Staff Software Engineer (Cloud Infrastructure)

Join Gusto as a Staff Software Engineer on the Cloud Infrastructure team. In this role, you will build automation and evolve the foundational systems that support Gusto's products. You will have real autonomy over the architecture, Infrastructure-as-Code patterns, and operational standards that every Gusto engineer builds on. Key opportunities include migrating production applications into a modern AWS multi-account architecture, strengthening disaster recovery and compliance, and improving the speed and reliability of our infrastructure tooling.

• Construire et maintenir l'infrastructure AWS en utilisant Terraform/OpenTofu, avec des modifications gérées par le code plutôt que par la configuration manuelle.
• Améliorer la vitesse, la fiabilité et l'utilisabilité des workflows Spacelift utilisés par les équipes d'ingénierie à travers Gusto.
• Collaborer avec les équipes d'application et d'infrastructure pour migrer les services de production vers une architecture multi-comptes AWS moderne.

• Deep, production-level AWS expertise across compute, networking, identity, and security primitives
• Demonstrated mastery of Infrastructure as Code (Terraform/OpenTofu strongly preferred; Crossplane, CloudFormation, or similar) including module design, state management, and scalable patterns for large teams
• Experience with multi-account AWS governance — AWS Organizations, OU design, SCPs/RCPs, and federated identity via IAM Identity Center or equivalent SSO
• Experience operating production infrastructure for a customer-facing SaaS platform, including observability (monitoring, logging, alerting) and participating in incident response
• Track record of driving multi-quarter infrastructure initiatives to completion with minimal direction
• Hands-on experience with a managed IaC orchestration platform (Spacelift, Terraform Cloud, etc.)
• 8+ years of hands-on experience in infrastructure, platform, or site reliability engineering
• Operating Terraform/OpenTofu at large scale — managing thousands of workspaces or state files, module registries and versioning strategy, drift detection and remediation, and policy-as-code enforcement
• Experience in compliance-regulated environments (SOC 2, PCI, NIST)
• Solid cloud networking foundations: VPC design, IP address management, DNS, egress control, and centralized traffic inspection