Senior IT Infrastructure Engineer

Pay Junction; Santa Barbara (CA); Hybrid; USD 130,000 - 160,000; Full time

Benefits offered by this job

Health, dental, and vision paid 100%

401k with 6% match

FSA and Dependent Care FSA

Home office equipment provided

Remote/Office/Hybrid flexibility

Job summary

PayJunction seeks a Senior IT Infrastructure Engineer to bring site reliability practices to IT, owning Mac fleet, Ubuntu servers, networks, and AWS accounts. You will help build the data platform the business relies on and ensure secure, scalable operations across on-site and remote environments.

The role emphasizes production-grade infrastructure, IaC with Terraform, and strong collaboration across security and operations teams. A flexible remote/hybrid setup is supported.

Qualifications

• 5+ years in infrastructure engineering or SRE with hands-on ownership of production systems.
• Linux server administration in production (Ubuntu preferred).
• AWS in live environment: IAM, VPC, S3, CloudTrail.
• Terraform plus at least one CM tool (Ansible, Chef, or Puppet).
• macOS fleet management with Jamf or similar.
• Okta/IdP administration with MFA policy.
• Occasional travel for on-site data center work (LA or LV).
• PCI DSS/SOC2 or similar audited environment experience preferred.

Responsibilities

• Keep IT-critical services available and reliable, owning monitoring and incident response.
• Deploy, harden, and troubleshoot Mac workstations, Ubuntu servers, networking, and security tooling.
• Secure and integrate SaaS stack (Okta, Google Workspace, Duo, Jamf, Sophos) and automate configurations.
• Expand AWS environment in Terraform, with production-like, reproducible pipelines.
• Build and operate data pipelines landing MySQL, Salesforce, and spreadsheets into a warehouse.
• Lead migrations to reduce toil, including OS upgrades and shift from VMs to containers.
• Handle overflow help desk tickets with care and leave usable documentation.

Skills

Linux server administration

AWS administration

Infrastructure as code

macOS fleet management

Identity provider administration

MFA policy

PCI DSS/SOC2 experience

Travel flexibility

Tools

Terraform

Ansible

Puppet

Jamf Pro

Job description

We read every application. No AI screening. A real person reviews your materials.

Job Summary

PayJunction is seeking a Senior IT Infrastructure Engineer to bring site reliability engineering to the world of IT, owning the Mac fleet, Ubuntu servers, networks, and AWS accounts a payments company runs on, and building the data platform we owe the business next.

Why PayJunction?

PayJunction is relentless and emphatical about helping others. We exist to drive the success of our partners. Specifically, the developers who connect to us, businesses who process payments through us, and all of our team members who work with us at PayJunction.

PayJunction is a company that believes dreams inspire people to start a business, and others to partner with them. While building dreams, entrepreneurs and business professionals will face many challenges along the way. We believe great partners can make all the difference.

We are your dream partner.

Your success is our success.

Our dream is to help you realize yours.

We exist to drive the success of our partners. We do this by fundamentally changing the way you transact with others. We just happen to make great payment systems. If you love helping others succeed, in a culture that celebrates perfecting your craft, consider partnering with us.

Location

PayJunction takes a Flex First approach to work environments. This means that our team members can choose to work from our Santa Barbara office or remotely from home. We ensure that everyone has the resources and equipment to work where they feel most productive. We trust our teams to make the best decision for their work environment. All PayJunction employees must reside in one of the following states: CA, IL, TX, MN, CO, GA, NY, MA, CT.

Mission

Our IT team’s mission is to securely supercharge the productivity of our workforce, so the tools every team member relies on are configured, integrated, and reliable without anyone having to think about them.

Vision

Team members love our secure, best-in‑class, fully configured tools that are seamlessly integrated to supercharge their productivity, and our tech stack is a pleasure to use because we minimize meaningless toil and friction wherever possible.

