Enterprise Infrastructure Engineer

boku; Greater London; On-site; GBP 70,000 - 100,000; Full time

Job summary

Boku operates a cloud-first, global infrastructure estate and is seeking an Enterprise Infrastructure Engineer to design, build, and maintain core Azure infrastructure with a strong focus on automation and Infrastructure-as-Code. You will work with Entra ID, Intune, Kandji, and Delinea PAM, under senior guidance, to deliver secure, scalable platforms.

Across the role, you will write Python and PowerShell scripts, support AI-driven operations, and collaborate with Security to meet ISO 27001, SOC

Qualifications

• Experience in designing, building, and maintaining cloud infrastructure.
• Strong automation and Infrastructure-as-Code (IaC) background.
• Experience with identity and access management (Entra ID, RBAC) and secure network configurations.
• Familiarity with Microsoft 365, Intune, Kandji and device management.
• Ability to write scripts in Python/PowerShell for automating tasks.
• Exposure to AI-driven operations and integration with automation tooling.

Responsibilities

• Design, build, and maintain core Azure infrastructure with IaC and automation.
• Manage Entra ID RBAC, PAM, and access controls under guidance of senior engineers.
• Configure and maintain Microsoft Intune and Kandji for endpoint management.
• Develop automation scripts in Python/PowerShell to support infra tasks and reporting.
• Collaborate with Security to align with ISO 27001, SOC 2, and DORA frameworks.
• Contribute to AI-driven enhancements in infrastructure operations.

Skills

Azure

Terraform

PowerShell

Python

Entra ID RBAC

Intune

Kandji

Delinea PAM

Automation

AI-driven ops

Tools

Azure

Terraform

PowerShell

Python

Entra ID

RBAC

Intune

Kandji

Delinea PAM

Job description

Build the payment infrastructure powering global commerce.

Boku connects billions of consumers to the payment methods they prefer, one market at a time. Our platform connects the world's leading digital businesses to the local payment methods their customers already use. Spotify, Meta, Microsoft, Netflix and Tencent already run on Boku's payment infrastructure. We operate across 60+ countries, support 200+ local payment methods and reach 7.5 billion consumer accounts.

With headquarters in London and San Francisco and colleagues working across markets around the world, Boku is global by default. From London to Mumbai, São Paulo to Singapore, our teams collaborate across time zones, markets and cultures to build products for customers around the world.

Join us to solve complex, real-time payment challenges at global scale. We share knowledge freely, take ownership of complexity and look for people who question how things are done and find better ways to build.

Boku Inc. (BOKU.L) is the leading global provider of local mobile-first payments solutions. Global brands including Amazon, DAZN, Meta, Google, Microsoft, Netflix, Sony, Spotify, and Tencent rely on Boku to reach millions of new paying consumers who do not use credit cards with our purpose-built payment network of more than 300 local payment methods across 70+ countries. Every year, Boku processes over $10 billion in value for our customers. Incorporated in 2008, Boku is headquartered in London and San Francisco and has employees in over 39 countries around the world, including Brazil, China, Estonia, Germany, Ireland, Japan, Singapore, and the UAE.

Boku is a truly global company that takes pride in its diversity and thriving equal opportunity workplace.

Role Purpose

Boku operates a cloud-first, global enterprise infrastructure estate spanning Azure, Microsoft 365, and 40+ SaaS products. As Enterprise Infrastructure Engineer, you will contribute to the design, build, and ongoing maintenance of Boku's core infrastructure as part of the infrastructure team, with a strong focus on automation, Infrastructure-as-Code, and AI-driven operational tooling. You will work closely with, and under the guidance of, senior infrastructure engineers on complex infrastructure problems, building your expertise across the estate while collaborating with the Head of Global IT and across the Service Delivery and Solution Engineering teams to deliver secure, scalable, and well-governed platforms.

Key Responsibilities

Infrastructure Design, Build & Maintenance

• Support the build and maintenance of core cloud infrastructure across Azure, with a strong emphasis on repeatable, well-documented, Infrastructure-as-Code delivery.
• Contribute to the lifecycle of critical infrastructure components, from architecture through to day-to-day operation and continuous improvement, as part of the infrastructure team.
• Support identity and access management using Entra ID, including RBAC and Conditional Access, under the guidance of senior engineers.
• Support the configuration and maintenance of enterprise networking and firewall infrastructure, including routing, WAN connectivity, and firewall administration, working alongside senior engineers.
• Support Privileged Access Management (PAM) using Delinea, including day-to-day vault administration and access requests, under senior engineer oversight.

Automation & AI-Driven Operations

• Contribute to Infrastructure-as-Code development using Terraform for provisioning and configuration of Azure resources.
• Support Power Platform environments, including day-to-day administration and access requests, under senior engineer guidance.
• Write scripts and tooling in Python and PowerShell to support automation of infrastructure tasks, reporting, and system integrations.
• Support the identification and delivery of opportunities to embed AI and intelligent automation into infrastructure operations, working alongside senior engineers and the Solution Engineering team.
• Support systems integrations that allow infrastructure and operational tooling to interact with AI-driven platforms and agents.

Endpoint & Device Management

• Own day-to-day configuration and administration of Microsoft Intune, including policy design, compliance profiles, app deployment, and patch management.
• Support the configuration and administration of Kandji for macOS device management, covering enrolment, configuration, and compliance.
• Manage endpoint enrolment, patching, and compliance reporting across the device fleet, escalating exceptions to senior engineers where required.

Cloud & SaaS Ecosystem

• Support and help maintain Boku's wider SaaS estate, ensuring infrastructure decisions align with a cloud-first strategy.
• Partner with Security to harden the Microsoft 365 tenant and infrastructure estate against relevant compliance frameworks (ISO 27001, SOC 2, DORA).

Collaboration & Escalation

• Work closely with senior infrastructure engineers on infrastructure design decision