Senior Infrastructure Engineer
About The Position
Harvey is hiring a Senior Infrastructure Engineer to own shared infrastructure, automation, and reliability work across its IT platforms. The role is part of Core IT Engineering & Infrastructure and reports to the Director of IT. Harvey operates a cloud-first environment without its own servers or data centers; its IT infrastructure includes cloud tenants, SaaS configuration, office networks, and supporting automation. The position makes cross-platform infrastructure a dedicated responsibility, with an emphasis on building reusable systems and preventing failures from going unnoticed. The engineer will oversee cloud accounts and tenants used for IT tooling; develop the infrastructure-as-code framework, repositories, CI pipelines, and review processes used by IT platform owners; and manage automation for identity lifecycle, provisioning, onboarding, offboarding, and IT workflows. The role also covers monitoring, alerting, configuration drift detection, SaaS backup and recovery procedures, internal scripts and utilities, repeatable technical standards for new office sites, engineering practices, and certificate, domain, and DNS management. Platform owners retain responsibility for their platform configurations, while Network and AV/Media teams retain ownership of office network and AV execution.
Requirements
- At least 6 years of experience in corporate IT engineering, systems engineering, or SRE.
- At least 2 years owning shared infrastructure or automation for a SaaS-first company.
- Strong infrastructure-as-code experience managing real systems with Terraform or a similar tool, in Git, with pull-request review and CI.
- Scripting experience in Python and at least one of Bash, PowerShell, or Go; able to write maintainable code.
- Hands-on experience with identity and provisioning, including SAML, OIDC, SCIM, and lifecycle automation in Okta or Entra.
- Working knowledge of at least one major cloud platform—AWS, Azure, or GCP—including IAM, accounts, and cost fundamentals.
- Comfort with DNS, TLS, certificate management, and basic enterprise networking.
- Experience building trusted monitoring and alerting, and writing runbooks that others have successfully used.
- Clear written communication and the ability to explain changes, risks, and rollback plans to non-engineers.
Nice To Haves
- Experience with Terraform providers for Okta, Google Workspace, or Jamf, or configuration-as-code tools for Intune.
- Experience with Serval or similar IT automation platforms.
- Experience with SaaS backup and recovery tools for Google Workspace, Slack, or Microsoft 365.
- Experience with multi-site office rollouts across regions, including work with local vendors and ISPs.
- Experience at a fast-growing company where headcount grew faster than the IT team.
Responsibilities
- Own access, guardrails, and cost for IT cloud accounts and tenants, including AWS, Azure, and GCP projects used for IT tooling.
- Partner with Security and Infrastructure on tenant-level changes, including cloud migrations affecting Entra and Microsoft 365.
- Build and operate Git repositories, CI pipelines, and review processes for IT configuration, including Okta, Jamf, Intune, and Google Workspace.
- Own the shared infrastructure-as-code framework used by platform owners, while platform owners retain ownership of their configurations.
- Own automation for identity lifecycle and IT workflows, including SCIM and provisioning flows, onboarding and offboarding orchestration, and Serval workflows.
- Set up health checks and alerting for critical IT systems and integrations, and implement configuration drift detection.
- Manage SaaS backup for Google Workspace, Slack, and Microsoft 365, and develop and test recovery runbooks.
- Move scripts and admin utilities from individual laptops into source control, document them, and maintain them.
- Work with Network and AV/Media teams to define repeatable technical standards for new offices, including configuration, monitoring, and documentation.
- Improve change control, documentation, and runbooks across the infrastructure pillar so primary and backup owners can cover for one another.
- Track and renew certificates used by IT, including Apple Push, SAML signing, SSL, and Wi-Fi/802.1X certificates.
- Work with Network and CorpSec teams to own and manage DNS name-server solutions for IT, and build certificate-expiry monitoring.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
