Senior DevOps Engineer
CarGurus, Boston, Massachusetts +1
What you will do
- Platform Delivery & Technical Ownership: Own the technical execution and delivery of significant platform capabilities. Author design docs and contribute to Architecture Decision Records (ADRs) for team-level decisions. Lead complex, multi-sprint initiatives (e.g., Vault dynamic secrets rollout, GitHub Actions maturity, AWS Sandbox self-service) end-to-end through to production.
- IaC Platform & Policy Engineering: Manage HCP Terraform workspaces, the Terraform module registry, and Sentinel/Semgrep policy implementations. Calibrate hard vs. advisory guardrails, eliminate false positives, and expand coverage as new resource types onboard to self-service.
- Secrets & Security Integration: Accelerate Vault adoption across CarGurus workloads — handling dynamic secrets, PKI/CA, transit encryption, and AWS dynamic IAM credentials. Execute the tactical roadmaps toward zero standing long-lived credentials in production.
- AI Infrastructure Governance: Maintain and operate our governed Amazon Bedrock platform, implementing per-team access controls, cost attribution, anomaly detection, and self-service access patterns. Assist in extending governance to developer AI tooling (Claude Code, Copilot) as adoption scales.