Senior IT Infrastructure Operations

AppsFlyer; United States; On-site; USD 116,000 - 194,000; Full time

Job summary

AppsFlyer is hiring a Senior IT Infrastructure Operations to join the IT Infrastructure team in Herzliya, Israel. This hands-on role designs architecture, ships production-grade automation, and treats documentation as a product so AI agents can run on it.

You will own identity, SaaS, IT cloud environment and endpoint foundations, building a governed platform used by humans and AI agents alike. Strong cloud and automation skills are essential.

Qualifications

• 5+ years hands-on in IT infrastructure, SaaS or platform engineering.
• Deep, production-level command of IdP like Okta and enterprise SaaS admin skills.
• Real cloud engineering with GCP preferred, or AWS/Azure and IaC.
• Strong scripting and integration skills: Python and/or TypeScript; REST APIs.
• Proven experience designing and operating automation at scale.
• Hands-on experience building with LLMs and AI tooling.
• Security-minded by default with documentation discipline.
• Self-directed, fast learner able to own improvements.

Responsibilities

• Own and evolve the identity platform (Okta, API gateway, SCIM, audit).
• Build and operate the IT Infra Platform on GCP and deliver internal products end-to-end.
• Design automation across Make.com, Okta Workflows, webhooks and APIs.
• Develop AI-native IT features and agents, with proper monitoring and runbooks.
• Collaborate on endpoint, network, and security with cross-functional teams.

Skills

IT infrastructure

SysAdmin

InfraDevOps

Platform engineering

Okta administration

GCP / AWS / Azure

Terraform / IaC

CI/CD

Scripting (Python/TypeScript)

API integration

Security mindset

English communication

Tools

Okta (SSO)

Google Workspace

Slack

Zoom

Microsoft 365

GCP

Terraform

GitHub Actions

Make.com

n8n

Workato

Okta Workflows

Job description

AppsFlyer is looking for a Senior IT Infrastructure Operations to join our IT Infrastructure team in Herzliya, Israel. IT at AppsFlyer is not only a support function - it is one of the operating layers that enables the company's AI-native transformation. We are building an autonomous, AI-operated IT department: agents run the routine 24/7, humans stay in the loop, and autonomy is earned through gates.

You will join a small InfraOps team that owns the company's identity, SaaS, IT cloud environment and endpoint foundations - and turns them into a governed platform that both people and AI agents can operate. This is a hands-on role for someone who designs at the architecture level, ships production-grade automation and internal products end-to-end, and treats documentation as part of "done" so that agents can run on it.

What you'll do

Identity & core systems

• Own and evolve our identity platform: Okta (SSO, tier groups, Workflows, SCIM, API Gateway), Just-In-Time access, and the full user and non-human identity lifecycle - service accounts, API keys, break-glass and audit.
• Administer, and harden core SaaS - Google Workspace, Slack, Zoom, Entitle, Microsoft 365 - and the AI platforms the company runs on (Claude, ChatGPT / OpenAI, Gemini, Cursor, etc.).
• Serve as Tier 3 escalation with real diagnostic depth: certificates, auth chains, cross-platform policy conflicts, MDM edge cases.

Platform engineering

• Build and operate the IT Infra Platform on GCP - Cloud Run, VPC Service Controls, Cloud Armor, Terraform, GitHub Actions, secret management - and deliver internal products on it end-to-end: design -> IaC -> CI/CD -> secured deploy -> operate.
• Contribute to the AI Govern layer: usage governance, cost attribution and model access control.

Automation

• Design automation across Make.com, Okta Workflows and deployed code, with APIs, webhooks and MCP as first-class integration surfaces.
• Own the health of what you build - monitoring, alerting, failure runbooks - and drive the backlog toward zero-touch self-service.

AI-native IT & agents

• Build agents that execute real infra tasks with explicit action boundaries and stop/escalation conditions - from Tier-0 self-service to autonomous remediation.
• Apply prompt and context engineering and evaluation to real IT use cases; own skills and plug-ins in the company's AI framework.
• Write resolution notes, ADRs and runbooks so that agents (and teammates) can act on them.

Endpoint, network & security

• Support the endpoint stack (Kandji, Intune, Airlock) and global office network (Meraki, FortiGate, Palo Alto Prisma) alongside the team.
• Partner with Security on vendor and app risk, shadow-AI and SaaS governance, and audit readiness - moving manual approvals to policy-as-code.

What you have

• 5+ years hands-on in IT infrastructure, SysAdmin / InfraDevOps or platform engineering in a SaaS or high-growth tech environment.
• Deep, production-level command of Okta (or equivalent IdP) and enterprise SaaS administration - Google Workspace, Slack, Atlassian, Microsoft 365.
• Real cloud engineering: GCP (preferred) or AWS / Azure, Terraform or other IaC, containers, CI/CD, secrets management.
• Strong scripting and integration skills - Python and/or TypeScript, REST APIs, webhooks, OAuth.
• Proven experience designing and operating automation at scale (Make.com, n8n, Workato, Okta Workflows or similar), including monitoring and ownership of what you build.
• Hands-on experience building with LLMs (Claude and/or OpenAI APIs) and applying prompt and context engineering to real use cases.
• Security-minded by default (least privilege, zero trust, secret hygiene, audit trails), architecture-level thinking, and a habit of documenting so others - and agents - can run what you build.
• Self-directed and fast: you originate improvements rather than execute tickets, and you're comfortable learning a new tool this week and owning it in production the next.
• Strong written and verbal English.

Bonus points

• Building internal tools / full-stack apps (React / Node / Python) with SSO-backed auth.
• Advanced LLM engineering: RAG, agent frameworks, MCP servers, LLM evaluation; AI gateway / LLM cost governance (LiteLLM, Bifrost, Vertex AI, Bedrock).
• MDM at depth (Kandji, Jamf, Intune) and cross-MDM scripting; network fundamentals or global office rollouts.
• Relevant cloud, Terraform or Okta certifications - or the equivalent hands-on experience.

Why this role

You will be one of a handful of engineers turning IT into a platform that agents operate - with a real say in what we build and how, ownership of production systems used by the entire company, and a mandate to build the next generation of autonomous IT. New AI and infrastructure technologies land on our desk constantly; you'll be the one evaluating them, adapting them to how AppsFlyer works, and taking the ones that earn it into production.

As a global company operating from 25 offices across 19 countries, we reflect the human mosaic of the diverse and multicultural world in which we live. We ensure equal opportunities for all of our employees and promote the recruitment of diverse talents to our global teams without consideration of race, gender, culture, or sexual orientation. We value and encourage curiosity, diversity, and innovation from all our employees, customers, and partners.

"As a Customer Obsessed company, we must first be Employee Obsessed. We need to make sure that we provide the team with the tools and resources they need to go All-In." Oren Kaniel, CEO