# Staff Software Engineer, Cloud Infrastructure

**Company**: Gusto
**Location**: Denver, CO
**Work arrangement**: hybrid
**Experience**: staff
**Job type**: full-time
**Salary**: $163,000–$204,000 in Denver, and $197,000–$247,000 for San Francisco & New York
**Category**: Engineering
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/gusto/jobs/8250243?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_10413215-008

## Description

### Job Overview

As a Staff Software Engineer on the Cloud Infrastructure team at Gusto, you'll build automation and evolve foundational systems that support Gusto's products.

### About the Role

This is a code-driven infrastructure role, well suited to someone with a DevOps, SRE, or platform engineering background who enjoys solving problems that help other engineers work more effectively. You'll help set the architecture, Infrastructure-as-Code patterns, and operational standards that every Gusto engineer builds on, with real autonomy over how it gets done. Key opportunities include migrating production applications into a modern AWS multi-account architecture, strengthening disaster recovery and compliance, and improving the speed and reliability of our infrastructure tooling.

### About the Team

Gusto's Cloud Infrastructure team builds and operates the AWS foundations that the rest of our engineering organization depends on. We manage infrastructure as code with Terraform/OpenTofu and run Spacelift, the platform hundreds of engineers use daily to deploy infrastructure changes.

### Responsibilities

- Build and maintain AWS infrastructure using Terraform/OpenTofu, with changes managed through code rather than manual configuration.

- Improve the speed, reliability, and usability of Spacelift workflows used by engineering teams across Gusto.

- Partner with application and infrastructure teams to migrate production services into a modern AWS multi-account architecture.

- Strengthen disaster recovery and compliance readiness by implementing and testing infrastructure resilience.

- Refactor infrastructure code into modular, reusable components that simplify maintenance and future development.

- Support engineering teams with cloud infrastructure needs, troubleshooting, and vendor integrations.

- Leverage AI-assisted tools to accelerate infrastructure development, improve troubleshooting, and identify automation opportunities while maintaining a high bar for security, correctness, and reliability.

- Participate in an on-call rotation focused on internal engineering support, turning recurring issues into automation and lasting improvements.

### Requirements

- 8+ years of hands-on experience in infrastructure, platform, or site reliability engineering.

- Deep, production-level AWS expertise across compute, networking, identity, and security primitives.

- Demonstrated mastery of Infrastructure as Code (Terraform/OpenTofu strongly preferred; Crossplane, CloudFormation, or similar) including module design, state management, and scalable patterns for large teams.

- Experience with multi-account AWS governance , AWS Organizations, OU design, SCPs/RCPs, and federated identity via IAM Identity Center or equivalent SSO.

- Hands-on experience with a managed IaC orchestration platform (Spacelift, Terraform Cloud, etc.).

- Experience operating production infrastructure for a customer-facing SaaS platform, including observability (monitoring, logging, alerting) and participating in incident response.

- Track record of driving multi-quarter infrastructure initiatives to completion with minimal direction.

### Nice to Have

- Operating Terraform/OpenTofu at large scale , managing thousands of workspaces or state files, module registries and versioning strategy, drift detection and remediation, and policy-as-code enforcement.

- Experience in compliance-regulated environments (SOC 2, PCI, NIST).

- Solid cloud networking foundations: VPC design, IP address management, DNS, egress control, and centralized traffic inspection.

### Compensation

- Cash compensation: $163,000–$204,000 in Denver, and $197,000–$247,000 for San Francisco & New York.

- Stock equity is additional.

### Work Environment

- Hybrid work model in Denver, San Francisco, and New York offices.

- Onsite work expected 2-3 days per week.

## Skills

### Required
- AWS
- Terraform
- OpenTofu
- Infrastructure as Code
- Cloud Infrastructure
- DevOps
- SRE
- platform engineering
- Spacelift
- AWS Organizations
- IAM Identity Center

### Nice to have
- large-scale Terraform/OpenTofu operations
- compliance-regulated environments
- cloud networking foundations

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/gusto/jobs/8250243?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)