19 hours ago
Base Salary
$137k - $171k/yr
Responsibilities
- Own the technical execution and production delivery of significant cloud platform capabilities and multi-sprint initiatives.
- Manage HCP Terraform workspaces, the Terraform module registry, and Sentinel/Semgrep policy implementations.
- Expand HashiCorp Vault adoption, dynamic secrets, PKI/CA, transit encryption, and AWS dynamic IAM credentials.
- Operate governed Amazon Bedrock access, cost attribution, quotas, anomaly detection, and developer AI tooling governance.
- Expand AWS self-service catalogs and infrastructure-as-code paved paths for engineering teams.
- Improve GitHub Actions, GitHub Connect, runner observability, CircleCI migration, and pipeline supply-chain security.
- Mentor teammates through code and infrastructure-as-code reviews, pairing, documentation, and technical guidance.
- Collaborate with Cloud Infrastructure, SRE, DevX, and product engineering teams on shared technical concerns.
- Participate in on-call rotation and incident response while applying learnings to improve reliability and reduce toil.
- Use Claude Code, GitHub Copilot, and Amazon Q to accelerate infrastructure engineering, architecture exploration, and incident triage.
Requirements
- At least 4 years of professional experience in hands-on DevOps, platform engineering, or cloud infrastructure roles.
- Significant experience operating production workloads in AWS, including IAM, S3, Lambda, EKS, ElastiCache, and EC2.
- High proficiency with Terraform, including HCP Terraform, remote state, module design, and workspace governance.
- Hands-on experience with Sentinel and/or Semgrep for policy-as-code enforcement.
- Practical experience with HashiCorp Vault dynamic secrets, PKI/CA, AppRole or Kubernetes authentication, or transit encryption.
- Experience migrating workloads from static credentials to short-lived credential models.
- Deep experience with GitHub Actions runner infrastructure, composite actions, GHES/GHEC, and supply-chain security practices.
- Familiarity with CircleCI or similar pipeline systems.
- Ability to reason about cloud cost attribution, resource tagging, FinOps tooling, Amazon Bedrock, LLM API costs, and governance controls.
- Proficiency in at least one scripting or programming language, such as Python or Go, for automation and platform integrations.
- Ability to produce clear design documents, written proposals, stakeholder summaries, and cross-team technical alignment.
Benefits
- Flexible hybrid work model and robust time-off policies.
- Equity for all employees, career development programs, corporate giving programs, employee resource groups, and communities.
- Daily free lunch, new car discount, meditation and fitness apps, commuting cost coverage, and other perks.
- The position offers an annual base salary range of $137,000–$171,000 USD, with potential discretionary bonuses or incentives and RSUs.
- In-person interviews may be required, particularly for positions based in the Boston and Dublin offices; candidate travel expenses are their responsibility.
About CarGurus
CarGurus builds an online automotive marketplace that helps consumers research, finance, and buy cars and helps dealers market and sell inventory. It monetizes primarily through dealer subscriptions, advertising, and digital retail services, and also operates CarOffer, a wholesale vehicle trading platform. Founded in 2006 and headquartered in Boston, the company is publicly traded on NASDAQ under the ticker CARG.