Staff Software Engineer, Cloud Infrastructure

Gusto; Los Angeles (CA); Hybrid; USD 190,000 - 247,000; Full time

Benefits offered by this job

Equity (RSUs)

Benefits

Competitive pay

Job summary

Gusto is seeking a Staff Software Engineer for our Cloud Infrastructure team to build automation and shape foundational systems. You’ll own architecture, IaC patterns, and operational standards for a modern AWS multi-account setup and critical tooling.

You’ll work with Terraform/OpenTofu, Spacelift, and AI-assisted tools, while contributing to disaster recovery, security, and reliability across the platform. Hybrid role with travel for onboarding to US offices.

Qualifications

• 8+ years of hands-on infrastructure/platform/SRE experience.
• Production-grade AWS expertise across compute, networking, identity and security.
• Mastery of IaC with Terraform/OpenTofu; modular, scalable patterns.
• Experience with multi-account AWS governance and federated identity.
• Hands-on with a managed IaC orchestration platform (Spacelift, Terraform Cloud).
• Experience operating production SaaS infra with observability and incident response.
• Track record delivering multi-quarter infra initiatives.

Responsibilities

• Build and maintain AWS infrastructure using Terraform/OpenTofu.
• Improve Spacelift workflows across engineering teams.
• Migrate production services to modern AWS multi-account architecture.
• Strengthen disaster recovery and compliance readiness.
• Refactor infra code into modular, reusable components.
• Support engineering teams with cloud infra needs and vendor integrations.
• Leverage AI-assisted tools to accelerate development while upholding security.
• Participate in on-call rotation for internal engineering support.

Skills

SRE/Infra experience

AWS

IaC (Terraform/OpenTofu)

AWS governance

Spacelift

Observability

Incident response

Project delivery

Tools

Terraform/OpenTofu

Spacelift

Terraform Cloud

Job description

About the company

At the company, we're on a mission to grow the small business economy. We handle the hard stuff — payroll, health insurance, 401(k)s, and HR — so owners can focus on their craft and their customers. With teams in Denver, San Francisco, and New York, we support more than 500,000 small businesses nationwide and are building a workplace that reflects the people we serve.

All full-time employees receive competitive base pay, benefits, and equity (RSUs) — because everyone who helps build the company should share in its success. Offer amounts are determined by role, level, and location. Learn more about our Total Rewards philosophy.

AI is a fundamental part of how work gets done at the company. We expect all team members to actively engage with AI tools relevant to their role and grow their fluency as the technology evolves. AI experience requirements vary by role and will be assessed during the interview process.

About the Role:

As a Staff Software Engineer on the Cloud Infrastructure team, you'll build automation and evolve the foundational systems that support the company's products. This is a code-driven infrastructure role, well suited to someone with a DevOps, SRE, or platform engineering background who enjoys solving problems that help other engineers work more effectively. You'll help set the architecture, Infrastructure-as-Code patterns, and operational standards that every the company engineer builds on, with real autonomy over how it gets done. Key opportunities include migrating production applications into a modern AWS multi-account architecture, strengthening disaster recovery and compliance, and improving the speed and reliability of our infrastructure tooling.

About the Team:

the company's Cloud Infrastructure team builds and operates the AWS foundations that the rest of our engineering organization depends on. We manage infrastructure as code with Terraform/OpenTofu and run Spacelift, the platform hundreds of engineers use daily to deploy infrastructure changes. This experienced team partners with networking, compute, platform, and application teams to make the company's cloud infrastructure more reliable, resilient, and easier to use.

Here’s what you’ll do day-to-day:

• Build and maintain AWS infrastructure using Terraform/OpenTofu, with changes managed through code rather than manual configuration.

• Improve the speed, reliability, and usability of Spacelift workflows used by engineering teams across the company.

• Partner with application and infrastructure teams to migrate production services into a modern AWS multi-account architecture.

• Strengthen disaster recovery and compliance readiness by implementing and testing infrastructure resilience.

• Refactor infrastructure code into modular, reusable components that simplify maintenance and future development.

• Support engineering teams with cloud infrastructure needs, troubleshooting, and vendor integrations.

• Leverage AI-assisted tools to accelerate infrastructure development, improve troubleshooting, and identify automation opportunities while maintaining a high bar for security, correctness, and reliability.

• Participate in an on-call rotation focused on internal engineering support, turning recurring issues into automation and lasting improvements.

Here’s what we're looking for:

• 8+ years of hands-on experience in infrastructure, platform, or site reliability engineering.

• Deep, production-level AWS expertise across compute, networking, identity, and security primitives.

• Demonstrated mastery of Infrastructure as Code *(Terraform/OpenTofu strongly preferred; Crossplane, CloudFormation, or similar)* including module design, state management, and scalable patterns for large teams.

• Experience with multi-account AWS governance — AWS Organizations, OU design, SCPs/RCPs, and federated identity via IAM Identity Center or equivalent SSO.

• Hands-on experience with a managed IaC orchestration platform *(Spacelift, Terraform Cloud, etc.)*.

• Experience operating production infrastructure for a customer-facing SaaS platform, including observability *(monitoring, logging, alerting)* and participating in incident response.

• Track record of driving multi-quarter infrastructure initiatives to completion with minimal direction.

Bonus:

• Operating Terraform/OpenTofu at large scale — managing thousands of workspaces or state files, module registries and versioning strategy, drift detection and remediation, and policy-as-code enforcement.

• Experience in compliance-regulated environments (SOC 2, PCI, NIST).

• Solid cloud networking foundations: VPC design, IP address management, DNS, egress control, and centralized traffic inspection.

Please note that travel to the company's office for onboarding is required for this position.

If you have any questions regarding this requirement, please share with your recruiter.

Our cash compensation amount for this role is targeted at 163,000–204,000 in Denver, and 197,000–247,000 for San Francisco & New York. Stock equity is additional. Final offer amounts are determined by multiple factors including candidate experience and expertise and may vary from the amounts listed above.

the company has physical office spaces in Denver, San Francisco, and New York City. Employees who are based in those locations will be expected to work from the office on designated days approximately 2-3 days per week (or more depending on role). The same office expectations apply to all Symmetry roles, the company's subsidiary, whose physical office is in Scottsdale.

Note: The San Francisco office expectations encompass both the San Francisco and San Jose metro areas.

When approved to work from a location other than a the company office, a secure, reliable, and consistent internet connection is required. This includes non-office days for hybrid employees.

Our customers come from all walks of life and so do we. We hire great people from a wide variety of backgrounds, not just because it's the right thing to do, but because it makes our company stronger. If you share our values and our enthusiasm for small businesses, you will find a home at the company.

the company is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. the company considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. the company is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. We want to see our candidates perform to the best of their ability. If you require a medical or religious accommodation at any time throughout your candidate journey, please fill out this form and a member of our team will get in touch with you.

the company takes security and protection of your personal information very