AppsFlyer

Senior IT Infrastructure Operations

Herzliya · Work style not stated

Apply on the employer’s site ↗See how well you match this job

You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.

About the role

Description from the employer’s posting. Check the employer’s page for the current version.

  • EmployerAppsFlyer
  • LocationHerzliya
  • Work styleWork style not stated
  • Employer posted

AppsFlyer is looking for a Senior IT Infrastructure Operations to join our IT Infrastructure team in Herzliya, Israel. IT at AppsFlyer is not only a support function - it is one of the operating layers that enables the company's AI-native transformation. We are building an autonomous, AI-operated IT department: agents run the routine 24/7, humans stay in the loop, and autonomy is earned through gates.

You will join a small InfraOps team that owns the company's identity, SaaS, IT cloud environment and endpoint foundations - and turns them into a governed platform that both people and AI agents can operate. This is a hands-on role for someone who designs at the architecture level, ships production-grade automation and internal products end-to-end, and treats documentation as part of "done" so that agents can run on it.

What you'll do

Identity & core systems

Show full description
  • Own and evolve our identity platform: Okta (SSO, tier groups, Workflows, SCIM, API Gateway), Just-In-Time access, and the full user and non-human identity lifecycle - service accounts, API keys, break-glass and audit.
  • Administer, and harden core SaaS - Google Workspace, Slack, Zoom, Entitle, Microsoft 365 - and the AI platforms the company runs on (Claude, ChatGPT / OpenAI, Gemini, Cursor, etc.).
  • Serve as Tier 3 escalation with real diagnostic depth: certificates, auth chains, cross-platform policy conflicts, MDM edge cases.

Platform engineering

  • Build and operate the IT Infra Platform on GCP - Cloud Run, VPC Service Controls, Cloud Armor, Terraform, GitHub Actions, secret management - and deliver internal products on it end-to-end: design → IaC → CI/CD → secured deploy → operate.
  • Contribute to the AI Govern layer: usage governance, cost attribution and model access control.

Automation

  • Design automation across Make.com, Okta Workflows and deployed code, with APIs, webhooks and MCP as first-class integration surfaces.
  • Own the health of what you build - monitoring, alerting, failure runbooks - and drive the backlog toward zero-touch self-service.

AI-native IT & agents

  • Build agents that execute real infra tasks with explicit action boundaries and stop/escalation conditions - from Tier-0 self-service to autonomous remediation.
  • Apply prompt and context engineering and evaluation to real IT use cases; own skills and plug-ins in the company's AI framework.
  • Write resolution notes, ADRs and runbooks so that agents (and teammates) can act on them.

Endpoint, network & security

  • Support the endpoint stack (Kandji, Intune, Airlock) and global office network (Meraki, FortiGate, Palo Alto Prisma) alongside the team.
  • Partner with Security on vendor and app risk, shadow-AI and SaaS governance, and audit readiness - moving manual approvals to policy-as-code.

What you have

  • 5+ years hands-on in IT infrastructure, SysAdmin / InfraDevOps or platform engineering in a SaaS or high-growth tech environment.
  • Deep, production-level command of Okta (or equivalent IdP) and enterprise SaaS administration - Google Workspace, Slack, Atlassian, Microsoft 365.
  • Real cloud engineering: GCP (preferred) or AWS / Azure, Terraform or other IaC, containers, CI/CD, secrets management.
  • Strong scripting and integration skills - Python and/or TypeScript, REST APIs, webhooks, OAuth.
  • Proven experience designing and operating automation at scale (Make.com, n8n, Workato, Okta Workflows or similar), including monitoring and ownership of what you build.
  • Hands-on experience building with LLMs (Claude and/or OpenAI APIs) and applying prompt and context engineering to real use cases.
  • Security-minded by default (least privilege, zero trust, secret hygiene, audit trails), architecture-level thinking, and a habit of documenting so others - and agents - can run what you build.
  • Self-directed and fast: you originate improvements rather than execute tickets, and you're comfortable learning a new tool this week and owning it in production the next.
  • Strong written and verbal English.

Bonus points

  • Building internal tools / full-stack apps (React / Node / Python) with SSO-backed auth.
  • Advanced LLM engineering: RAG, agent frameworks, MCP servers, LLM evaluation; AI gateway / LLM cost governance (LiteLLM, Bifrost, Vertex AI, Bedrock).
  • MDM at depth (Kandji, Jamf, Intune) and cross-MDM scripting; network fundamentals or global office rollouts.
  • Relevant cloud, Terraform or Okta certifications - or the equivalent hands-on experience.

Why this role

You will be one of a handful of engineers turning IT into a platform that agents operate - with a real say in what we build and how, ownership of production systems used by the entire company, and a mandate to build the next generation of autonomous IT. New AI and infrastructure technologies land on our desk constantly; you'll be the one evaluating them, adapting them to how AppsFlyer works, and taking the ones that earn it into production.

As a global company operating from 25 offices across 19 countries, we reflect the human mosaic of the diverse and multicultural world in which we live. We ensure equal opportunities for all of our employees and promote the recruitment of diverse talents to our global teams without consideration of race, gender, culture, or sexual orientation. We value and encourage curiosity, diversity, and innovation from all our employees, customers, and partners.

“As a Customer Obsessed company, we must first be Employee Obsessed. We need to make sure that we provide the team with the tools and resources they need to go All-In.” Oren Kaniel, CEO

Staying safe while you apply

  • Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
  • Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
  • Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.

Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.

Preparing for this role with ROLIVA

  • Check the fit.

    Compare the requirements with the experience you have confirmed, including gaps.

  • Prepare honestly.

    Build interview stories and application drafts from your own evidence.

  • Keep track.

    Save the role and record your own application status and follow-ups.

Create a free workspace or log in.

At a glance

  • SenioritySenior
  • Employer posted
  • Added to ROLIVA
  • Last checked

Skills in this posting

Skills ROLIVA found in the employer’s own description above. A mention is not a requirement.

Python AWS GCP Azure Terraform React TypeScript LLM

Explore similar roles

Similar jobs

AppsFlyer

Business Analyst

Herzliya

Work style not stated

AppsFlyer

Support Engineer

San Francisco

Work style not stated