Staff Infrastructure Software Engineer

Carbon•Sunnyvale, CA

10d•$209,600 - $314,400•Onsite

About The Position

Carbon is seeking a Staff Infrastructure / DevOps Engineer to join a small platform team responsible for the foundations that Carbon’s products and services run on. The role owns and extends the company’s AWS and GCP environments, the networks connecting cloud services to printers in the field, Terraform infrastructure as code, and CI/CD pipelines. The engineer will lead substantial platform initiatives end to end and raise the standard for building and operating cloud infrastructure.

Requirements

At least seven years of experience building and operating production cloud infrastructure, with deep expertise in AWS or GCP and working proficiency in the other.
Strong networking fundamentals, including VPCs, subnets, routing, DNS, load balancing, TLS, VPNs, and secure connectivity between cloud and on-premises or edge devices.
Expert-level Terraform experience, including designing shared modules, managing state at scale, and leading substantial migrations without downtime.
Hands-on experience building and maintaining CI/CD pipelines in Jenkins and GitHub Actions or comparable systems, including build performance, artifact management, and safe deployment patterns.
Strong Kubernetes expertise, including production cluster operations at scale, in-depth understanding of the control plane and networking model, and experience designing workload, upgrade, and multi-tenant strategies.
Production experience with a service mesh, ideally Istio, including Envoy-based traffic management, mTLS, authorization policy, mesh observability, and debugging across mesh boundaries.
Fluency in Linux and containers, and in at least one scripting or systems language such as Python, Go, or Bash.
A production mindset that accounts for failure modes, blast radius, cost, and observability, and experience carrying an infrastructure pager.
Strong communication, debugging, and problem-solving skills, and a record of driving major initiatives end to end across teams.
Bachelor’s degree in Computer Science or Engineering, or equivalent practical experience.

Nice To Haves

Experience connecting cloud services to physical devices or edge hardware in the field.
Familiarity with Bazel or another polyglot monorepo build system.
Experience with security and compliance controls such as SOC 2 or ISO 27001 as applied to cloud infrastructure.
Experience running or contributing to a platform team serving other engineers as internal customers.

Responsibilities

Operate and extend AWS and GCP environments hosting Tier-0 services, maintaining resilience, cost efficiency, and security while supporting new products.
Design and maintain networking connecting cloud services to a global printer fleet, including VPCs, peering, DNS, load balancing, TLS, and secure edge connectivity.
Own Kubernetes clusters and the Istio service mesh, improving cluster architecture, workload isolation, traffic management, mutual TLS, and observability.
Lead Terraform initiatives from module design through rollout, shape infrastructure-as-code standards, and maintain the state and module ecosystem.
Improve Jenkins and GitHub Actions pipelines, including build speed, deployment safety, feedback loops, and paths from merged pull requests to production.
Participate in platform on-call, lead incident response and postmortems for owned initiatives, and turn recurring issues into permanent fixes.
Help product teams adopt strong operational practices for the services they own.
Provide technical leadership across infrastructure, security, and application teams; translate product and operational needs into robust designs; contribute to design and code reviews; and mentor engineers.