Senior Infrastructure Engineer

Harvey

8d•$153,000 - $210,500

About The Position

Harvey is hiring a Senior Infrastructure Engineer to own shared infrastructure, automation, and reliability across its IT platforms. The role is part of Core IT Engineering & Infrastructure and reports to the Director of IT. Harvey is cloud-first, with IT infrastructure comprising cloud tenants, SaaS configuration, office networks, and the automation connecting them. This position makes cross-platform infrastructure work a dedicated responsibility, building reusable systems and preventing failures from going unnoticed. The engineer will own IT cloud accounts and tenant-level guardrails, infrastructure-as-code frameworks and pipelines, identity lifecycle and IT workflow automation, monitoring, backups and recovery, internal scripts and tools, and standards for new office sites. The role also establishes engineering practices for change control, documentation, and runbooks, and manages IT-related certificates, domains, and DNS in coordination with Network and Corporate Security teams. Platform owners retain ownership of their platform configurations; this role owns the shared framework and cross-cutting capabilities.

Requirements

At least 6 years of experience in corporate IT engineering, systems engineering, or SRE.
At least 2 years owning shared infrastructure or automation for a SaaS-first company.
Strong infrastructure-as-code experience, including managing real systems with Terraform or a similar tool in Git, with pull-request review and CI.
Solid Python scripting skills plus experience with at least one of Bash, PowerShell, or Go; able to write maintainable code.
Hands-on experience with identity and provisioning, including SAML, OIDC, SCIM, and lifecycle automation in Okta or Entra.
Working knowledge of at least one major cloud platform—AWS, Azure, or GCP—including IAM, accounts, and cost basics.
Comfort with DNS, TLS, certificate management, and basic enterprise networking.
Experience building trusted monitoring and alerting, and writing runbooks successfully used by others.
Clear written communication and ability to explain changes, risks, and rollback plans to non-engineers.

Nice To Haves

Experience with Terraform providers for Okta, Google Workspace, or Jamf, or configuration-as-code tools for Intune.
Experience with Serval or similar IT automation platforms.
Experience with SaaS backup and recovery tools for Google Workspace, Slack, or Microsoft 365.
Experience with multi-site office rollouts across regions, including work with local vendors and ISPs.
Experience at a fast-growing company where headcount grew faster than the IT team.

Responsibilities

Own access, guardrails, and cost for cloud accounts used by IT, including AWS, Azure, and GCP projects for IT tooling.
Partner with Security and Infrastructure on tenant-level changes, including cloud migrations affecting Entra and Microsoft 365.
Build and operate Git repositories, CI pipelines, and review processes for IT configuration across Okta, Jamf, Intune, and Google Workspace.
Own automation for identity lifecycle and IT workflows, including SCIM and provisioning flows, onboarding and offboarding orchestration, and workflows in Serval.
Set up health checks and alerting for critical IT systems and integrations, detect configuration drift, implement SaaS backups, and maintain tested recovery runbooks.
Bring scripts and administrative utilities into source control, document them, and maintain them.
Work with Network and AV/Media teams to define a repeatable technical template for new office sites, including configuration, monitoring, and documentation.
Improve change control, documentation, and runbooks across the team so primary and backup owners can cover for one another.
Track and renew IT certificates, including Apple Push, SAML signing, SSL, and Wi-Fi/802.1X certificates.
Work with Network and Corporate Security teams to own and manage DNS name-server solutions for IT, and build certificate-expiry monitoring.