Senior CI/CD Engineer

Since 2004, we’ve been bringing investment ideas to life and connecting capital with the right people and opportunities. Today, we manage more than £2.5 billion for a broad range of investors across five key investment strategies: Private Credit, Social Housing, Clean Heat, Energy and Venture. These strategies underpin the innovative range of investments we offer to both private (retail) and institutional clients.  There are 230+ employees at Triple Point, all committed to leaving the world demonstrably better than we found it. That’s why we’re a certified B Corp, signed up to the Principles for Responsible Investment, and were named a Sunday Times 'Best Place to Work  2025 & 2026'. If this sounds like an environment where you would flourish, then read on… The Function  The Digital and Technology team designs, builds and maintains the systems that power Triple Point. The function enables seamless connectivity, security and innovation across the organisation, creating tools and platforms that help colleagues and partners work smarter and deliver excellent outcomes.  The Team  This role sits within Technical Operations & Cyber, within the wider Digital and Technology function. The role works closely with colleagues across D&T, our MSP, our SOC and stakeholders across the business. The team is responsible for keeping our technology secure, reliable and high performing while improving delivery pace through automation, cloud engineering and emerging technology.  The Role  We are seeking a Senior DevOps Engineer to lead hands-on DevOps and platform engineering across Triple Point’s Microsoft cloud and AI delivery landscape.  You will design, build and operate secure deployment pipelines, automation, monitoring and infrastructure-as-code patterns that enable cloud and AI workloads to move safely and at pace. As our use of Claude Code, AI agents and automation grows, this role will provide the engineering foundations to run these capabilities reliably, securely and with clear governance.  Working closely with the Head of Technical Operations & Cyber and our Senior Cyber Engineer, you will help enable pragmatic, risk-aware decisions on cloud and AI tooling, ensuring a balance between delivery pace and security, governance and operational sustainability.  This is a delivery-focused role owning engineering work end-to-end, from discovery and design through to implementation, documentation and transition into BAU. You will help remove delivery bottlenecks, strengthen platform maturity and make practical recommendations that balance pace, reliability, security and usability.  Key Responsibilities  DevOps, Cloud Platform & CI/CD Engineering  * Design, build, maintain and improve CI/CD pipelines for cloud, integration, automation and AI workloads.  * Create reusable infrastructure-as-code patterns, templates and standards for secure, consistent cloud deployments.  * Improve release management, environment management and deployment controls across development, test and production environments.  * Support source control, branching, build, test and deployment practices that help teams deliver safely and efficiently.  * Build practical engineering standards for service principals, managed identities, secrets, configuration, certificates and environment separation.    Automation, AI Enablement & Developer Experience  * Enable safe, reliable deployment and operation of Claude Code, AI agents and similar AI-assisted development tooling.  * Automate repeatable operational, deployment and monitoring tasks to reduce manual effort and improve consistency.  * Develop self-service patterns, reusable scripts and documentation that make it easier for colleagues to adopt approved engineering practices.  * Work with current and future AI Team colleagues to lay the technical foundations for agent automation and cloud-based AI delivery.  * Identify opportunities to simplify tooling, reduce friction and improve the developer and stakeholder experience.    Reliability, Monitoring & Operational Readiness  * Design and improve monitoring, logging, alerting and reporting across pipelines, platforms and cloud workloads.  * Create runbooks, deployment checklists and operational handover materials that support effective BAU ownership.  * Support incident response, root-cause analysis and continuous improvement for deployment or platform reliability issues.  * Improve resilience, recovery and performance practices for key services and automation workloads.  * Use data from monitoring and service performance to recommend improvements and prioritise platform work.    Security, Governance & Documentation  * Embed security-by-design into DevOps practices, including least privilege, secure configuration, secrets management and change control.  * Work closely with Technical Operations & Cyber, the SOC and MSP partners to ensure cloud and AI tooling is operated securely.  * Maintain clear documentation of pipeline designs, infrastructure standards, access models, monitoring arrangements and operational guardrails.  * Support audits, assurance activity and evidence gathering where DevOps, cloud or platform controls are in scope.  * Balance security, usability and delivery pace when assessing risks, trade-offs and recommendations.    Collaboration, Planning & Continuous Improvement  * Plan and prioritise DevOps improvements based on impact, value, risk and delivery needs.  * Translate technical complexity into clear recommendations for technical and non-technical stakeholders.  * Partner constructively across Digital and Technology, internal stakeholders and external technology partners.  * Challenge current ways of working where needed and recommend pragmatic improvements with clear rationale.  * Share knowledge generously and help raise DevOps capability across the function and organisation.    Knowledge & Experience  Essential  * Significant hands-on experience in DevOps, platform engineering, cloud engineering or a closely related engineering role.  * Strong experience designing and maintaining CI/CD pipelines using tools such as Azure DevOps, GitHub Actions, GitLab CI or equivalent.  * Good working knowledge of Microsoft Azure and Microsoft cloud services, including deployment, access, monitoring and governance considerations.  * Experience with infrastructure-as-code and automation tools such as Terraform, Bicep, ARM templates, PowerShell or equivalent.  * Proficiency in Python for scripting, automation and tooling able to write, read and maintain production-quality scripts, not just adapt examples.  * Working knowledge of core Azure networking concepts, including VNets, NSGs, DNS, private endpoints and load balancers, with practical experience applying these in cloud and containerised workloads.  * Strong understanding of Git, source control workflows, release management, environment management and secure software delivery practices.  * Experience implementing monitoring, logging and alerting for cloud platforms, pipelines or application workloads.  * Strong grounding in cloud security principles, including identity and access, least privilege, secrets management, network security and secure configuration.  * Awareness of cloud cost management principles, including resource tagging standards, right-sizing, and governance for spend able to recommend efficient, cost-conscious approaches rather than just functional ones.  * Ability to translate technical requirements and risk considerations into pragmatic, well-documented engineering solutions.  * Comfortable working with the Head of Technical Operations & Cyber to make pragmatic, risk-aware decisions that balance delivery pace with security and governance requirements.  * Excellent communication skills, with the ability to work effectively with technical teams, senior stakeholders and external partners.  * A self-starter mindset, with strong planning, problem-solving and ownership of delivery outcomes.    Desirable  AI & Automation  * Experience deploying, governing or operating AI-assisted development tools, agent automation or cloud-based AI workloads.  Microsoft Platform  * Experience working with Microsoft 365, Entra ID, Intune, Sentinel, Azure Monitor, Log Analytics or similar Microsoft tooling.  * Relevant certifications such as AZ-400, AZ-104, AZ-305, AZ-500, Terraform Associate, GitHub certifications or equivalent hands-on experience.  Containers & Orchestration  * Experience with containers and orchestration technologies such as Docker, Kubernetes or Azure Container Apps.  Broader Platform & Integrations  * Experience supporting Salesforce, data platform, integration or business automation workloads.  Regulated Environments  * Experience working in a regulated services environment, ideally FCA-regulated.  Why Join us?  This is a key role at the point where DevOps, cloud automation and AI capability are becoming central to how Triple Point delivers technology safely and effectively.  * You’ll join a talented, collaborative team in a connected environment where ideas and initiative are valued.  * Be part of a growing and innovative team.  * We offer a competitive salary, a comprehensive benefits package, and genuine opportunities for growth and progression.  * Opportunities for professional development and career progression.  At Triple Point, high performance means living our values every day:  * Stay Curious.  * Be Generous.  * Take Thoughtful Action.  * Pull Together.  * Own It.  In line with our values Stay Curious and Take Thoughtful Action every employee has access to AI tools.  We see technology as a co-pilot, helping us improve efficiency and insight while keeping decisions grounded in thoughtful human judgement.  Triple Point offers a wealth of benefits including a contributory pension, hybrid/flexible working and ongoing learning and development opportunities. Check out our comprehensive list of benefits HERE.  Apply today for further information! Triple Point is dedicated to providing fair and equal opportunities for all individuals, including both current and potential employees. Discrimination of any kind based on factors such as age, disability, gender, sexual orientation, pregnancy, race, ethnicity, religion, gender identity, or marital status is not tolerated by the company. Our aim is to create a welcoming and diverse work environment where people from all walks of life feel valued and supported. We actively encourage individuals from various backgrounds to apply for job vacancies and become part of our team.  STRICTLY NO AGENCIES

