AppsFlyer is looking for a Senior IT Infrastructure Operations to join our IT Infrastructure team in Herzliya, Israel. IT at AppsFlyer is not only a support function - it is one of the operating layers that enables the company's AI-native transformation. We are building an autonomous, AI-operated IT department: agents run the routine 24/7, humans stay in the loop, and autonomy is earned through gates.
You will join a small InfraOps team that owns the company's identity, SaaS, IT cloud environment and endpoint foundations - and turns them into a governed platform that both people and AI agents can operate. This is a hands-on role for someone who designs at the architecture level, ships production-grade automation and internal products end-to-end, and treats documentation as part of "done" so that agents can run on it.
What you'll doIdentity & core systems
- Own and evolve our identity platform: Okta (SSO, tier groups, Workflows, SCIM, API Gateway), Just-In-Time access, and the full user and non-human identity lifecycle - service accounts, API keys, break-glass and audit.
- Administer, and harden core SaaS - Google Workspace, Slack, Zoom, Entitle, Microsoft 365 - and the AI platforms the company runs on (Claude, ChatGPT / OpenAI, Gemini, Cursor, etc.).
- Serve as Tier 3 escalation with real diagnostic depth: certificates, auth chains, cross-platform policy conflicts, MDM edge cases.
Platform engineering
- Build and operate the IT Infra Platform on GCP - Cloud Run, VPC Service Controls, Cloud Armor, Terraform, GitHub Actions, secret management - and deliver internal products on it end-to-end: design → IaC → CI/CD → secured deploy → operate.
- Contribute to the AI Govern layer: usage governance, cost attribution and model access control.
Automation
- Design automation across Make.com, Okta Workflows and deployed code, with APIs, webhooks and MCP as first-class integration surfaces.
- Own the health of what you build - monitoring, alerting, failure runbooks - and drive the backlog toward zero-touch self-service.
AI-native IT & agents
- Build agents that execute real infra tasks with explicit action boundaries and stop/escalation conditions - from Tier-0 self-service to autonomous remediation.
- Apply prompt and context engineering and evaluation to real IT use cases; own skills and plug-ins in the company's AI framework.
- Write resolution notes, ADRs and runbooks so that agents (and teammates) can act on them.
Endpoint, network & security
- Support the endpoint stack (Kandji, Intune, Airlock) and global office network (Meraki, FortiGate, Palo Alto Prisma) alongside the team.
- Partner with Security on vendor and app risk, shadow-AI and SaaS governance, and audit readiness - moving manual approvals to policy-as-code.
- 5+ years hands-on in IT infrastructure, SysAdmin / InfraDevOps or platform engineering in a SaaS or high-growth tech environment.
- Deep, production-level command of Okta (or equivalent IdP) and enterprise SaaS administration - Google Workspace, Slack, Atlassian, Microsoft 365.
- Real cloud engineering: GCP (preferred) or AWS / Azure, Terraform or other IaC, containers, CI/CD, secrets management.
- Strong scripting and integration skills - Python and/or TypeScript, REST APIs, webhooks, OAuth.
- Proven experience designing and operating automation at scale (Make.com, n8n, Workato, Okta Workflows or similar), including monitoring and ownership of what you build.
- Hands-on experience building with LLMs (Claude and/or OpenAI APIs) and applying prompt and context engineering to real use cases.
- Security-minded by default (least privilege, zero trust, secret hygiene, audit trails), architecture-level thinking, and a habit of documenting so others - and agents - can run what you build.
- Self-directed and fast: you originate improvements rather than execute tickets, and you're comfortable learning a new tool this week and owning it in production the next.
- Strong written and verbal English.
Bonus points
- Building internal tools / full-stack apps (React / Node / Python) with SSO-backed auth.
- Advanced LLM engineering: RAG, agent frameworks, MCP servers, LLM evaluation; AI gateway / LLM cost governance (LiteLLM, Bifrost, Vertex AI, Bedrock).
