Senior it infrastructure engineer

Role Overview As a Senior IT Infrastructure Engineer on Chargebee’s Corporate IT Services team, you will be the technical owner for our employee‑facing Saa S stack—including Google Workspace, Okta, Slack, Jamf, Jump Cloud, and more. Your mission is to keep these tools reliable, secure, fully licensed, and always one step ahead of our rapidly scaling business. You approach every challenge with an AI‑first mindset, seeking opportunities to leverage artificial intelligence and automation to simplify workflows, reduce toil, and elevate the employee experience. This is a hands‑on engineering role for an automation‑driven professional who loves turning repeatable tasks into automated workflows and is passionate about security, user experience, and operational excellence. Key Responsibilities 1. Corporate IT Tool Engineering & Adoption Plan, test, and implement enhancements in Google Workspace, Okta (Workforce Identity, Workflows, Identity Governance, Device Access), Slack Enterprise, Jamf, Jump Cloud, and other Saa S tools—ensuring zero‑downtime rollouts and clear stakeholder communication. Evaluate and enable new features released by existing vendors; build proof‑of‑concepts, run pilots with power users, and document best practices so that teams can adopt functionality quickly and safely. Lead M&A integrations by migrating or consolidating user directories, Corporate IT Tools, and device management policies for acquired companies. Enable newly selected Saa S platforms by configuring SSO/SCIM integrations, Okta Identity Governance policies and workflows, publishing self‑service deployments in Jamf/Jump Cloud, and documenting associated automations. 2. License & Lifecycle Management Own renewals and true‑ups for every Corporate IT‑managed subscription (Google, Okta, Slack, Jamf, Last Pass, Jump Cloud, etc.), preventing surprise overages. Monitor license utilisation proactively, maintaining a healthy buffer for new hires while eliminating dormant accounts to control cost. Execute full lifecycle management of Corporate IT Tools —procurement, renewal, replacement, and sunset—driving cross‑functional communication so end‑users experience seamless transitions. Assist other departments in safely decommissioning sunset tools, exporting historical data, and ensuring compliance retention requirements are met. 3. Endpoint Security & Software Management Publish security patches immediately via Jamf (mac OS) and Jump Cloud / Intune (Windows), following a quarterly OS upgrade calendar validated through pilot testing. Maintain a catalog of 50+ approved applications, pushing or making available the latest versions through Jamf Self Service and Jump Cloud software policies. Define configuration baselines to meet PCI DSS, ISO 27001, and SOC 2 controls, collaborating with Security on hardening benchmarks and DLP enforcement. 4. Automation & Scripting Design no‑/low‑code workflows using Okta Workflows, Google Apps Script, Zapier, n8n, etc., eliminating repetitive manual tasks and reducing MTTR for support tickets. Write Bash/Shell Scripts and Power Shell code to support various policy enforcement in mac OS and Windows 5. Support for IT Compliance, Audit & Incident Response Support the IT Compliance Team by setting up automations and alerts required for controls and internal policies, internal audits and reviews. Support to investigate DLP and security alerts across Google, Okta, mac OS, Windows, and Slack, coordinating incident response with IT Compliance and Security and remediating root causes. Support IT Compliance in closing non‑conformities quickly—driving permanent fixes through policy updates, scripting, or new automation. 6. Advanced IT Support & Cross‑Team Collaboration Act as final escalation point for the IT Support team on complex Saa S issues, reproducing problems, engaging vendor support, and documenting resolutions in our ITIL/ITSM platform. Coach and develop junior engineers and support analysts, nurturing an AI-first, compliance‑driven culture rooted in continuous learning and curiosity. Continuously improve internal documentation, diagrams, and playbooks so knowledge is readily accessible. Required Skills & Experience Mindset AI‑first, automation‑driven, detail‑oriented, and passionate about delivering a secure yet delightful employee experience. Experience 4+ years administering Google Workspace and Okta Workforce Identity in a 1,000+ endpoint, multi‑OS Saa S environment. 2+ years hands‑on with Okta Workflows, Identity Governance, and Device Access. 2+ years managing Jamf Pro or an equivalent mac OS MDM. Solid background administering Slack Enterprise Grid. Automation & Scripting Strong Bash/Shell for mac OS and Power Shell for Windows. Comfortable with Java Script or Python for API integrations. Proven record of building no‑/low‑code automations (Okta Workflows, Apps Script, Zapier, n8n, etc.). Security & Compliance Practical knowledge implementing PCI DSS, ISO 27001, and SOC 2 controls in identity and endpoint platforms. Experienced handling compliance audits and security incidents. Experience in managing corporate-wide DLP program using Google Workspace, Okta and Slack. Nice‑to‑Have Certifications: Okta Certified Administrator/Consultant, Okta Certified Workflows, Associate Google Workspace Administrator. Familiarity with ITIL / ITSM and CMDB practices using Freshservice or similar