{"id":3463366,"url":"https://alion.io/job/zipline-sr-it-infrastructure-engineer","title":"Sr. IT Infrastructure Engineer","company":{"id":15878,"name":"Zipline","domain":"zipline.com","url":"https://alion.io/company/zipline","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":88,"open_postings":15,"ghost_share":0,"stale_share":0.467,"repost_share":0,"time_to_fill_p50_days":58,"computed_at":"2026-11-02T06:13:15Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["South San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":129000,"max_usd":246000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1808},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"AWS","optional":false},{"name":"GCP","optional":false},{"name":"Google Workspace","optional":false},{"name":"Okta","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Slack","optional":false},{"name":"CI/CD","optional":true},{"name":"Git","optional":true},{"name":"Terraform","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-08-11T16:07:52Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-11-02T15:16:11Z","board_verified":true,"closed_at":null,"days_open":83,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":83},"description":"About Zipline\nZipline is the world’s largest and most experienced drone delivery service. We are on a mission to serve all humans equally by ensuring access to food, medicine and essential goods anytime, anywhere. We design, build, and operate the world’s largest autonomous logistics system, delivering critical supplies quickly and reliably. Today, Zipline operates on four continents, makes a delivery somewhere in the world every 30 seconds, and has completed millions of deliveries to date, including blood, vaccines, medical supplies, food, and retail products. \nOur customers include the world’s largest and most prominent healthcare systems, governments, retailers, restaurants and global businesses who rely on us to save lives, reduce emissions, increase economic opportunity, and provide delivery from point A to point B as fast as possible. The drone is only 15% of what we’ve built to enable seamless, reliable, global operations.\nOur system strengthens supply chains, reduces congestion, and gives people time back. With more than 140 million commercial autonomous miles safely flown, Zipline is redefining access to healthcare, consumer products, and food across the globe.\nWe operate at a global scale and are looking for practical problem solvers who thrive on real-world challenges and rapid growth. Our team is motivated by building systems that have a direct, meaningful impact on people’s lives and by scaling the future of logistics. We are seeking people who sculpt from first principles, enjoy facing adversity, and can do the impossible at record breaking speeds.\nAbout You and The Role \nWe are looking for a Senior IT Infrastructure Engineer to help design, operate, automate, and scale the systems that support our employees and business operations. This role will provide technical ownership and direction for several of our core enterprise platforms, including Okta, Google Workspace, Slack, endpoint management, and the API integrations that connect our internal systems. You will set technical standards, make architecture decisions, and lead complex improvements across these systems while maintaining a secure, reliable, scalable, and highly automated IT environment. A key focus of this role will be designing and maturing identity and access management capabilities across the organization, including role-based access control, automated software provisioning, and scalable joiner, mover, and leaver workflows. You will establish patterns and standards that can be consistently operated and extended as the company grows. The ideal candidate has deep experience administering modern SaaS platforms, strong scripting and automation skills, a strong understanding of modern identity standards, and hands-on experience managing infrastructure in a public cloud environment such as AWS or Google Cloud Platform. You have demonstrated sound technical judgment and can design scalable solutions for complex, cross-system problems. This is a senior individual contributor role for someone who is comfortable serving as a technical lead for critical systems, resolving ambiguous cross-system issues, making architectural tradeoffs, and partnering across IT, Security, Engineering, and business teams. You will also provide technical guidance and mentorship to other members of the IT team.\nWhat You'll Do\nProvide technical ownership, architecture, standards, security, reliability, and ongoing improvement for core IT platforms, including:Okta\nGoogle Workspace\nSlack\nRelated enterprise SaaS applications\n\nDefine the architecture for and lead implementation of scalable identity and access management solutions across enterprise applications.\nDefine and mature role-based access control (RBAC) across systems, including access models, groups, roles, entitlements, and provisioning policies.\nDefine and evolve software provisioning and deprovisioning patterns that reduce manual administration, improve access consistency, strengthen security, and scale across the organization.\nDesign and maintain automated joiner, mover, and leaver workflows that ensure users receive the appropriate access based on role, department, location, employment status, or other business attributes.\nArchitect, build, maintain, and troubleshoot complex API-based integrations between enterprise systems, establishing reusable integration patterns where appropriate.\nManage identity and access management workflows, including authentication, SSO, MFA, provisioning, deprovisioning, lifecycle management, access reviews, and role-based access.\nDevelop automation and administrative tooling using Python, Bash, APIs, and other appropriate technologies.\nIdentify repetitive or manual IT processes and build scalable automation to improve efficiency, reliability, and user experience.\nDefine standards for and manage infrastructure and services running in a public cloud environment such as AWS or GCP.\nOwn the technical strategy, standards, and ongoing evolution of mobile device management (MDM) and endpoint management platforms such as Iru, Jamf,\nMicrosoft Intune, and Hexnode, including device enrollment, configuration profiles, security policies, application deployment, compliance, OS update management, and device lifecycle operations.\nDevelop and maintain integrations using REST APIs, webhooks, service accounts, OAuth, and other common authentication and integration patterns.\nImplement and support modern identity federation and provisioning standards, including SAML, SCIM, OAuth, and OpenID Connect (OIDC).\nMonitor the health, security, performance, and availability of critical IT systems and integrations.\nLead troubleshooting and root-cause analysis for complex infrastructure, identity, application, authentication, provisioning, and integration issues that span multiple systems.\nEstablish and maintain configuration standards, documentation, operational procedures, and system architecture documentation.\nPartner with Security teams to implement and maintain appropriate access controls, security policies, logging, monitoring, and audit capabilities.\nPartner with Engineering and business systems teams on integrations, automation, identity, and infrastructure initiatives.