Senior Infrastructure Engineer

Description

The company is reshaping how legal and professional services get done by combining agentic AI, an enterprise platform and deep domain knowledge.

It is early enough to shape the company's direction, has strong product-market fit and is backed by well-regarded investors.

The company is scaling quickly and defining a new product category as it goes.

The team works at pace, takes ownership and stays close to customers.

You'll join Core IT Engineering and Infrastructure, reporting to Dave Vega, Director of IT. Peers in the group own identity and collaboration, Microsoft platforms, networking and client platforms.

The company is cloud-first and runs no servers or data centers. Its IT estate covers cloud tenants, SaaS configuration, office networks across a global footprint that is still growing, and the automation that links them.

Today each platform owner handles this cross-cutting work on the side. This role makes it a full-time job so it gets built once and built well.

Responsibilities

• Own the shared infrastructure, automation and reliability work that spans every IT platform.
• Manage access, guardrails and cost for the cloud accounts IT runs on AWS, Azure and GCP. Act as the BizTech engineering partner to Security and Infrastructure on tenant changes, such as cloud migrations touching Entra and M365.
• Build and run the Git repositories, CI pipelines and review process for IT configuration in Okta, Jamf, Intune and Google Workspace. Platform owners keep their own configs while you own the shared framework.
• Own the automation behind identity lifecycle and IT workflows, including SCIM and provisioning, cross-system onboarding and offboarding, and workflows in Serval.
• Set up health checks and alerts for critical IT systems and integrations, detect config drift, run SaaS backup for Google, Slack and M365, and maintain recovery runbooks that get tested.
• Move scripts and admin utilities off individual laptops and into source control, with documentation and ongoing upkeep.
• With the Network and AV/Media teams, define the repeatable technical template each new office copies, covering configuration, monitoring and documentation. Those teams still carry out their own network and AV builds.
• Raise standards for change control, documentation and runbooks so primary and backup owners can cover for each other.
• Track and renew every certificate IT depends on, including Apple Push, SAML signing, SSL and Wi-Fi/802.1X. Work with the Network and CorpSec teams to own and manage DNS NS solutions for IT, and build expiry monitoring so renewals don't catch anyone off guard.

Requirements

• 6+ years in corporate IT engineering, systems engineering or SRE, with at least 2 years owning shared infrastructure or automation at a SaaS-first company.
• Real experience managing systems with Terraform or similar tools, working in Git with pull-request review and CI.
• Solid scripting in Python plus Bash, PowerShell or Go, with code that others can read and maintain.
• Hands-on work with SAML, OIDC, SCIM and lifecycle automation in Okta or Entra.
• Working knowledge of AWS, Azure or GCP, including IAM, accounts and cost basics.
• Comfort with DNS, TLS, certificate management and basic enterprise networking.
• Monitoring and alerting that people trust, and runbooks that others have used successfully.
• Clear written communication that explains a change, its risk and its rollback to non-engineers.
• Bonus: Terraform providers for Okta, Google Workspace or Jamf, or config-as-code tools for Intune.
• Bonus: Serval or similar IT automation platforms.
• Bonus: SaaS backup and recovery tools for Google Workspace, Slack or M365.
• Bonus: multi-site office rollouts across regions, including work with local vendors and ISPs.
• Bonus: experience at a fast-growing company whose headcount grew faster than its IT team.

Conditions

$153,000 - $210,500 USD

LI-RB1

The company is an equal opportunity employer and does not discriminate on any protected basis.