Who we are At CarGurus (NASDAQ: CARG), our mission is to give people the power to reach their destination. We started as a small team of developers determined to bring trust and transparency to car shopping. Since then, our history of innovation and go-to-market acceleration has driven industry-leading growth. In fact, we’re the largest and fastest-growing automotive marketplace, and we’ve been profitable for over 15 years. What we do The market is evolving, and we are too, moving the entire automotive journey online and guiding our customers through every step. That includes everything from the sale of an old car to the financing, purchase, and delivery of a new one. Today, tens of millions of consumers visit CarGurus.com each month, and ~30,000 dealerships use our products. But they're not the only ones who love CarGurus—our employees do, too. We have a people-first culture that fosters kindness, collaboration, and innovation, and empowers our Gurus with tools to fuel their career growth. Disrupting a trillion-dollar industry requires fresh and diverse perspectives. Come join us for the ride! Role overview CarGurus is seeking a Senior DevOps Engineer to join our Cloud Enablement team. This team builds and operates the cloud platform capabilities, automation, and guardrails that help engineering teams provision infrastructure, deploy services, and work securely in the cloud with less friction. In this role, you will contribute to the design, implementation, and operation of scalable platform services that improve developer experience, strengthen reliability, and support self-service infrastructure across the company. We are looking for an engineer who is hands-on, execution-oriented, and motivated by building practical solutions that other engineers rely on every day. Our primary domains include: * Infrastructure Delivery: HCP Terraform workspaces, Terraform module registry governance, Sentinel and Semgrep policy enforcement, and self-service IaC paved paths for development teams. * Secrets Management: HashiCorp Vault implementation, dynamic short-lived credentials, PKI/CA, and supporting the rollout of zero-static-credential patterns across production workloads. * CI/CD Platform: GitHub Actions maturity (GHES, GitHub Connect, org-scoped runners), Concourse infrastructure, and pipeline supply-chain security. * AWS Self-Service: No-code and IaC-driven provisioning for S3, Lambda, ElastiCache, and expanding the self-service catalog to new resource types. * AI Infrastructure Governance: Governed Amazon Bedrock access, per-team token quotas and cost dashboards, Bedrock Savings Plan management, and developer AI tooling (Claude Code, GitHub Copilot) governance. * Platform Integrity: Sentinel/Semgrep policy maturity, shift-left guardrails, pipeline hardening, and cloud maturity model advancement. What you'll do * Platform Delivery & Technical Ownership: Own the technical execution and delivery of significant platform capabilities. Author design docs and contribute to Architecture Decision Records (ADRs) for team-level decisions. Lead complex, multi-sprint initiatives (e.g., Vault dynamic secrets rollout, GitHub Actions maturity, AWS Sandbox self-service) end-to-end through to production. * IaC Platform & Policy Engineering: Manage HCP Terraform workspaces, the Terraform module registry, and Sentinel/Semgrep policy implementations. Calibrate hard vs. advisory guardrails, eliminate false positives, and expand coverage as new resource types onboard to self-service. * Secrets & Security Integration: Accelerate Vault adoption across CarGurus workloads — handling dynamic secrets, PKI/CA, transit encryption, and AWS dynamic IAM credentials. Execute the tactical roadmaps toward zero standing long-lived credentials in production. * AI Infrastructure Governance: Maintain and operate our governed Amazon Bedrock platform, implementing per-team access controls, cost attribution, anomaly detection, and self-service access patterns. Assist in extending governance to developer AI tooling (Claude Code, Copilot) as adoption scales. * Developer Enablement & Self-Service: Expand the AWS self-service catalog and paved-path IaC offerings so teams can provision, operate, and own cloud resources independently. Monitor adoption metrics and use feedback to prioritize the next platform investments. * CI/CD & Pipeline Integrity: Execute GitHub Actions maturity initiatives including GitHub Connect adoption, org-scoped runner observability, bundled action governance, CircleCI adoption and migration, and pipeline supply-chain hardening. Ensure teams can deliver reliably on modern, self-owned CI/CD infrastructure. * Mentorship & Code Quality: Actively grow teammates' capabilities through