Описание

AppsFlyer is looking for a Senior IT Infrastructure Operations to join their IT Infrastructure team in Herzliya, Israel. IT at AppsFlyer is considered the backbone of the company's transformation into an AI-native organization, building an autonomous, AI-operated IT department.

Responsibilities

Own and evolve identity platform: Okta (SSO integrations, tier groups, Okta Workflows, SCIM, API Gateway), Just-In-Time access, and full user and non-human identity lifecycle service accounts, API keys, break-glass, and audit
Administer and hard-core SaaS: Google Workspace, Slack, Zoom, Atlassian, Microsoft 365, and AI platforms (Claude, ChatGPT / OpenAI, Cursor, etc.)
Serve as Tier 3 escalation with real diagnostic depth: certificates, auth chains, cross-platform policy conflicts, SaaS configurations, MDM edge cases
Build and operate the IT Infra Platform on GCP: Cloud Run, VPC Service Controls, Cloud Armor, Terraform / IaC, GitHub Actions CI/CD, secret management, and image and dependency hygiene
Deliver internal products end-to-end: design → implement → IaC → CI/CD → secured deploy → operate
Contribute to the shared "paved road" for the team and agent fleet
Contribute to the AI Gateway layer, including usage governance, cost attribution, and model access control
Design automation across Make.com, Okta Workflows, and code via deployed services, with APIs, webhooks, and MCP as first-class integration surfaces
Own the health of production automations: monitoring, alerting, failure runbooks, and clear ownership
Drive the IT automation backlog toward zero-touch self-service implementation
Build agentic solutions for IT operations: agents that execute real infra tasks with explicit action boundaries and stop/escalation conditions
Apply AI technology, prompt and context engineering, and evaluation to real-world IT use cases: from Tier-0 self-service through autonomous remediation
Contribute to the organization's evolving AI framework with skill and plugin ownership
Contribute to the Infra Knowledge Framework: resolution notes, ADRs, operational procedures, and project knowledge pages written for agents and teammates
Maintain global network and office infrastructure (Meraki, FortiGate, Palo Alto Prisma / GlobalProtect, physical access) alongside the endpoint management stack (Kandji, Intune, Airlock)
Collaborate with Security on app and vendor risk assessments, shadow-AI and SaaS governance, IS-CAB/AI-CAB reviews, and audit preparedness
Transition manual approvals to policy-as-code

Requirements

5+ years hands-on in IT infrastructure, SysAdmin / InfraDevOps in a SaaS or high-growth tech environment
Deep, production-level command of Okta (or equivalent IdP) and of enterprise SaaS administration: Google Workspace, Slack, Atlassian, Microsoft 365
Real cloud engineering experience: GCP (preferred) or AWS / Azure, Terraform or other IaC, containers, CI/CD, secrets management
Strong scripting and integration skills: Python and/or TypeScript / JavaScript, REST APIs, webhooks, JSON, OAuth
Proven experience designing and operating automation at scale (Make.com, n8n, Workato, Okta Workflows or similar): including monitoring and ownership of what you build
Hands-on experience building with LLMs (Claude and/or OpenAI APIs) and applying prompt and context engineering to real use cases
Security-minded by default: least privilege, zero trust, secret hygiene, audit trails
Architecture-level thinking with an end-to-end ownership mindset
Habit of documenting so others and agents can run what you build
Self-directed: originates improvements, not just executes tickets
Thrives in a fast-moving environment where frontier technologies are evaluated, adapted, and put into production constantly
Comfortable learning a new tool this week and owning it in production the next
Strong communication in English (written and verbal)

Nice to have

Experience building internal tools / full-stack apps (React / Node / Python) with SSO-backed auth
Advanced LLM engineering: RAG and vector stores, knowledge graphs, agent frameworks and agentic loops, building MCP servers, and LLM evaluation
AI gateway / LLM cost governance (LiteLLM, Bifrost, Vertex AI, AWS Bedrock)
Relevant certifications, or equivalent hands-on experience, such as Google Cloud (Associate Cloud Engineer, or Professional Cloud Architect / DevOps Engineer / Security Engineer), AWS (Solutions Architect (Associate or Professional), SysOps Administrator, or DevOps Engineer – Professional), Microsoft Azure Administrator (AZ-104), HashiCorp Terraform Associate, or Okta Certified Administrator / Professional
MDM at depth (Kandji, Jamf, Intune) and cross-MDM scripting
Network fundamentals (Meraki, FortiGate, Palo Alto or similar systems), physical access systems, or global office rollouts
ITSM / ITIL practice and knowledge-management experience
FinOps for SaaS and AI spend

We offer

Opportunity to be one of a handful of engineers turning IT into a platform that agents operate
Direct line to the Head of Global IT
Real ownership of production systems used by the entire company
Mandate to build the next generation of autonomous IT
Work at the frontier: evaluating, adapting, and taking new AI and infrastructure technologies into production

Tools & technologies you'll work with

Identity & Access: Okta (Workflows, SCIM, API Gateway), JIT systems, Cerby, Infinipoint, non-human identity & secrets lifecycle
Core SaaS: Google Workspace, Slack, Zoom, Jira / JSM / Harmony / Confluence, Microsoft 365, Torii
Cloud & Platform: GCP (Cloud Run, Cloud Compute, VPC-SC, Cloud Armor), Terraform, GitHub Actions, Docker, Secret Management; Azure, AWS, Cert Management
Automation & Integration: Make.com, Okta Workflows, REST / Webhooks / JSON, MCP, Python, TypeScript
AI Platform: Claude (API, Claude Code, Cowork, plug-ins & skills), OpenAI / ChatGPT, Cursor, Vertex AI, LiteLLM, RAG & vector stores, agent frameworks, evaluation of new tools
Endpoint & Network: Kandji, Intune, Airlock, Meraki, FortiGate, Palo Alto Strata, and physical access systems
Observability & Ops: PagerDuty, Infrastructure Guard monitoring