diff --git a/.envrc b/.envrc
index a5dbbcb..3550a30 100644
--- a/.envrc
+++ b/.envrc
@@ -1 +1 @@
-use flake .
+use flake
diff --git a/flake.nix b/flake.nix
index 0dc45a1..b020b16 100644
--- a/flake.nix
+++ b/flake.nix
@@ -110,6 +110,11 @@
           description = "Protobuf development environment";
         };
 
+        pulumi = {
+          path = ./pulumi;
+          description = "Pulumi development environment";
+        };
+
         purescript = {
           path = ./purescript;
           description = "Purescript development environment";
diff --git a/pulumi/.envrc b/pulumi/.envrc
new file mode 100644
index 0000000..3550a30
--- /dev/null
+++ b/pulumi/.envrc
@@ -0,0 +1 @@
+use flake
diff --git a/pulumi/flake.lock b/pulumi/flake.lock
new file mode 100644
index 0000000..0f56f8b
--- /dev/null
+++ b/pulumi/flake.lock
@@ -0,0 +1,27 @@
+{
+  "nodes": {
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1689261696,
+        "narHash": "sha256-LzfUtFs9MQRvIoQ3MfgSuipBVMXslMPH/vZ+nM40LkA=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "df1eee2aa65052a18121ed4971081576b25d6b5c",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixpkgs-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "nixpkgs": "nixpkgs"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}
diff --git a/pulumi/flake.nix b/pulumi/flake.nix
new file mode 100644
index 0000000..f414307
--- /dev/null
+++ b/pulumi/flake.nix
@@ -0,0 +1,25 @@
+{
+  description = "A Nix-flake-based Pulumi development environment";
+
+  inputs.nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
+
+  outputs = { self, nixpkgs }:
+    let
+      supportedSystems = [ "x86_64-linux" "aarch64-linux" "x86_64-darwin" "aarch64-darwin" ];
+      forEachSupportedSystem = f: nixpkgs.lib.genAttrs supportedSystems (system: f {
+        pkgs = import nixpkgs { inherit system; };
+      });
+    in
+    {
+      devShells = forEachSupportedSystem ({ pkgs }: {
+        default = pkgs.mkShell {
+          packages = with pkgs; [
+            pulumi-bin
+            python311
+            kubectl
+            jq
+          ];
+        };
+      });
+    };
+}