Job description

Who We Are Pulumi is the cloud infrastructure platform engineers love and enterprises trust. We help teams build, secure, and operate modern cloud applications using real programming languages, backed by an open-source foundation and a powerful SaaS platform. Industry leaders like Snowflake, NVIDIA and Supabase rely on Pulumi to turn cloud infrastructure into a competitive advantage. Pulumi enables developers and infrastructure engineers to unlock the full power of cloud services with secure, repeatable, production-grade infrastructure across AWS, Azure, Google Cloud, Datadog, GitHub, and more. As an AI-first organization, we're a leader in the AI Infrastructure space and have our own autonomous infrastructure engineering agent that brings AI-driven operations directly into the cloud engineering workflow. Pulumi is headquartered in Seattle, WA, with a globally distributed team. This role can be in Seattle or remote. About the Role Pulumi Cloud holds the state of record for our customers' infrastructure, brokers the credentials and configuration every deployment depends on, decides who and what is allowed to change which resources, records what actually happened, and exposes all of it through APIs that humans and agents build on. We’re in the middle of a wave of change, with agents playing an increasing role in infrastructure management. Pulumi plays a critical role in helping human engineers achieve their goals, and we’re looking for a thought leader to evolve both our human and agent experiences with our platform. We're hiring a Senior or Principal Product Manager to own end to end experiences that are agent-ready and human-friendly across: Pulumi ESC — environments, secrets, and configuration, including service-backed config Managed state — the durable system of record for infrastructure, including state reconciliation flows Registry and Components — how teams package, share, and consume reusable infrastructure Authorization, RBAC, and auditing — the trust boundary and the record of what crossed it User experiences — our cloud console, public API and OpenAPI spec, the Pulumi Service Provider, webhooks and notifications, and version control integrations A lot of companies are building infrastructure agents right now. Very few are building the control plane those agents have to be trusted on. That's the harder problem, and it's the one that decides whether any of this actually reaches production. You'd own it. In This Role You Will: Own the roadmap for Pulumi Cloud's platform services, partnering with engineering leadership to sequence long-term architectural bets against near-term customer pull. Define what agent-ready means for a control plane — what an autonomous system needs to safely read config, obtain credentials it never sees, scope its own blast radius, and leave behind an audit trail a security team will accept. Nobody has a settled answer here. You'd be writing it. Drive the ESC roadmap: how configuration and secrets flow from source systems to every consumer, what atomicity and consistency guarantees we make, and how ESC becomes the default rather than an add-on. Own the trust boundary. Permissions models, RBAC granularity, and audit are where enterprise deals are won and lost, and where the requirements are least forgiving. Treat them as product, not compliance overhead. Shape the Registry and Components ecosystem — how teams find, publish, version, and trust reusable infrastructure, and what changes when the consumer is an agent rather than a person. Treat the API as a first-class product. Our OpenAPI surface, the Pulumi Service Provider, webhooks, and VCS integrations are how platform teams and agents extend Pulumi; their ergonomics deserve the same care as any UI. Balance the enterprise customers who need governance, isolation, and provable controls against the individual developers who made Pulumi worth adopting in the first place — without quietly making the product worse for either. Instrument what you ship, define the metrics that matter, and feed usage evidence straight back into roadmap decisions. Drive end-to-end delivery from idea to GA to adoption, working across Engineering, Design, Marketing, Sales, Support, and the open source community. We’re Looking For Someone With: 7+ years in product management, engineering, or technical program management, with real time on platform, API, or infrastructure products. Taste in API and platform design — you have opinions about resource modeling, versioning, backward compatibility, error semantics, and what separates an API people build on from one they tolerate. Comfort in the security and identity domain: secrets handling, permissions models, tenancy, and audit. You don't need to have been a security PM, but you should find these problems interesting rather than tedious. Strong technical instincts and the ability to hold your own with senior engineers on architectural tradeoffs — consistency guarantees, failure modes, migration paths. A track record of ramping fast in unfamiliar technical domains and forming real opinions, not just synthesizing other people's. Demonstrated ability to ship high-quality products in ambiguous, complex problem spaces. Experience working cross-functionally with Sales, Marketing, and Support in a product-led growth environment. Excellent written and verbal communication. We work asynchronously and in writing; clear thinking on the page is the job. A commitment to building inclusive, collaborative teams. Nice to Haves Background in secrets management, identity providers, IAM, policy engines, or adjacent security infrastructure. Experience shipping products that agents or automated systems consume — MCP servers, tool-use surfaces, or machine-facing APIs. Familiarity with IaC tooling (Terraform, CloudFormation, Crossplane, CDK) and a point of view on what Pulumi does differently. Background in cloud infrastructure, DevOps, SRE, or platform engineering. Experience working with or contributing to open source projects and communities. Compensation Principal Level Base Salary Range: $180,500 to $227,850 Senior Level Base Salary Range: $166,000 - $209,000 All full time employee offers at Pulumi include base salary, bonus or variable, equity and benefits (details below). Benefits & Perks at Pulumi: Healthcare Coverage: We offer comprehensive medical, dental, vision, and supplemental insurance at no cost to U.S. employees. Internationally, we comply with local healthcare requirements and provide regionally appropriate coverage. Time Off: Our unlimited PTO policy encourages balance and rest — and we require employees to take at least three weeks off annually, plus 13 U.S. holidays. 401(k): U.S. employees are eligible for a 401(k) plan with an employer match to support long-term financial wellness. Parental Leave: We provide 20 weeks of paid leave for birthing parents or primary caregivers, and 16 weeks for non-birthing parents or secondary caregivers. Remote-First Culture: Pulumi has been fully remote since 2020, with teammates across 20+ U.S. states and 12+ countries. We support flexible work with asynchronous collaboration and an annual “work from anywhere” stipend. Professional Development: Every employee receives an annual learning and development budget to support growth, learning, and career goals. Equity Ownership: We believe in acting like owners. All employees receive equity and are empowered to think big, move fast, and build the future of cloud together. Additional Support: We offer a monthly wellness fund to support mental and physical well-being, and a quarterly happiness fund for team connection. About Pulumi: Pulumi is reimagining how teams build cloud software, enabling developers and infrastructure experts to work better together through a unique combination of programming languages, tools, and systems innovation. Our flagship infrastructure as code technology is open source and our SaaS product, Pulumi Cloud, provides platform teams, secrets management, and cloud management capabilities, and more. We have pioneered leveraging AI across all of these areas with our LLM-powered Pulumi Copilot to push the boundaries of what's possible. At Pulumi, we dream big, in the pursuit of helping our customers out-innovate and win. Founded in 2017 by industry veterans with over five decades of combined experience building developer platforms, Pulumi now has a global community of more than 350,000 members and serves over 3,250 customers. Despite our rapid growth, we're still only getting started, and are early in our mission to democratize the cloud. If you thrive in a fast-paced, high-performance, we want to work with you to accelerate Pulumi's impact. At Pulumi, we don't just accept difference, we celebrate, support, and thrive on it for the benefit of our employees, our products, and our customers. Pulumi is proud to be an equal opportunity workplace and is committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or Veteran status. If you have a disability or special need that requires accommodation, please let us know.