thorough code and IaC reviews, pairing on complex problems, and sharing context and patterns that help the immediate team move more independently. Contribute to team coding standards and documentation. * Cross-Team Collaboration: Partner with adjacent teams (Cloud Infrastructure, SRE, DevX, and product engineering) to align on technical concerns at team boundaries. Represent Cloud Enablement's perspective clearly in shared discussions and help resolve integration ambiguity. * Incident Management & Reliability: Participate in the team's on-call rotation and incident response. Apply incident learnings to improve platform reliability and reduce toil for the team and its customers. * AI-Assisted Engineering: Actively incorporate AI tooling (Claude Code, GitHub Copilot, Amazon Q) into your engineering workflow — from generating and reviewing IaC to accelerating architecture exploration and incident triage. What you'll bring * 4+ years of professional experience in a hands-on DevOps, platform engineering, or cloud infrastructure role, performing the core responsibilities of this position. * Cloud Infrastructure Depth: Significant experience operating production workloads in AWS including IAM, S3, Lambda, EKS, ElastiCache, EC2, and related services. Comfortable reasoning about security, cost, and reliability trade-offs at platform scale. * Infrastructure as Code & Policy Engineering: High proficiency with Terraform, including HCP Terraform, remote state, module design, and workspace governance. Hands-on experience with Sentinel and/or Semgrep for policy-as-code enforcement. * Secrets Management: Practical experience with HashiCorp Vault dynamic secrets, PKI/CA, AppRole/Kubernetes auth, or transit encryption. Experience migrating workloads from static credentials to short-lived credential models. * CI/CD & Platform Engineering: Deep experience with GitHub Actions runner infrastructure, composite actions, GHES/GHEC, and supply-chain security practices. Familiarity with CircleCI or similar pipeline systems. * FinOps & AI Awareness: Ability to reason about cloud cost attribution, resource tagging strategies, and FinOps tooling (e.g., CloudZero, AWS Cost Explorer). Familiarity with Amazon Bedrock, LLM API cost structures, and basic governance considerations (spend attribution, access controls). * Programming & Automation: Proficiency in at least one scripting/programming language (Python, Go, or similar) for building automation, CLI tooling, and platform integrations. * Systems Thinking & Communication: Able to distill complex technical problems into clear design docs, written proposals, and stakeholder-facing summaries. Comfortable working across teams to align on shared technical boundaries. The displayed range represents the expected annual base salary / On-Target Earnings (OTE) for this position. On-Target Earnings (OTE) is inclusive of base salary and on-target commission earnings, which applies exclusively to sales roles. Individual pay within this range is determined by work location and other factors such as job-related skills, experience, and relevant education or training. This annual base salary forms part of a comprehensive Total Rewards Package. In addition to benefits, this role may qualify for discretionary bonuses/incentives and Restricted Stock Units (RSUs). Position Pay Range $137,000—$171,000 USD Working at CarGurus We reward our Gurus’ curiosity and passion with best-in-class benefits and compensation, including equity for all employees, both when they start and as they continue to grow with us. Our career development and corporate giving programs, as well as our employee resource groups (ERGs) and communities, help people build connections while making an impact in personally meaningful ways. A flexible hybrid model and robust time off policies encourage work-life balance and individual well-being. Thoughtful perks like daily free lunch, a new car discount, meditation and fitness apps, commuting cost coverage, and more help our people create space for what matters most in their personal and professional lives. CarGurus may require in-person interviews as part of our hiring process, particularly for positions based in our Boston and Dublin offices. Candidates selected for an in-person interview will be notified in advance. Please be aware that travel expenses are the responsibility of the candidate. We welcome all CarGurus strives to be a place to which people can bring the ultimate expression of themselves and their potential—starting with our hiring process. We do not discriminate based on race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, or sexual orientation. We foster an inclusive environment that values people for their skills, experiences, and unique perspectives. That’s why we hope you’ll apply even if you don’t check every box listed in the job description. We also encourage you to tell your recruiter if you require accommodations to participate in our hiring process due to a disability so we can provide the appropriate support. We want to know what only you can bring to CarGurus. #LI-Hybrid