Senior Infrastructure Engineer

Description

The company applies frontier agentic AI, an enterprise-grade platform and deep domain knowledge to legal and professional services work.

It has strong product-market fit and well-regarded investors, and it is scaling quickly while still early in its market.

The team moves fast, takes ownership, stays close to customers and holds a high bar. Its three values are Decisiveness, Simplicity and Job's Not Finished.

The company is cloud-first and runs no servers or data centers of its own. IT infrastructure covers cloud tenants, SaaS configuration, office networks across a growing global footprint, and the automation that links them.

Today each platform owner handles this cross-cutting work on the side. This role makes it someone's main job so it is built once, done well and stays reliable.

You will join Core IT Engineering & Infrastructure, reporting to Dave Vega, Director of IT. Peers own identity and collaboration, Microsoft platforms, networking and client platforms.

Responsibilities

• Own the shared infrastructure, automation and reliability work that spans every IT platform.
• Manage access, guardrails and cost for the IT cloud accounts and projects on AWS, Azure and GCP. Act as the BizTech engineering partner to Security and Infrastructure on tenant-level changes, such as cloud migrations that affect Entra and M365.
• Build and run the Git repositories, CI pipelines and review process for IT configuration across Okta, Jamf, Intune and Google Workspace. Platform owners still manage their own config, while you own the framework everyone uses.
• Own the automation behind identity lifecycle and IT workflows, including SCIM and provisioning flows, onboarding and offboarding across systems, and IT workflows in Serval.
• Set up health checks and alerts for critical IT systems and integrations, detect config drift, back up SaaS data for Google, Slack and M365, and maintain recovery runbooks that are tested.
• Move the scripts and admin utilities now kept on individual laptops into source control, document them and keep them running.
• With the Network and AV/Media teams, define the repeatable technical template each new office copies for configuration, monitoring and documentation. Those teams keep executing their own network and AV builds.
• Raise standards for change control, documentation and runbooks across the pillar so primaries and backups can cover for each other.
• Track and renew every certificate IT relies on, including Apple Push, SAML signing, SSL and Wi-Fi/802.1X. Take ownership of DNS NS solutions for IT alongside the Network and CorpSec teams, and build expiry monitoring to prevent surprises.

Requirements

• At least 6 years in corporate IT engineering, systems engineering or SRE, including at least 2 years owning shared infrastructure or automation at a SaaS-first company.
• Strong infrastructure-as-code skills, with real Terraform or similar work in Git using pull-request review and CI.
• Solid scripting in Python plus one of Bash, PowerShell or Go. Your code is readable and maintainable by others.
• Hands-on experience with identity and provisioning: SAML, OIDC, SCIM and lifecycle automation in Okta or Entra.
• Working knowledge of at least one major cloud, AWS, Azure or GCP, covering IAM, accounts and cost basics.
• Comfortable with DNS, TLS, certificate management and basic enterprise networking.
• Proven record of building alerts the team relies on, and of writing runbooks others have followed successfully.
• Clear written communication: you can explain a change, its risk and its rollback to non-engineers.
• Bonus Points: Terraform providers for Okta, Google Workspace or Jamf, or config-as-code tools for Intune.
• Bonus Points: Serval or similar IT automation platforms.
• Bonus Points: SaaS backup and recovery tools for Google Workspace, Slack or M365.
• Bonus Points: multi-site office rollouts across regions, including working with local vendors and ISPs.
• Bonus Points: experience at a fast-growing company where headcount grew faster than the IT team.

Conditions

Salary: $153,000 - $210,500 USD.

Job code: LI-RB1.

The company is an equal opportunity employer and does not discriminate on any legally protected basis.

Reasonable accommodations are available to applicants with disabilities on request.