At a glance
- Experience
- 5+ years experience
- Location
- Herzliya
About the role
- AppsFlyer is looking for a Senior IT Infrastructure Operations to join our IT Infrastructure team in Herzliya, Israel.
- This is a hands-on role for someone who designs at the architecture level, ships production-grade automation and internal products end-to-end, and treats documentation as part of 'done' so that agents can run on it.
Responsibilities
- Own and evolve our identity platform: Okta (SSO, tier groups, Workflows, SCIM, API Gateway), Just-In-Time access, and the full user and non-human identity lifecycle.
- Administer, and harden core SaaS - Google Workspace, Slack, Zoom, Entitle, Microsoft 365 - and the AI platforms the company runs on.
- Serve as Tier 3 escalation with real diagnostic depth: certificates, auth chains, cross-platform policy conflicts, MDM edge cases.
- Build and operate the IT Infra Platform on GCP - Cloud Run, VPC Service Controls, Cloud Armor, Terraform, GitHub Actions, secret management - and deliver internal products on it end-to-end.
- Contribute to the AI Govern layer: usage governance, cost attribution and model access control.
- Design automation across Make.com, Okta Workflows and deployed code, with APIs, webhooks and MCP as first-class integration surfaces.
- Own the health of what you build - monitoring, alerting, failure runbooks - and drive the backlog toward zero-touch self-service.
- Build agents that execute real infra tasks with explicit action boundaries and stop/escalation conditions - from Tier-0 self-service to autonomous remediation.
- Apply prompt and context engineering and evaluation to real IT use cases; own skills and plug-ins in the company's AI framework.
- Partner with Security on vendor and app risk, shadow-AI and SaaS governance, and audit readiness - moving manual approvals to policy-as-code.
Requirements
- 5+ years hands-on in IT infrastructure, SysAdmin / InfraDevOps or platform engineering in a SaaS or high-growth tech environment.
- Deep, production-level command of Okta (or equivalent IdP) and enterprise SaaS administration - Google Workspace, Slack, Atlassian, Microsoft 365.
- Real cloud engineering: GCP (preferred) or AWS / Azure, Terraform or other IaC, containers, CI/CD, secrets management.
- Strong scripting and integration skills - Python and/or TypeScript, REST APIs, webhooks, OAuth.
- Proven experience designing and operating automation at scale (Make.com, n8n, Workato, Okta Workflows or similar), including monitoring and ownership of what you build.
- Hands-on experience building with LLMs (Claude and/or OpenAI APIs) and applying prompt and context engineering to real use cases.
- Security-minded by default (least privilege, zero trust, secret hygiene, audit trails), architecture-level thinking, and a habit of documenting so others - and agents - can run what you build.
- Self-directed and fast: you originate improvements rather than execute tickets, and you're comfortable learning a new tool this week and owning it in production the next.
- Strong written and verbal English.
Preferred qualifications
- Building internal tools / full-stack apps (React / Node / Python) with SSO-backed auth.
- Advanced LLM engineering: RAG, agent frameworks, MCP servers, LLM evaluation; AI gateway / LLM cost governance (LiteLLM, Bifrost, Vertex AI, Bedrock).
- MDM at depth (Kandji, Jamf, Intune) and cross-MDM scripting; network fundamentals or global office rollouts.
- Relevant cloud, Terraform or Okta certifications - or the equivalent hands-on experience.
Skills
- Okta
- Google Workspace
- Slack
- Zoom
- Microsoft 365
- GCP
- AWS
- Azure
- Terraform
- GitHub Actions
- Python
- TypeScript
Show all 14 skills
- Make.com
- Okta Workflows