- MDM at depth (Kandji, Jamf, Intune) and cross-MDM scripting; network fundamentals or global office rollouts.
- Relevant cloud, Terraform or Okta certifications - or the equivalent hands-on experience.
You will be one of a handful of engineers turning IT into a platform that agents operate - with a real say in what we build and how, ownership of production systems used by the entire company, and a mandate to build the next generation of autonomous IT. New AI and infrastructure technologies land on our desk constantly; you'll be the one evaluating them, adapting them to how AppsFlyer works, and taking the ones that earn it into production.
As a global company operating from 25 offices across 19 countries, we reflect the human mosaic of the diverse and multicultural world in which we live. We ensure equal opportunities for all of our employees and promote the recruitment of diverse talents to our global teams without consideration of race, gender, culture, or sexual orientation. We value and encourage curiosity, diversity, and innovation from all our employees, customers, and partners.
“As a Customer Obsessed company, we must first be Employee Obsessed. We need to make sure that we provide the team with the tools and resources they need to go All-In.” Oren Kaniel, CEO
Skills Required
- 5+ years of hands-on experience in IT infrastructure, systems administration, or InfraDevOps in a SaaS or high-growth technology environment
- Production-level expertise with Okta or an equivalent identity provider
- Enterprise SaaS administration experience with Google Workspace, Slack, Atlassian, and Microsoft 365
- Cloud engineering experience with GCP preferred, or AWS or Azure
- Experience with Terraform or other infrastructure-as-code tools, containers, CI/CD, and secrets management
- Strong scripting and integration skills using Python and/or TypeScript or JavaScript, REST APIs, webhooks, JSON, and OAuth
- Experience designing and operating automation at scale with Make.com, n8n, Workato, Okta Workflows, or similar platforms
- Hands-on experience building with Claude and/or OpenAI APIs and applying prompt and context engineering
- Security-minded approach including least privilege, zero trust, secret hygiene, and audit trails
- Architecture-level thinking, end-to-end ownership, strong documentation practices, and self-directed improvement
- Strong written and verbal English communication skills
- Experience building internal tools or full-stack applications with React, Node.js, or Python
- Advanced LLM engineering experience with RAG, vector stores, knowledge graphs, agent frameworks, MCP servers, or LLM evaluation
- Experience with AI gateways or LLM cost governance, including LiteLLM, Bifrost, Vertex AI, or AWS Bedrock
- Relevant Google Cloud, AWS, Azure, Terraform, or Okta certifications
- Deep MDM experience with Kandji, Jamf, Intune, and cross-MDM scripting
- Network, physical access, global office rollout, ITSM, ITIL, knowledge management, or SaaS and AI FinOps experience
AppsFlyer Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about AppsFlyer and has not been reviewed or approved by AppsFlyer.
-
Wellbeing & Lifestyle Benefits — Wellbeing support is positioned as a meaningful part of the rewards package, including private health insurance and wellness offerings like fitness classes. Additional extras such as events, work‑from‑home support, and global mobility opportunities are portrayed as adding tangible value beyond cash compensation.
-
Equity Value & Accessibility — Equity is framed as broadly accessible, with stock options described as available to all employees. This expands the total rewards mix and can make overall compensation feel stronger even when salary alone is debated.
-
Strong & Reliable Incentives — Total compensation in certain technical and revenue roles is presented as capable of reaching competitive levels, implying meaningful upside where role/market fit is strong. Sales compensation is described as potentially attractive on-target, which can reinforce perceived earning opportunity when performance aligns with plan design.
AppsFlyer Insights
What We Do
AppsFlyer helps brands make good choices for their business and their customers through innovative, privacy-preserving measurement, analytics, fraud protection, and engagement technologies. Built on the idea that brands can increase customer privacy while providing exceptional experiences, AppsFlyer empowers thousands of creators and 8,000+ technology partners to create better, more meaningful customer relationships. To learn more, visit www.appsflyer.com.
