Senior IT Infrastructure Operations

AppsFlyer is looking for a Senior IT Infrastructure Operations to join our IT Infrastructure team in Herzliya, Israel. IT at AppsFlyer is not only a support function - it is one of the operating layers that enables the company's AI-native transformation. We are building an autonomous, AI-operated IT department: agents run the routine 24/7, humans stay in the loop, and autonomy is earned through gates.

You will join a small InfraOps team that owns the company's identity, SaaS, IT cloud environment and endpoint foundations - and turns them into a governed platform that both people and AI agents can operate. This is a hands-on role for someone who designs at the architecture level, ships production-grade automation and internal products end-to-end, and treats documentation as part of "done" so that agents can run on it.

What you'll do

Identity & core systems

• Own and evolve our identity platform: Okta (SSO, tier groups, Workflows, SCIM, API Gateway), Just-In-Time access, and the full user and non-human identity lifecycle - service accounts, API keys, break-glass and audit.
• Administer, and harden core SaaS - Google Workspace, Slack, Zoom, Entitle, Microsoft 365 - and the AI platforms the company runs on (Claude, ChatGPT / OpenAI, Gemini, Cursor, etc.).
• Serve as Tier 3 escalation with real diagnostic depth: certificates, auth chains, cross-platform policy conflicts, MDM edge cases.

Platform engineering

• Build and operate the IT Infra Platform on GCP - Cloud Run, VPC Service Controls, Cloud Armor, Terraform, GitHub Actions, secret management - and deliver internal products on it end-to-end: design → IaC → CI/CD → secured deploy → operate.
• Contribute to the AI Govern layer: usage governance, cost attribution and model access control.

Automation

• Design automation across Make.com, Okta Workflows and deployed code, with APIs, webhooks and MCP as first-class integration surfaces.
• Own the health of what you build - monitoring, alerting, failure runbooks - and drive the backlog toward zero-touch self-service.

AI-native IT & agents

• Build agents that execute real infra tasks with explicit action boundaries and stop/escalation conditions - from Tier-0 self-service to autonomous remediation.
• Apply prompt and context engineering and evaluation to real IT use cases; own skills and plug-ins in the company's AI framework.
• Write resolution notes, ADRs and runbooks so that agents (and teammates) can act on them.

Endpoint, network & security

• Support the endpoint stack (Kandji, Intune, Airlock) and global office network (Meraki, FortiGate, Palo Alto Prisma) alongside the team.
• Partner with Security on vendor and app risk, shadow-AI and SaaS governance, and audit readiness - moving manual approvals to policy-as-code.

What you have

• 5+ years hands-on in IT infrastructure, SysAdmin / InfraDevOps or platform engineering in a SaaS or high-growth tech environment.
• Deep, production-level command of Okta (or equivalent IdP) and enterprise SaaS administration - Google Workspace, Slack, Atlassian, Microsoft 365.
• Real cloud engineering: GCP (preferred) or AWS / Azure, Terraform or other IaC, containers, CI/CD, secrets management.
• Strong scripting and integration skills - Python and/or TypeScript, REST APIs, webhooks, OAuth.
• Proven experience designing and operating automation at scale (Make.com, n8n, Workato, Okta Workflows or similar), including monitoring and ownership of what you build.
• Hands-on experience building with LLMs (Claude and/or OpenAI APIs) and applying prompt and context engineering to real use cases.
• Security-minded by default (least privilege, zero trust, secret hygiene, audit trails), architecture-level thinking, and a habit of documenting so others - and agents - can run what you build.
• Self-directed and fast: you originate improvements rather than execute tickets, and you're comfortable learning a new tool this week and owning it in production the next.
• Strong written and verbal English.

Bonus points

• Building internal tools / full-stack apps (React / Node / Python) with SSO-backed auth.
• Advanced LLM engineering: RAG, agent frameworks, MCP servers, LLM evaluation; AI gateway / LLM cost governance (LiteLLM, Bifrost, Vertex AI, Bedrock).
• MDM at depth (Kandji, Jamf, Intune) and cross-MDM scripting; network fundamentals or global office rollouts.
• Relevant cloud, Terraform or Okta certifications - or the equivalent hands-on experience.

Why this role

You will be one of a handful of engineers turning IT into a platform that agents operate - with a real say in what we build and how, ownership of production systems used by the entire company, and a mandate to build the next generation of autonomous IT. New AI and infrastructure technologies land on our desk constantly; you'll be the one evaluating them, adapting them to how AppsFlyer works, and taking the ones that earn it into production.

As a global company operating from 25 offices across 19 countries, we reflect the human mosaic of the diverse and multicultural world in which we live. We ensure equal opportunities for all of our employees and promote the recruitment of diverse talents to our global teams without consideration of race, gender, culture, or sexual orientation. We value and encourage curiosity, diversity, and innovation from all our employees, customers, and partners.

“As a Customer Obsessed company, we must first be Employee Obsessed. We need to make sure that we provide the team with the tools and resources they need to go All-In.”  Oren Kaniel, CEO