Job Responsibilities

• Keep our IT-critical services available and boringly reliable, owning monitoring, incident response, and the automation that stops the same page from firing twice.
• Deploy, harden, and troubleshoot the whole estate: Mac workstations through Jamf, Ubuntu servers on Dell hardware and in AWS, Fortigate and Meraki networking, and our physical access systems.
• Secure and integrate the SaaS stack that runs the company, including Okta, Google Workspace, Duo, Jamf, and Sophos, and automate their configuration wherever a human is still clicking.
• Expand our ops AWS environment in Terraform, patterned on production, so what we run is documented, reproducible, and reviewed like code.
• Build and operate the pipelines that land MySQL, Salesforce, and spreadsheet data into a warehouse, standing up the infrastructure a real data platform runs on.
• Treat security and PCI compliance as engineering work: patch management, host hardening, vulnerability scanning, log review, and audit evidence that holds up with an assessor in the room.
• Lead the migrations that decide how much toil this team carries for years, including Ubuntu upgrades, virtual machines to containers, and Puppet to OpenVox.
• Take overflow help desk tickets in Jira Service Management with the same care as a production server, and leave documentation the next engineer can use.

Qualifications

• 5+ years in infrastructure engineering, systems administration, or site reliability engineering, with hands‑on ownership of production systems.
• Linux server administration in production, including building, hardening, patching, and troubleshooting on physical hardware and in the cloud (Ubuntu preferred).
• AWS administration in a live environment: IAM, VPC networking, S3, and CloudTrail configured and operated, not a sandbox certification alone.
• Infrastructure as code or configuration management used to manage real systems, with Terraform plus at least one of Ansible, Chef, or Puppet.
• macOS fleet management with Jamf or a comparable MDM, covering enrollment, configuration profiles, and packaging.
• Identity provider administration with Okta or a comparable IdP, including SAML/SCIM app integrations and MFA policy.
• Ability to travel occasionally for on‑site data center work in the Los Angeles or Las Vegas area.
• Preferred: located within 250 miles of Los Angeles or Las Vegas; experience in a PCI DSS, SOC 2, or similarly audited environment; Fortigate, Meraki, or comparable firewall and switching administration; AWS, Jamf, Terraform, or Security+ certifications.

About PayJunction

Founded in 2000 by three UCSB graduates, PayJunction has grown from a bootstrapped startup to a recognized and respected leader in the payments industry. PayJunction processes more than $12 billion dollars annually for thousands of businesses with solutions that make it easy to accept credit and debit card payments in store, online, and on the go.

Our people‑first culture values long‑term relationships over short‑term profits. Honesty and integrity are part of every interaction with partners, customers and employees. We foster a collaborative work environment, where creative ideas are welcomed, teams are inspired, and success is celebrated. PayJunction is a place where you can find experienced mentors and supportive friends who are committed to your growth.

Total Rewards Plan

• Health, dental, and vision paid 100% by company for you and your dependents
• 401k with 6% match
• FSA and Dependent Care FSA

Office Environment

• The opportunity to choose the work environment that best suits you - remote, in‑office, or hybrid.
• All remote & hybrid team members can enjoy:
  • Company‑provided equipment for your home office
  • An equipment allowance for home office essentials
  • … of Glassdoor's Top 30 Best Places to Work in the US, 2020!, 2020!
• Those who choose to come into the office can look forward to:
  • Bright and open offices in downtown Santa Barbara
  • Stocked snack kitchens
  • Collaborative work spaces with Herman Miller chairs, height‑adjustable desks, and a large 32‑inch monitors
  • Dog‑friendly office

Company Values

• Build the Dream
• Put People First
• Value Long Term Relationships Over Short Term Profit
• Make it Simple
• Be Data Driven
• Own It

The base salary range for this role is $130,000-$160,000 plus our Total Rewards Plan benefit package. Actual base salary offered will vary depending on factors including but not limited to: education, experience, skills and qualifications.

PayJunction is an equal opportunity employer. We strive to create a work environment where people from all backgrounds and identities thrive. We firmly believe that more diversity and inclusion in our workforce creates a stronger team, product, and culture.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire. PayJunction reserves the right to conduct background and/or credit checks on all of its potential employees.