Senior Enterprise Infrastructure Engineer

In this role you design and operate Boku’s core cloud infrastructure at scale, focusing on automation and IaC to deliver secure, reliable platforms. You’ll work with Azure, Entra ID, and a broad SaaS ecosystem, collaborating with cross-functional teams to drive efficiency and governance. You will explore AI-driven improvements to operations and shape how infrastructure supports a global payments network. This is a high-impact role for a senior engineer who thrives on ownership and solving complex problems.

• Design, build, and maintain core Azure infrastructure with Infrastructure-as-Code (IaC)
• Pipeline and lifecycle management for critical infrastructure components end-to-end
• Manage identity and access at scale using Entra ID (RBAC, Conditional Access)
• Configure and maintain enterprise networking and firewall infrastructure across global sites
• Support Privileged Access Management (PAM) with Delinea (vault, policies, sessions)
• Develop and maintain Terraform for provisioning Azure resources
• Govern Power Platform environments, governance, and CI/CD processes
• Write automation scripts in Python and PowerShell; enable AI-driven automation
• Incorporate AI and intelligent automation into infrastructure operations
• Oversee endpoint management (Intune, Kandji) including enrollment, patching, and compliance
• Align SaaS governance with a cloud-first strategy; co-work with Security on ISO 27001, SOC 2, DORA compliance
• Provide senior technical leadership for design decisions and incident handling
• Document changes, publish runbooks, and maintain architecture records

• 7+ years in infrastructure or cloud engineering roles
• Strong hands-on Azure experience (core infra, networking, identity)
• Proficient with Entra ID (RBAC, Conditional Access, app registrations)
• Terraform expertise for IaC
• Experience with Microsoft Power Platform (environments, governance, CI/CD)
• Python and PowerShell scripting
• Endpoint management experience (Microsoft Intune, Kandji)
• Enterprise networking and firewall administration
• Delinea PAM experience
• Understanding of AI-driven tooling integration
• Familiarity with cloud security and governance
• Experience in global/enterprise IT environments

• Stakeholder management
• Clear technical communication to non-technical audiences
• Problem-solving in ambiguous, fast-paced settings
• Microsoft Azure (core infra, networking, identity)
• Microsoft Entra ID (RBAC, Conditional Access)
• Terraform for IaC