Senior DevOps Engineer

Who We Are

At Car Gurus (NASDAQ: CARG), our mission is to give people the power to reach their destination. We started as a small team of developers determined to bring trust and transparency to car shopping. Since then, our history of innovation and go‑to‑market acceleration has driven industry‑leading growth. In fact, we’re the largest and fastest‑growing automotive marketplace, and we’ve been profitable for over 15 years.

The market is evolving, and we are too, moving the entire automotive journey online and guiding our customers through every step. That includes everything from the sale of an old car to the financing, purchase, and delivery of a new one. Today, tens of millions of consumers visit  each month, and ~30,000 dealerships use our products. But they're not the only ones who love Car Gurus—our employees do, too.

We have a people‑first culture that fosters kindness, collaboration, and innovation, and empowers our Gurus with tools to fuel their career growth. Disrupting a trillion‑dollar industry requires fresh and diverse perspectives. Come join us for the ride!

Car Gurus is seeking a Senior Dev Ops Engineer to join our Cloud Enablement team. This team builds and operates the cloud platform capabilities, automation, and guardrails that help engineering teams provision infrastructure, deploy services, and work securely in the cloud with less friction. In this role, you will contribute to the design, implementation, and operation of scalable platform services that improve developer experience, strengthen reliability, and support self‑service infrastructure across the company.

We are looking for an engineer who is hands‑on, execution‑oriented, and motivated by building practical solutions that other engineers rely on every day.

• Infrastructure Delivery: HCP Terraform work spaces, Terraform module registry governance, Sentinel and Semgrep policy enforcement, and self‑service IaC paved paths for development teams.
• Secrets Management:
  Hashi Corp Vault implementation, dynamic short‑lived credentials, PKI/CA, and supporting the rollout of zero‑static‑credential patterns across production workloads.
• CI/CD Platform:
  Git Hub Actions maturity (GHES, Git Hub Connect, org‑scoped runners), Concourse infrastructure, and pipeline supply‑chain security.
• AWS Self‑Service:
  No‑code and IaC‑driven provisioning for S3, Lambda, Elasti Cache, and expanding the self‑service catalog to new resource types.
• AI Infrastructure Governance:
  Governed Amazon Bedrock access, per‑team token quotas and cost dashboards, Bedrock Savings Plan management, and developer AI tooling (Claude Code, Git Hub Copilot) governance.
• Platform Integrity:
  Sentinel/Semgrep policy maturity, shift‑left guardrails, pipeline hardening, and cloud maturity model advancement.

• Platform Delivery & Technical Ownership:
  Own the technical execution and delivery of significant platform capabilities. Author design docs and contribute to Architecture Decision Records (ADRs) for team‑level decisions. Lead complex, multi‑sprint initiatives (e.g., Vault dynamic secrets rollout, Git Hub Actions maturity, AWS Sandbox self‑service) end‑to‑end through to production.
• IaC Platform & Policy Engineering:
  Manage HCP Terraform work spaces, the Terraform module registry, and Sentinel/Semgrep policy implementations. Calibrate hard vs. advisory guardrails, eliminate false positives, and expand coverage as new resource types onboard to self‑service.
• Secrets & Security Integration:
  Accelerate Vault adoption across Car Gurus workloads — handling dynamic secrets, PKI/CA, transit encryption, and AWS dynamic IAM credentials. Execute the tactical roadmaps toward zero standing long‑lived credentials in production.
• AI Infrastructure Governance:
  Maintain and operate our governed Amazon Bedrock platform, implementing per‑team access controls, cost attribution, anomaly detection, and self‑service access patterns. Assist in extending governance to developer AI tooling (Claude Code, Copilot) as adoption scales.
• Developer Enablement & Self‑Service:
  Expand the AWS self‑service catalog and paved‑path IaC offerings so teams can…