Senior IT Infrastructure Engineer

PayJunction; Santa Barbara (CA); Hybrid; USD 130,000 - 160,000; Full time

Benefits offered by this job

Health, dental, and vision paid 100%

401k with 6% match

FSA and Dependent Care FSA

Job summary

PayJunction is seeking a Senior IT Infrastructure Engineer to bring site reliability engineering to IT, owning the Mac fleet, Ubuntu servers, networks, and AWS accounts a payments company runs on, and building the data platform we owe the business next.

The role will secure and optimize the SaaS stack, expand the AWS environment with Terraform, and lead migrations with a focus on reliability and PCI compliance. Remote/hybrid work within CA is supported, with occasional on-site data center travel.

Qualifications

• 5+ years in infrastructure engineering, systems administration, or site reliability engineering with hands-on ownership of production systems.
• Linux server administration in production, including building, hardening, patching, and troubleshooting on physical hardware and in the cloud (Ubuntu preferred).
• AWS administration in a live environment: IAM, VPC networking, S3, and CloudTrail configured and operated, not a sandbox certification alone.
• Infrastructure as code or configuration management used to manage real systems, with Terraform plus at least one of Ansible, Chef, or Puppet.
• macOS fleet management with Jamf or a comparable MDM, covering enrollment, configuration profiles, and packaging.
• Identity provider administration with Okta or a comparable IdP, including SAML/SCIM app integrations and MFA policy.
• Ability to travel occasionally for on-site data center work in the Los Angeles or Las Vegas area.
• Preferred: located within 250 miles of Los Angeles or Las Vegas; PCI DSS, SOC 2, or similarly audited environment; Fortigate, Meraki, or comparable firewall and switching administration; AWS, Jamf, Terraform, or Security+ certifications.

Responsibilities

• Keep our IT-critical services available and reliable, owning monitoring, incident response, and automation.
• Deploy, harden, and troubleshoot Mac workstations, Ubuntu servers, networking, and cloud resources.
• Secure and integrate the SaaS stack (Okta, Google Workspace, Duo, Jamf, Sophos) and automate configurations.
• Expand our ops AWS environment in Terraform with production-grade documentation and review processes.
• Build and operate data pipelines landing MySQL, Salesforce, and spreadsheets into a warehouse.
• Treat security and PCI compliance as engineering work: patch management, host hardening, vulnerability scanning, log review, audit evidence.
• Lead migrations including Ubuntu upgrades, containers vs VMs, and Puppet to OpenVox.
• Handle overflow help desk tickets in Jira Service Management with thorough documentation.

Skills

Linux admin

AWS administration

Terraform

Ansible / Puppet

Jamf management

Okta IdP

PCI DSS knowledge

SAML/SCIM

Security best practices

Tools

Jamf

Fortigate

Meraki

Puppet/OpenVox

Job description

We read every application. No AI screening. A real person reviews your materials.

Job Summary

PayJunction is seeking a Senior IT Infrastructure Engineer to bring site reliability engineering to the world of IT, owning the Mac fleet, Ubuntu servers, networks, and AWS accounts a payments company runs on, and building the data platform we owe the business next.

Why PayJunction?

PayJunction is relentless and emphatical about helping others. We exist to drive the success of our partners. Specifically, the developers who connect to us, businesses who process payments through us, and all of our team members who work with us at PayJunction.

PayJunction is a company that believes dreams inspire people to start a business, and others to partner with them. While building dreams, entrepreneurs and business professionals will face many challenges along the way. We believe great partners can make all the difference.

We are your dream partner.

Your success is our success.

Our dream is to help you realize yours.

We exist to drive the success of our partners. We do this by fundamentally changing the way you transact with others. We just happen to make great payment systems. If you love helping others succeed, in a culture that celebrates perfecting your craft, consider partnering with us.

Location

PayJunction takes a Flex First approach to work environments. This means that our team members can choose to work from our Santa Barbara office or remotely from home. We ensure that everyone has the resources and equipment to work where they feel most productive. We trust our teams to make the best decision for their work environment. All PayJunction employees must reside in one of the following states: CA, IL, TX, MN, CO, GA, NY, MA, CT.

Mission

Our IT team’s mission is to securely supercharge the productivity of our workforce, so the tools every team member relies on are configured, integrated, and reliable without anyone having to think about them.

