Job description

We read every application. No AI screening. A real person reviews your materials. Job Summary PayJunction is seeking a Senior IT Infrastructure Engineer to bring site reliability engineering to the world of IT, owning the Mac fleet, Ubuntu servers, networks, and AWS accounts a payments company runs on, and building the data platform we owe the business next. Why PayJunction? PayJunction is relentless and emphatical about helping others. We exist to drive the success of our partners. Specifically, the developers who connect to us, businesses who process payments through us, and all of our team members who work with us at PayJunction. We believe dreams inspire people to start a business, and others to partner with them. While building dreams, entrepreneurs and business professionals will face many challenges along the way. We believe great partners can make all the difference. We are your dream partner. Your success is our success. Our dream is to help you realize yours. We exist to drive the success of our partners. We do this by fundamentally changing the way you transact with others. We just happen to make great payment systems. If you love helping others succeed, in a culture that celebrates perfecting your craft, consider partnering with us. Location PayJunction takes a Flex First approach to work environments. This means that our team members can choose to work from our Santa Barbara office or remotely from home. We ensure that everyone has the resources and equipment to work where they feel most productive. We trust our teams to make the best decision for their work environment. All PayJunction employees must reside in one of the following states: CA, IL, TX, MN, CO, GA, NY, NC, MA, CT. Mission Our IT team’s mission is to securely supercharge the productivity of our workforce, so the tools every team member relies on are configured, integrated, and reliable without anyone having to think about them. Vision Team members love our secure, best-in-class, fully configured tools that are seamlessly integrated to supercharge their productivity, and our tech stack is a pleasure to use because we minimize meaningless toil and friction wherever possible. Job Responsibilities • Keep our IT-critical services available and boringly reliable, owning monitoring, incident response, and the automation that stops the same page from firing twice. • Deploy, harden, and troubleshoot the whole estate: Mac workstations through Jamf, Ubuntu servers on Dell hardware and in AWS, Fortigate and Meraki networking, and our physical access systems. • Secure and integrate the SaaS stack that runs the company, including Okta, Google Workspace, Duo, Jamf, and Sophos, and automate their configuration wherever a human is still clicking. • Expand our ops AWS environment in Terraform, patterned on production, so what we run is documented, reproducible, and reviewed like code. • Build and operate the pipelines that land MySQL, Salesforce, and spreadsheet data into a warehouse, standing up the infrastructure a real data platform runs on. • Treat security and PCI compliance as engineering work: patch management, host hardening, vulnerability scanning, log review, and audit evidence that holds up with an assessor in the room. • Lead the migrations that decide how much toil this team carries for years, including Ubuntu upgrades, virtual machines to containers, and Puppet to OpenVox. • Take overflow help desk tickets in Jira Service Management with the same care as a production server, and leave documentation the next engineer can use. Qualifications • 5+ years in infrastructure engineering, systems administration, or site reliability engineering, with hands-on ownership of production systems. • Linux server administration in production, including building, hardening, patching, and troubleshooting on physical hardware and in the cloud (Ubuntu preferred). • AWS administration in a live environment: IAM, VPC networking, S3, and CloudTrail configured and operated, not a sandbox certification alone. • Infrastructure as code or configuration management used to manage real systems, with Terraform plus at least one of Ansible, Chef, or Puppet. • macOS fleet management with Jamf or a comparable MDM, covering enrollment, configuration profiles, and packaging. • Identity provider administration with Okta or a comparable IdP, including SAML/SCIM app integrations and MFA policy. • Ability to travel occasionally for on-site data center work in the Los Angeles or Las Vegas area. • Preferred: located within 250 miles of Los Angeles or Las Vegas; experience in a PCI DSS, SOC 2, or similarly audited environment; Fortigate, Meraki, or comparable firewall and switching administration; AWS, Jamf, Terraform, or Security+ certifications. About PayJunction Founded in 2000 by three UCSB graduates, PayJunction has grown from a bootstrapped startup to a recognized and respected leader in the payments industry. PayJunction processes more than $12 billion dollars annually for thousands of businesses with solutions that make it easy to accept credit and debit card payments in-store, online, and on-the-go. Our people-first culture values long-term relationships over short-term profits. Honesty and integrity are part of every interaction with partners, customers and employees. We foster a collaborative work environment, where creative ideas are welcomed, teams are inspired, and success is celebrated. PayJunction is a place where you can find experienced mentors and supportive friends who are committed to your growth. Total Rewards Plan • Health, dental, and vision paid 100% by company for you and your dependents • 401k with 6% match • FSA and Dependent Care FSA • Long-term & short-term disability coverage for you paid 100% by company • 8 paid company holidays per year • 2 paid floating holidays per year • 1 paid volunteer day per year • Paid Time Off • Home office equipment stipend • Annual Learning Stipend • Quarterly “fun budgets” for team bonding events • Opportunity to be part of a company that is changing a whole industry • Opportunity for growth within the company • Opportunity for remote, in-office, or hybrid work Office Environment • The opportunity to choose the work environment that best suits you - remote, in-office, or hybrid. • All remote & hybrid team members can enjoy: • Company-provided equipment for your home office • An equipment allowance for home office essentials • The opportunity to work at one of Glassdoor's Top 30 Best Places to Work in the US , 2020! • Those who choose to come into the office can look forward to: • Bright and open offices in downtown Santa Barbara • Stocked snack kitchens • Collaborative work spaces with Herman Miller chairs, height-adjustable desks, and a large 32-inch monitors • Dog-friendly office Company Values • Build the Dream • Put People First • Value Long Term Relationships Over Short Term Profit • Make it Simple • Be Data Driven • Own It The base salary range for this role is $130,000-$160,000 plus our Total Rewards Plan benefit package. Actual base salary offered will vary depending on factors including but not limited to: education, experience, skills and qualifications. PayJunction is an equal opportunity employer. We strive to create a work environment where people from all backgrounds and identities thrive. We firmly believe that more diversity and inclusion in our workforce creates a stronger team, product, and culture. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire. PayJunction reserves the right to conduct background and/or credit checks on all of its potential employees.