\nLead technical evaluation, design, implementation, and migration efforts for enterprise technologies.\nEstablish technical standards, design patterns, and best practices for IT infrastructure, SaaS administration, automation, identity management, endpoint management, and access governance.\nServe as a technical escalation point and subject matter expert for complex IT infrastructure and identity issues.\nMentor other members of the IT team and help improve the team's technical capabilities and operational maturity.\nWhat You'll Bring\n7+ years of professional IT experience.\n5+ years of hands-on experience administering and managing enterprise infrastructure, SaaS platforms, identity systems, or related technologies.\nSignificant hands-on experience administering Okta or a comparable enterprise identity and access management platform.\nSignificant hands-on experience administering Google Workspace in a mid-sized or large enterprise environment.\nExperience administering Slack or a comparable enterprise collaboration platform.\nHands-on experience administering and supporting MDM and endpoint\nmanagement platforms such as Iru, Jamf, Microsoft Intune, Hexnode, or comparable solutions.\nStrong scripting and automation skills using Python and Bash.\nDemonstrated experience designing, building, maintaining, and troubleshooting\nAPI integrations between enterprise applications.\nStrong understanding of REST APIs, JSON, webhooks, service accounts, and service to-service authentication.\nDeep understanding of modern identity and authentication standards and protocols, including OAuth, SAML, SCIM, and OpenID Connect (OIDC).\nStrong understanding of identity and access management concepts, including SSO, MFA, federation, identity lifecycle management, RBAC, provisioning, deprovisioning, and access governance.\nDemonstrated experience designing and implementing role-based access control models across enterprise applications.\nExperience automating application and software provisioning using identity attributes, groups, roles, APIs, SCIM, workflows, or similar technologies.\nHands-on experience designing and managing infrastructure or services in AWS, Google Cloud Platform, or a comparable public cloud environment.\nExperience troubleshooting complex issues across SaaS applications, identity platforms, networks, APIs, and cloud services.\nStrong understanding of security principles and enterprise IT best practices.\nExperience creating clear technical documentation, runbooks, and operational procedures.\nStrong communication skills and the ability to work effectively with both technical and non-technical stakeholders.\nPreferred Qualifications\nExperience managing Okta at enterprise scale, including Workflows, Lifecycle\nManagement, application integrations, group rules, advanced security policies, and automated provisioning.\nExperience designing access models based on attributes such as department, role, location, employment type, or organizational hierarchy.\nExperience implementing access certification, entitlement management, or identity governance processes.\nExperience with Google Workspace automation and administration using tools such as GAM, Google APIs, or Apps Script.\nExperience working with Slack APIs, Slack administration, Enterprise Grid, or automated Slack workflows.\nExperience with infrastructure-as-code tools such as Terraform is a plus.\nExperience with source control and software development practices using Git and CI/CD workflows.\nExperience designing or improving endpoint management, device trust, zero-trust, compliance, and device lifecycle programs across a diverse fleet.\nExperience with secrets management, certificate management, or privileged access management.\nExperience working in a highly automated, cloud-first environment.\nExperience supporting environments with strong security, compliance, or audit requirements.\nWhat Success Looks Like\nIn this role, you will set technical direction for an IT environment that is increasingly automated, reliable, secure, and easy to operate. You will establish scalable patterns and standards, reduce manual administrative work, improve the reliability of critical integrations, strengthen our identity and access management practices, and create technical foundations that can support the company as it grows. You will be successful when access is increasingly determined by well-defined roles and business attributes rather than manual requests, provisioning and deprovisioning are highly automated, joiner, mover, and leaver processes are reliable and scalable, and the platforms and integrations you own are well-architected, documented, supportable, and require fewer manual interventions. Our goal is to move toward an environment where the right users receive the right access to the right systems automatically, with clear controls, visibility, and governance aroundhow that access is granted and removed.\nWhat Else You Need To Know \nThe starting cash range for this role is $160,00 - $185,000; please note that this is a target, starting cash range for a candidate who meets the minimum qualifications for this role. We are always open to negotiation. The final cash pay for this role will depend on a variety of factors, including a specific candidate's experience, qualifications, skills, working location, and projected impact. The total compensation package for this role may also include: equity compensation; overtime pay; discretionary annual or performance bonuses; sales incentives; benefits such as medical, dental and vision insurance; paid time off; and more.\nZipline is an equal opportunity employer and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual or...","description_format":"text","description_chars":12865,"description_truncated":true,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Drones & UAVs","Delivery","Logistics"],"lifecycle":[{"event":"open","at":"2026-10-29T14:36:18Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 63 · green card filings: 13","filings_12m":63,"filings_prev_12m":47,"green_card_filings_12m":13,"median_offered_wage_usd":170658,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":17}],"liveness":{"score":34,"band":"fade","label":"Fading","p_open":1,"p_active":0.775,"p_room":0.44,"age_days":82,"expected_fill_days":58,"reasons":["conf:3","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/zipline-sr-it-infrastructure-engineer","json_url":"https://alion.io/job/zipline-sr-it-infrastructure-engineer.json","meta":{"generated_at":"2026-11-02T18:56:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26396,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":15878},"rest":"https://alion.io/mcp/rest/get_company?id=15878"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzipline-sr-it-infrastructure-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzipline-sr-it-infrastructure-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzipline-sr-it-infrastructure-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zipline-sr-it-infrastructure-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzipline-sr-it-infrastructure-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3463366}},{"tool":"search_jobs","arguments":{"company":"zipline.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3463366},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}