<p>AppsFlyer is looking for a Senior IT Infrastructure Operations to join our IT Infrastructure team in Herzliya, Israel. IT at AppsFlyer is not only a support function - it is one of the operating layers that enables the company's AI-native transformation. We are building an autonomous, AI-operated IT department: agents run the routine 24/7, humans stay in the loop, and autonomy is earned through gates.</p> <p>You will join a small InfraOps team that owns the company's identity, SaaS, IT cloud environment and endpoint foundations - and turns them into a governed platform that both people and AI agents can operate. This is a hands-on role for someone who designs at the architecture level, ships production-grade automation and internal products end-to-end, and treats documentation as part of "done" so that agents can run on it.</p> <h2><strong>What you'll do</strong></h2> <p><strong>Identity & core systems</strong></p> <ul> <li>Own and evolve our identity platform: Okta (SSO, tier groups, Workflows, SCIM, API Gateway), Just-In-Time access, and the full user and non-human identity lifecycle - service accounts, API keys, break-glass and audit.</li> <li>Administer, and harden core SaaS - Google Workspace, Slack, Zoom, Entitle, Microsoft 365 - and the AI platforms the company runs on (Claude, ChatGPT / OpenAI, Gemini, Cursor, etc.).</li> <li>Serve as Tier 3 escalation with real diagnostic depth: certificates, auth chains, cross-platform policy conflicts, MDM edge cases.</li> </ul> <p><strong>Platform engineering</strong></p> <ul> <li>Build and operate the IT Infra Platform on GCP - Cloud Run, VPC Service Controls, Cloud Armor, Terraform, GitHub Actions, secret management - and deliver internal products on it end-to-end: design → IaC → CI/CD → secured deploy → operate.</li> <li>Contribute to the AI Govern layer: usage governance, cost attribution and model access control.</li> </ul> <p><strong>Automation</strong></p> <ul> <li>Design automation across Make.com, Okta Workflows and deployed code, with APIs, webhooks and MCP as first-class integration surfaces.</li> <li>Own the health of what you build - monitoring, alerting, failure runbooks - and drive the backlog toward zero-touch self-service.</li> </ul> <p><strong>AI-native IT & agents</strong></p> <ul> <li>Build agents that execute real infra tasks with explicit action boundaries and stop/escalation conditions - from Tier-0 self-service to autonomous remediation.</li> <li>Apply prompt and context engineering and evaluation to real IT use cases; own skills and plug-ins in the company's AI framework.</li> <li>Write resolution notes, ADRs and runbooks so that agents (and teammates) can act on them.</li> </ul> <p><strong>Endpoint, network & security</strong></p> <ul> <li>Support the endpoint stack (Kandji, Intune, Airlock) and global office network (Meraki, FortiGate, Palo Alto Prisma) alongside the team.</li> <li>Partner with Security on vendor and app risk, shadow-AI and SaaS governance, and audit readiness - moving manual approvals to policy-as-code.</li> </ul> <h2><strong>What you have</strong></h2> <ul> <li>5+ years hands-on in IT infrastructure, SysAdmin / InfraDevOps or platform engineering in a SaaS or high-growth tech environment.</li> <li>Deep, production-level command of Okta (or equivalent IdP) and enterprise SaaS administration - Google Workspace, Slack, Atlassian, Microsoft 365.</li> <li>Real cloud engineering: GCP (preferred) or AWS / Azure, Terraform or other IaC, containers, CI/CD, secrets management.</li> <li>Strong scripting and integration skills - Python and/or TypeScript, REST APIs, webhooks, OAuth.</li> <li>Proven experience designing and operating automation at scale (Make.com, n8n, Workato, Okta Workflows or similar), including monitoring and ownership of what you build.</li> <li>Hands-on experience building with LLMs (Claude and/or OpenAI APIs) and applying prompt and context engineering to real use cases.</li> <li>Security-minded by default (least privilege, zero trust, secret hygiene, audit trails), architecture-level thinking, and a habit of documenting so others - and agents - can run what you build.</li> <li>Self-directed and fast: you originate improvements rather than execute tickets, and you're comfortable learning a new tool this week and owning it in production the next.</li> <li>Strong written and verbal English.</li> </ul> <p><strong>Bonus points</strong></p> <ul> <li>Building internal tools / full-stack apps (React / Node / Python) with SSO-backed auth.</li> <li>Advanced LLM engineering: RAG, agent frameworks, MCP servers, LLM evaluation; AI gateway / LLM cost governance (LiteLLM, Bifrost, Vertex AI, Bedrock).</li> <li>MDM at depth (Kandji, Jamf, Intune) and cross-MDM scripting; network fundamentals or global office rollouts.</li> <li>Relevant cloud, Terraform or Okta certifications - or the equivalent hands-on experience.</li> </ul> <h2><strong>Why this role</strong></h2> <p>You will be one of a handful of engineers turning IT into a platform that agents operate - with a real say in what we build and how, ownership of production systems used by the entire company, and a mandate to build the next generation of autonomous IT. New AI and infrastructure technologies land on our desk constantly; you'll be the one evaluating them, adapting them to how AppsFlyer works, and taking the