Senior IT Infrastructure Engineer

PayJunction•Santa Barbara, CA

4d•Hybrid

About The Position

PayJunction is seeking a Senior IT Infrastructure Engineer to bring site reliability engineering to the world of IT, owning the Mac fleet, Ubuntu servers, networks, and AWS accounts a payments company runs on, and building the data platform we owe the business next. PayJunction is relentless and emphatical about helping others. We exist to drive the success of our partners. Specifically, the developers who connect to us, businesses who process payments through us, and all of our team members who work with us at PayJunction. We believe dreams inspire people to start a business, and others to partner with them. While building dreams, entrepreneurs and business professionals will face many challenges along the way. We believe great partners can make all the difference. We are your dream partner. Your success is our success. Our dream is to help you realize yours. We exist to drive the success of our partners. We do this by fundamentally changing the way you transact with others. We just happen to make great payment systems. If you love helping others succeed, in a culture that celebrates perfecting your craft, consider partnering with us.

Requirements

5+ years in infrastructure engineering, systems administration, or site reliability engineering, with hands-on ownership of production systems.
Linux server administration in production, including building, hardening, patching, and troubleshooting on physical hardware and in the cloud (Ubuntu preferred).
AWS administration in a live environment: IAM, VPC networking, S3, and CloudTrail configured and operated, not a sandbox certification alone.
Infrastructure as code or configuration management used to manage real systems, with Terraform plus at least one of Ansible, Chef, or Puppet.
macOS fleet management with Jamf or a comparable MDM, covering enrollment, configuration profiles, and packaging.
Identity provider administration with Okta or a comparable IdP, including SAML/SCIM app integrations and MFA policy.
Ability to travel occasionally for on-site data center work in the Los Angeles or Las Vegas area.

Nice To Haves

Located within 250 miles of Los Angeles or Las Vegas
Experience in a PCI DSS, SOC 2, or similarly audited environment
Fortigate, Meraki, or comparable firewall and switching administration
AWS, Jamf, Terraform, or Security+ certifications

Responsibilities

Keep our IT-critical services available and boringly reliable, owning monitoring, incident response, and the automation that stops the same page from firing twice.
Deploy, harden, and troubleshoot the whole estate: Mac workstations through Jamf, Ubuntu servers on Dell hardware and in AWS, Fortigate and Meraki networking, and our physical access systems.
Secure and integrate the SaaS stack that runs the company, including Okta, Google Workspace, Duo, Jamf, and Sophos, and automate their configuration wherever a human is still clicking.
Expand our ops AWS environment in Terraform, patterned on production, so what we run is documented, reproducible, and reviewed like code.
Build and operate the pipelines that land MySQL, Salesforce, and spreadsheet data into a warehouse, standing up the infrastructure a real data platform runs on.
Treat security and PCI compliance as engineering work: patch management, host hardening, vulnerability scanning, log review, and audit evidence that holds up with an assessor in the room.
Lead the migrations that decide how much toil this team carries for years, including Ubuntu upgrades, virtual machines to containers, and Puppet to OpenVox.
Take overflow help desk tickets in Jira Service Management with the same care as a production server, and leave documentation the next engineer can use.