Requirements

Must-haves

We're hiring a Senior or Principal Product Manager to own end to end experiences that are agent-ready and human-friendly across:
Pulumi ESC — environments, secrets, and configuration, including service-backed config
Managed state — the durable system of record for infrastructure, including state reconciliation flows
Registry and Components — how teams package, share, and consume reusable infrastructure
Authorization, RBAC, and auditing — the trust boundary and the record of what crossed it
User experiences — our cloud console, public API and OpenAPI spec, the Pulumi Service Provider, webhooks and notifications, and version control integrations
Own the roadmap for Pulumi Cloud's platform services, partnering with engineering leadership to sequence long-term architectural bets against near-term customer pull.
Drive the ESC roadmap: how configuration and secrets flow from source systems to every consumer, what atomicity and consistency guarantees we make, and how ESC becomes the default rather than an add-on.
Own the trust boundary. Permissions models, RBAC granularity, and audit are where enterprise deals are won and lost, and where the requirements are least forgiving. Treat them as product, not compliance overhead.
Shape the Registry and Components ecosystem — how teams find, publish, version, and trust reusable infrastructure, and what changes when the consumer is an agent rather than a person.
Treat the API as a first-class product. Our OpenAPI surface, the Pulumi Service Provider, webhooks, and VCS integrations are how platform teams and agents extend Pulumi; their ergonomics deserve the same care as any UI.
Instrument what you ship, define the metrics that matter, and feed usage evidence straight back into roadmap decisions.
Drive end-to-end delivery from idea to GA to adoption, working across Engineering, Design, Marketing, Sales, Support, and the open source community.
7+ years in product management, engineering, or technical program management, with real time on platform, API, or infrastructure products.
Taste in API and platform design — you have opinions about resource modeling, versioning, backward compatibility, error semantics, and what separates an API people build on from one they tolerate.
Comfort in the security and identity domain: secrets handling, permissions models, tenancy, and audit. You don't need to have been a security PM, but you should find these problems interesting rather than tedious.
Strong technical instincts and the ability to hold your own with senior engineers on architectural tradeoffs — consistency guarantees, failure modes, migration paths.
A track record of ramping fast in unfamiliar technical domains and forming real opinions, not just synthesizing other people's.
Demonstrated ability to ship high-quality products in ambiguous, complex problem spaces.

Nice-to-haves

Background in secrets management, identity providers, IAM, policy engines, or adjacent security infrastructure.
Experience shipping products that agents or automated systems consume — MCP servers, tool-use surfaces, or machine-facing APIs.
Familiarity with IaC tooling (Terraform, CloudFormation, Crossplane, CDK) and a point of view on what Pulumi does differently.
Background in cloud infrastructure, DevOps, SRE, or platform engineering.
Experience working with or contributing to open source projects and communities.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsazureaiapirestllm

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto

Parental Leave

Wellness

Professional Development