Senior IT Infrastructure Engineer

We read every application. No AI screening. A real person reviews your materials.

Pay Junction is seeking a Senior IT Infrastructure Engineer to bring site reliability engineering to the world of IT, owning the Mac fleet, Ubuntu servers, networks, and AWS accounts a payments company runs on, and building the data platform we owe the business next.

Pay Junction is relentless and emphatical about helping others. We exist to drive the success of our partners. Specifically, the developers who connect to us, businesses who process payments through us, and all of our team members who work with us at Pay Junction.

Pay Junction is a company that believes dreams inspire people to start a business, and others to partner with them. While building dreams, entrepreneurs and business professionals will face many challenges along the way. We believe great partners can make all the difference.

We are your dream partner.

Your success is our success.

Our dream is to help you realize yours.

We exist to drive the success of our partners. We do this by fundamentally changing the way you transact with others. We just happen to make great payment systems. If you love helping others succeed, in a culture that celebrates perfecting your craft, consider partnering with us.

Pay Junction takes a Flex First approach to work environments. This means that our team members can choose to work from our Santa Barbara office or remotely from home. We ensure that everyone has the resources and equipment to work where they feel most productive. We trust our teams to make the best decision for their work environment. All Pay Junction employees must reside in one of the following states: CA, IL, TX, MN, CO, GA, NY, MA, CT.

Our IT team’s mission is to securely supercharge the productivity of our workforce, so the tools every team member relies on are configured, integrated, and reliable without anyone having to think about them.

Team members love our secure, best-in‑class, fully configured tools that are seamlessly integrated to supercharge their productivity, and our tech stack is a pleasure to use because we minimize meaningless toil and friction wherever possible.

• Keep our IT-critical services available and boringly reliable, owning monitoring, incident response, and the automation that stops the same page from firing twice.
• Deploy, harden, and troubleshoot the whole estate:
  Mac workstations through Jamf, Ubuntu servers on Dell hardware and in AWS, Fortigate and Meraki networking, and our physical access systems.
• Secure and integrate the SaaS stack that runs the company, including Okta, Google Workspace, Duo, Jamf, and Sophos, and automate their configuration wherever a human is still clicking.
• Expand our ops AWS environment in Terraform, patterned on production, so what we run is documented, reproducible, and reviewed like code.
• Build and operate the pipelines that land MySQL, Salesforce, and spreadsheet data into a warehouse, standing up the infrastructure a real data platform runs on.
• Treat security and PCI compliance as engineering work: patch management, host hardening, vulnerability scanning, log review, and audit evidence that holds up with an assessor in the room.
• Lead the migrations that decide how much toil this team carries for years, including Ubuntu upgrades, virtual machines to containers, and Puppet to Open Vox.
• Take overflow help desk tickets in Jira Service Management with the same care as a production server, and leave documentation the next engineer can use.

• 5+ years in infrastructure engineering, systems administration, or site reliability engineering, with hands‑on ownership of production systems.
• Linux server administration in production, including building, hardening, patching, and troubleshooting on physical hardware and in the cloud (Ubuntu preferred).
• AWS administration in a live environment: IAM, VPC networking, S3, and Cloud Trail configured and operated, not a sandbox certification alone.
• Infrastructure as code or configuration management used to manage real systems, with Terraform plus at least one of Ansible, Chef, or Puppet.
• macOS…