> Markdown version of [/jobs/ext/4488509-infrastructure-engineer](https://www.wearedevelopers.com/jobs/ext/4488509-infrastructure-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Infrastructure Engineer

- **Company:** Harvey, Inc.
- **Location:** New York, United States
- **Experience:** Expert
- **Salary:** $153,000.0 - $210,500.0
- **Contract:** Permanent contract
- **Skills:** IEEE 802.1X, Amazon Web Services, Systems Engineering, Microsoft Azure, Bash Shell, BASIC (Programming Language), Microsoft Online Services, Software as a Service, Continuous Integration, Data Centers, Data Recovery, Domain Name System (DNS), Identity and Access Management, Internet Service Provider, Python (Programming Language), OpenID, Windows PowerShell, Security Assertion Markup Language (SAML), Wi-Fi Technology, SSL Certificate Management, Transport Layer Security, Okta, Git, Microsoft InTune, Information Technology, Casper Suite, Gsuite, Cloud Migration, Drift Detection, Software Coding, Terraform, Software Version Control
- **Published:** October 29, 2026
- **Apply:** https://startup.jobs/senior-infrastructure-engineer-harvey-10644394

## About the Role

* 6+ years in corporate IT engineering, systems engineering or SRE, with at least 2 years owning shared infrastructure or automation for a SaaS-first company.
 * Strong infrastructure-as-code experience. You've managed real systems with Terraform or similar, in Git, with pull-request review and CI.
 * Solid scripting in Python plus one of Bash, PowerShell or Go. You write code other people can read and maintain.
 * Hands-on with identity and provisioning: SAML, OIDC, SCIM and lifecycle automation in Okta or Entra.
 * Working knowledge of at least one major cloud (AWS, Azure or GCP): IAM, accounts and cost basics.
 * Comfort with DNS, TLS and certificate management, and basic enterprise networking.
 * You've built monitoring and alerting that people actually trust, and written runbooks that someone else used successfully.
 * Clear written communication. You can explain a change, its risk and its rollback to non-engineers.

Bonus Points

 * Terraform providers for Okta, Google Workspace or Jamf, or config-as-code tools for Intune
 * Serval or similar IT automation platforms
 * SaaS backup and recovery tools for Google Workspace, Slack or M365
 * Multi-site office rollouts across regions, including working with local vendors and ISPs
 * Experience at a fast-growing company where company headcount grew faster than the IT team

## Description

We're hiring a Sr. Infrastructure Engineer to own the shared layer that every Harvey IT system runs on. You'll join Core IT Engineering & Infrastructure, reporting to Dave Vega, Director of IT, alongside engineers who own identity and collaboration, Microsoft platforms, networking, and client platforms., * IT cloud accounts and tenants. Own access, guardrails and cost for the cloud accounts IT runs (AWS, Azure, GCP projects for IT tooling). Be the BizTech engineering partner to Security and Infrastructure on tenant-level changes, such as cloud migrations that touch Entra and M365.

 * Infrastructure as code for IT. Build and run the Git repos, CI pipelines and review process for IT configuration (Okta, Jamf, Intune, Google Workspace). Platform owners keep owning their config. You own the framework they all use.
 * IT automation and provisioning. Own the automation behind identity lifecycle and IT workflows: SCIM and provisioning flows, onboarding and offboarding orchestration across systems, and IT workflows in Serval.
 * Monitoring, backup and resilience. Set up health checks and alerting for critical IT systems and integrations, config drift detection, SaaS backup (Google, Slack, M365) and tested recovery runbooks.
 * Scripts and internal tooling. Take over the scripts and admin utilities that live on individual laptops today. Put them in source control, document them and keep them running.
 * Office site standard. Work with Network and AV/Media teams to define the repeatable technical template for new offices: configuration, monitoring and documentation each site copies. Network and AV build execution stays with their owners.
 * Engineering practices. Raise the bar on change control, documentation and runbooks across the pillar, so primaries and backups can cover for each other.
 * Certificates, domains and DNS. Track and renew every certificate IT depends on (Apple Push, SAML signing, SSL, Wi-Fi/802.1X). Work with Network and CorpSec teams to own and manage DNS NS solutions for IT. Build expiry monitoring to avoid surprises.