the company is looking for a senior it infrastructure operations to join our it infrastructure team in herzliya, israel. it at the company is not only a support function – it is one of the operating layers that enables the company's ai-native transformation. we are building an autonomous, ai-operated it department: agents run the routine 24/7, humans stay in the loop, and autonomy is earned through gates.
you will join a small infraops team that owns the company's identity, saas, it cloud environment and endpoint foundations – and turns them into a governed platform that both people and ai agents can operate. this is a hands-on role for someone who designs at the architecture level, ships production-grade automation and internal products end-to-end, and treats documentation as part of "done" so that agents can run on it.
what you'll do
identity & core systems
own and evolve our identity platform: okta (sso, tier groups, workflows, scim, api gateway), just-in-time access, and the full user and non-human identity lifecycle – service accounts, api keys, break-glass and audit.
administer, and harden core saas – google workspace, slack, zoom, entitle, microsoft 365 – and the ai platforms the company runs on (claude, chatgpt / openai, gemini, cursor, etc.).
serve as tier 3 escalation with real diagnostic depth: certificates, auth chains, cross-platform policy conflicts, mdm edge cases.
platform engineering
build and operate the it infra platform on gcp – cloud run, vpc service controls, cloud armor, terraform, github actions, secret management – and deliver internal products on it end-to-end: design iac ci/cd secured deploy operate.
contribute to the ai govern layer: usage governance, cost attribution and model access control.
automation
design automation across make.com, okta workflows and deployed code, with apis, webhooks and mcp as first-class integration surfaces.
own the health of what you build – monitoring, alerting, failure runbooks – and drive the backlog toward zero-touch self-service.
ai-native it & agents
build agents that execute real infra tasks with explicit action boundaries and stop/escalation conditions – from tier-0 self-service to autonomous remediation.
apply prompt and context engineering and evaluation to real it use cases; own skills and plug-ins in the company's ai framework.
write resolution notes, adrs and runbooks so that agents (and teammates) can act on them.
endpoint, network & security
support the endpoint stack (kandji, intune, airlock) and global office network (meraki, fortigate, palo alto prisma) alongside the team.
partner with security on vendor and app risk, shadow-ai and saas governance, and audit readiness – moving manual approvals to policy-as-code.
you will join a small infraops team that owns the company's identity, saas, it cloud environment and endpoint foundations – and turns them into a governed platform that both people and ai agents can operate. this is a hands-on role for someone who designs at the architecture level, ships production-grade automation and internal products end-to-end, and treats documentation as part of "done" so that agents can run on it.
what you'll do
identity & core systems
own and evolve our identity platform: okta (sso, tier groups, workflows, scim, api gateway), just-in-time access, and the full user and non-human identity lifecycle – service accounts, api keys, break-glass and audit.
administer, and harden core saas – google workspace, slack, zoom, entitle, microsoft 365 – and the ai platforms the company runs on (claude, chatgpt / openai, gemini, cursor, etc.).
serve as tier 3 escalation with real diagnostic depth: certificates, auth chains, cross-platform policy conflicts, mdm edge cases.
platform engineering
build and operate the it infra platform on gcp – cloud run, vpc service controls, cloud armor, terraform, github actions, secret management – and deliver internal products on it end-to-end: design iac ci/cd secured deploy operate.
contribute to the ai govern layer: usage governance, cost attribution and model access control.
automation
design automation across make.com, okta workflows and deployed code, with apis, webhooks and mcp as first-class integration surfaces.
own the health of what you build – monitoring, alerting, failure runbooks – and drive the backlog toward zero-touch self-service.
ai-native it & agents
build agents that execute real infra tasks with explicit action boundaries and stop/escalation conditions – from tier-0 self-service to autonomous remediation.
apply prompt and context engineering and evaluation to real it use cases; own skills and plug-ins in the company's ai framework.
write resolution notes, adrs and runbooks so that agents (and teammates) can act on them.
endpoint, network & security
support the endpoint stack (kandji, intune, airlock) and global office network (meraki, fortigate, palo alto prisma) alongside the team.
partner with security on vendor and app risk, shadow-ai and saas governance, and audit readiness – moving manual approvals to policy-as-code.
דרישות:
what you have
5+ years hands-on in it infrastructure, sysadmin / infradevops or platform engineering in a saas or high-growth tech environment.
deep, production-level command of okta (or equivalent idp) and enterprise saas administration – google workspace, slack, atlassian, microsoft 365.
real cloud engineering: gcp (preferred) or aws / azure, terraform or other iac, containers, ci/cd, secrets management.
strong scripting and integration skills – Python and/or typescript, rest apis, webhooks, oauth.
proven experience designing and operating automation at scale (make.com, n8n, workato, okta workflows or similar), including monitoring and ownership of what you build.
hands-on experience building with llms (claude and/or openai apis) and applying prompt and context engineering to real use cases.
security-minded by default (least privilege, zero trust, secret hygiene, audit trails), architecture-level thinking, and a habit of documenting so others – and agents – can run what you build.
self-directed and fast: you originate improvements rather than execute tickets, and you're comfortable learning a new tool this week and owning it in production the next.
strong written and verbal english.
bo המשרה מיועדת לנשים ולגברים כאחד.
what you have
5+ years hands-on in it infrastructure, sysadmin / infradevops or platform engineering in a saas or high-growth tech environment.
deep, production-level command of okta (or equivalent idp) and enterprise saas administration – google workspace, slack, atlassian, microsoft 365.
real cloud engineering: gcp (preferred) or aws / azure, terraform or other iac, containers, ci/cd, secrets management.
strong scripting and integration skills – Python and/or typescript, rest apis, webhooks, oauth.
proven experience designing and operating automation at scale (make.com, n8n, workato, okta workflows or similar), including monitoring and ownership of what you build.
hands-on experience building with llms (claude and/or openai apis) and applying prompt and context engineering to real use cases.
security-minded by default (least privilege, zero trust, secret hygiene, audit trails), architecture-level thinking, and a habit of documenting so others – and agents – can run what you build.
self-directed and fast: you originate improvements rather than execute tickets, and you're comfortable learning a new tool this week and owning it in production the next.
strong written and verbal english.
bo המשרה מיועדת לנשים ולגברים כאחד.
