SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Boku is a global payments infrastructure platform connecting billions of consumers to their preferred payment methods. The company operates across 60+ countries, supports 200+ local payment methods, and powers payment infrastructure for major digital businesses including Spotify, Meta, Microsoft, Netflix, and Tencent.
As Enterprise Infrastructure Engineer, you will contribute to the design, build, and ongoing maintenance of Boku's cloud-first enterprise infrastructure estate spanning Azure, Microsoft 365, and 40+ SaaS products. You will work closely with senior infrastructure engineers on complex infrastructure problems, building expertise across the estate while collaborating with the Head of Global IT and cross-functional teams to deliver secure, scalable, and well-governed platforms.
Key responsibilities include:
**Infrastructure Design, Build & Maintenance:** Support the build and maintenance of core cloud infrastructure across Azure with emphasis on Infrastructure-as-Code delivery. Contribute to the lifecycle of critical infrastructure components from architecture through day-to-day operation. Support identity and access management using Entra ID (RBAC, Conditional Access). Support enterprise networking and firewall infrastructure including routing, WAN connectivity, and firewall administration. Support Privileged Access Management (PAM) using Delinea, including vault administration and access requests.
**Automation & AI-Driven Operations:** Contribute to Infrastructure-as-Code development using Terraform for Azure resource provisioning. Support Power Platform environments including administration and access requests. Write scripts and tooling in Python and PowerShell to automate infrastructure tasks, reporting, and system integrations. Support identification and delivery of opportunities to embed AI and intelligent automation into infrastructure operations. Support systems integrations allowing infrastructure tooling to interact with AI-driven platforms.
**Endpoint & Device Management:** Own day-to-day configuration and administration of Microsoft Intune, including policy design, compliance profiles, app deployment, and patch management. Support configuration and administration of Kandji for macOS device management. Manage endpoint enrollment, patching, and compliance reporting across the device fleet.
**Cloud & SaaS Ecosystem:** Support and maintain Boku's wider SaaS estate ensuring infrastructure decisions align with cloud-first strategy. Partner with Security to harden the Microsoft 365 tenant and infrastructure estate against relevant compliance frameworks (ISO 27001, SOC 2, DORA).
**Collaboration & Documentation:** Work closely with senior infrastructure engineers on infrastructure design decisions. Ensure all infrastructure changes are properly documented, tested, and communicated in line with IT change control processes. Produce and maintain clear technical documentation, runbooks, and architecture records.
**Requirements:**
*Experience:*
- 3-5 years in infrastructure or cloud engineering roles, ideally within a cloud-first, SaaS-centric organization
- Demonstrable experience designing, building, and maintaining production infrastructure end-to-end
*Technical Skills (Required):*
- Strong hands-on experience with Microsoft Azure, including core infrastructure, networking, and identity services
- Solid working knowledge of Entra ID: RBAC, Conditional Access, app registrations, and identity governance
- Practical experience writing and maintaining Terraform for Infrastructure-as-Code
- Experience building automation or workflow solutions using Microsoft Power Platform, including environment management and CI/CD pipeline creation
- Strong scripting ability in Python and PowerShell
- Strong hands-on experience configuring and administering Microsoft Intune (policies, compliance, app deployment, patching); working knowledge of Kandji for macOS device management
- Practical experience with enterprise networking and firewall administration (routing, WAN, firewall configuration and management)
- Experience with Privileged Access Management (PAM) solutions, ideally Delinea
- Understanding of how infrastructure and operational systems can interact with AI-driven tooling and platforms
*Desirable:*
- Knowledge of AI platforms and APIs such as OpenAI and Anthropic, and how they can be applied to infrastructure and operational workflows
- Familiarity with Cloudflare, including Zero Trust and related network/security services
- Experience in a global or enterprise IT environment operating across multiple regions
- Familiarity with compliance frameworks such as ISO 27001, SOC 2, or DORA
- Experience administering Zoom telephony and contact centre solutions
*Leadership & Mindset:*
- Strong stakeholder management, able to translate technical concepts for non-technical audiences
- Customer-focused, proactive problem-solver who thrives in ambiguous, fast-paced environments
- Passion for continuous learning and driving operational excellence through automation and best practice
- End-to-end ownership mentality