Requirements

Must-haves

We read every application. No AI screening. A real person reviews your materials.
Why PayJunction?
We are your dream partner.
Your success is our success.
Our dream is to help you realize yours.
Our IT team’s mission is to securely supercharge the productivity of our workforce, so the tools every team member relies on are configured, integrated, and reliable without anyone having to think about them.
Keep our IT-critical services available and boringly reliable, owning monitoring, incident response, and the automation that stops the same page from firing twice.
Deploy, harden, and troubleshoot the whole estate: Mac workstations through Jamf, Ubuntu servers on Dell hardware and in AWS, Fortigate and Meraki networking, and our physical access systems.
Secure and integrate the SaaS stack that runs the company, including Okta, Google Workspace, Duo, Jamf, and Sophos, and automate their configuration wherever a human is still clicking.
Expand our ops AWS environment in Terraform, patterned on production, so what we run is documented, reproducible, and reviewed like code.
Build and operate the pipelines that land MySQL, Salesforce, and spreadsheet data into a warehouse, standing up the infrastructure a real data platform runs on.
Treat security and PCI compliance as engineering work: patch management, host hardening, vulnerability scanning, log review, and audit evidence that holds up with an assessor in the room.
Lead the migrations that decide how much toil this team carries for years, including Ubuntu upgrades, virtual machines to containers, and Puppet to OpenVox.
Take overflow help desk tickets in Jira Service Management with the same care as a production server, and leave documentation the next engineer can use.
5+ years in infrastructure engineering, systems administration, or site reliability engineering, with hands-on ownership of production systems.
AWS administration in a live environment: IAM, VPC networking, S3, and CloudTrail configured and operated, not a sandbox certification alone.
Infrastructure as code or configuration management used to manage real systems, with Terraform plus at least one of Ansible, Chef, or Puppet.
macOS fleet management with Jamf or a comparable MDM, covering enrollment, configuration profiles, and packaging.
Identity provider administration with Okta or a comparable IdP, including SAML/SCIM app integrations and MFA policy.
Ability to travel occasionally for on-site data center work in the Los Angeles or Las Vegas area.

Nice-to-haves

Linux server administration in production, including building, hardening, patching, and troubleshooting on physical hardware and in the cloud (Ubuntu preferred).

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiawsjirago

Platform: jazzhr
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Paid Time Off