiency with Terraform — you write modules, not just apply them; comfortable with state management, workspaces, and remote backends
• Strong Kubernetes operations experience: cluster management, workload troubleshooting, networking (CNI, Ingress, NetworkPolicy), and storage
• Experience operating blockchain or distributed ledger nodes — Canton / Daml, Hyperledger, Ethereum, or similar; understanding of consensus, finality, and node synchronization concepts
• Familiarity with Canton Network architecture — validators, sequencers, domains, participants, and topology management
• Proficiency with Linux systems administration, shell scripting (bash/zsh), and standard SRE tooling
• Experience with observability stacks: metrics (Prometheus/Cloud Monitoring), logging (ELK, Cloud Logging, Loki), tracing, and alerting
• Demonstrated ability to work an on-call rotation , respond to incidents under pressure, and write high-quality post-mortems
• Strong written communication skills — clear incident updates, runbooks, and arc…