Vision

Team members love our secure, best-in‑class, fully configured tools that are seamlessly integrated to supercharge their productivity, and our tech stack is a pleasure to use because we minimize meaningless toil and friction wherever possible.

Job Responsibilities

• Keep our IT-critical services available and boringly reliable, owning monitoring, incident response, and the automation that stops the same page from firing twice.
• Deploy, harden, and troubleshoot the whole estate: Mac workstations through Jamf, Ubuntu servers on Dell hardware and in AWS, Fortigate and Meraki networking, and our physical access systems.
• Secure and integrate the SaaS stack that runs the company, including Okta, Google Workspace, Duo, Jamf, and Sophos, and automate their configuration wherever a human is still clicking.
• Expand our ops AWS environment in Terraform, patterned on production, so what we run is documented, reproducible, and reviewed like code.
• Build and operate the pipelines that land MySQL, Salesforce, and spreadsheet data into a warehouse, standing up the infrastructure a real data platform runs on.
• Treat security and PCI compliance as engineering work: patch management, host hardening, vulnerability scanning, log review, and audit evidence that holds up with an assessor in the room.
• Lead the migrations that decide how much toil this team carries for years, including Ubuntu upgrades, virtual machines to containers, and Puppet to OpenVox.
• Take overflow help desk tickets in Jira Service Management with the same care as a production server, and leave documentation the next engineer can use.

Qualifications

• 5+ years in infrastructure engineering, systems administration, or site reliability engineering, with hands‑on ownership of production systems.
• Linux server administration in production, including building, hardening, patching, and troubleshooting on physical hardware and in the cloud (Ubuntu preferred).
• AWS administration in a live environment: IAM, VPC networking, S3, and CloudTrail configured and operated, not a sandbox certification alone.
• Infrastructure as code or configuration management used to manage real systems, with Terraform plus at least one of Ansible, Chef, or Puppet.
• macOS fleet management with Jamf or a comparable MDM, covering enrollment, configuration profiles, and packaging.
• Identity provider administration with Okta or a comparable IdP, including SAML/SCIM app integrations and MFA policy.
• Ability to travel occasionally for on‑site data center work in the Los Angeles or Las Vegas area.
• Preferred: located within 250 miles of Los Angeles or Las Vegas; experience in a PCI DSS, SOC 2, or similarly audited environment; Fortigate, Meraki, or comparable firewall and switching administration; AWS, Jamf, Terraform, or Security+ certifications.

About PayJunction

Founded in 2000 by three UCSB graduates, PayJunction has grown from a bootstrapped startup to a recognized and respected leader in the payments industry. PayJunction processes more than $12 billion dollars annually for thousands of businesses with solutions that make it easy to accept credit and debit card payments in store, online, and on the go.

Our people‑first culture values long‑term relationships over short‑term profits. Honesty and integrity are part of every interaction with partners, customers and employees. We foster a collaborative work environment, where creative ideas are welcomed, teams are inspired, and success is celebrated. PayJunction is a place where you can find experienced mentors and supportive friends who are committed to your growth.

Total Rewards Plan

• Health, dental, and vision paid 100% by company for you and your dependents
• 401k with 6% match
• FSA and Dependent Care FSA

Office Environment

• The opportunity to choose the work environment that best suits you - remote, in‑office, or hybrid.
• All remote & hybrid team members can enjoy:
  • Company‑provided equipment for your home office
  • An equipment allowance for home office essentials
  • … of Glassdoor's Top 30 Best Places to Work in the US, 2020!, 2020!
• Those who choose to come into the office can look forward to:
  • Bright and open offices in downtown Santa Barbara
  • Stocked snack kitchens
  • Collaborative work spaces with Herman Miller chairs, height‑adjustable desks, and a large 32‑inch monitors
  • Dog‑friendly office

Company Values

• Build the Dream
• Put People First
• Value Long Term Relationships Over Short Term Profit
• Make it Simple
• Be Data Driven
• Own It

The base salary range for this role is $130,000-$160,000 plus our Total Rewards Plan benefit package. Actual base salary offered will vary depending on factors including but not limited to: education, experience, skills and qualifications.

PayJunction is an equal opportunity employer. We strive to create a work environment where people from all backgrounds and identities thrive. We firmly believe that more diversity and inclusion in our workforce creates a stronger team, product, and culture.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire. PayJunction reserves the right to conduct background and/or credit checks on all of its potential employees.