Boku
Senior Enterprise Infrastructure Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Build the payment infrastructure powering global commerce.
Boku connects billions of consumers to the payment methods they prefer, one market at a time. Our platform connects the world’s leading digital businesses to the local payment methods their customers already use. Spotify, Meta, Microsoft, Netflix and Tencent already run on Boku’s payment infrastructure. We operate across 60+ countries, support 200+ local payment methods and reach 7.5 billion consumer accounts.
With headquarters in London and San Francisco and colleagues working across markets around the world, Boku is global by default. From London to Mumbai, São Paulo to Singapore, our teams collaborate across time zones, markets and cultures to build products for customers around the world.
Join us to solve complex, real-time payment challenges at global scale. We share knowledge freely, take ownership of complexity and look for people who question how things are done and find better ways to build.
Boku Inc. (BOKU.L) is the leading global provider of local mobile-first payments solutions. Global brands including Amazon, DAZN, Meta, Google, Microsoft, Netflix, Sony, Spotify, and Tencent rely on Boku to reach millions of new paying consumers who do not use credit cards with our purpose-built payment network of more than 300 local payment methods across 70+ countries. Every year, Boku processes over $10 billion in value for our customers. Incorporated in 2008, Boku is headquartered in London and San Francisco and has employees in over 39 countries around the world, including Brazil, China, Estonia, Germany, Ireland, Japan, Singapore, and the UAE. Boku is a truly global company that takes pride in its diversity and thriving equal opportunity workplace.
Role Purpose
Boku operates a cloud-first, global enterprise infrastructure estate spanning Azure, Microsoft 365, and 40+ SaaS products. As Senior Enterprise Infrastructure Engineer, you will contribute to the design, build, and ongoing maintenance of Boku's core infrastructure as part of the infrastructure team, with a strong focus on automation, Infrastructure-as-Code, and AI-driven operational tooling. You will operate autonomously on complex infrastructure problems as part of a small, senior infrastructure team, working closely and collaboratively with other infrastructure engineers, the Head of Global IT, and across the Service Delivery and Solution Engineering teams to deliver secure, scalable, and well-governed platforms.
Key Responsibilities
Infrastructure Design, Build & Maintenance
- Design, build, and maintain core cloud infrastructure across Azure, with a strong emphasis on repeatable, well-documented, Infrastructure-as-Code delivery.
- Contribute to the lifecycle of critical infrastructure components, from architecture through to day-to-day operation and continuous improvement, as part of the infrastructure team.
- Manage identity and access at scale using Entra ID, including RBAC, Conditional Access, and integration with downstream applications.
- Design, configure, and maintain enterprise networking and firewall infrastructure, including routing, WAN connectivity, and firewall administration across Boku's global sites.
- Support Privileged Access Management (PAM) using Delinea, including vault administration, access policy, and session management for privileged accounts, alongside the infrastructure team.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Automation & AI-Driven Operations
- Develop and maintain Infrastructure-as-Code using Terraform for provisioning and configuration of Azure resources.
- Manage Power Platform environments, including environment strategy, governance, and access.
- Write scripts and tooling in Python and PowerShell to automate infrastructure tasks, reporting, and system integrations.
- Identify and deliver opportunities to embed AI and intelligent automation into infrastructure operations, working alongside the Solution Engineering team.
- Design and support systems integrations that allow infrastructure and operational tooling to interact with AI-driven platforms and agents.
Endpoint & Device Management
- Manage and support endpoint management systems including Microsoft Intune and Kandji, covering enrolment, configuration, patching, and compliance.
Cloud & SaaS Ecosystem
- Support and help govern Boku's wider SaaS estate, ensuring infrastructure decisions align with a cloud-first strategy.
- Partner with Security to harden the Microsoft 365 tenant and infrastructure estate against relevant compliance frameworks (ISO 27001, SOC 2, DORA).
Technical Leadership
- Act as a senior technical point of contact for infrastructure design decisions, escalations, and complex troubleshooting.
Change Control & Documentation
- Ensure all infrastructure changes are properly documented, tested, and communicated in line with IT change control processes.
- Produce and maintain clear technical documentation, runbooks, and architecture records.
What good looks like
- Core Azure infrastructure is built and documented using Infrastructure-as-Code, with minimal manual configuration.
- Identity and access controls (Entra ID, RBAC, Conditional Access) are consistently applied and regularly reviewed.
- Infrastructure and operational tasks are automated wherever practical, using Terraform, Power Platform, Python, or PowerShell.
- Opportunities to apply AI and intelligent automation to infrastructure operations are identified and progressed with Solution Engineering.
- Endpoint fleets managed through Intune and Kandji are compliant, patched, and enrolled to policy.
- The Microsoft 365 tenant and wider SaaS estate meet relevant compliance frameworks (ISO 27001, SOC 2, DORA).
- Infrastructure changes are documented, tested, and follow IT change control processes without exception.
- Technical documentation, runbooks, and architecture records are kept current and usable by others.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Skills & Experience
Experience
- 7+ years in infrastructure or cloud engineering roles, ideally within a cloud-first, SaaS-centric organisation.
- Demonstrable experience designing, building, and maintaining production infrastructure end-to-end.
Technical skills
- Strong hands-on experience with Microsoft Azure, including core infrastructure, networking, and identity services.
- Solid working knowledge of Entra ID: RBAC, Conditional Access, app registrations, and identity governance.
- Practical experience writing and maintaining Terraform for Infrastructure-as-Code.
- Experience building automation or workflow solutions using Microsoft Power Platform, including environment management and CI/CD pipeline creation and design.
- Strong scripting ability in Python and PowerShell.
- Hands-on experience with endpoint management tools: Microsoft Intune and Kandji.
- Practical experience with enterprise networking and firewall administration (routing, WAN, firewall configuration and management).
- Experience with Privileged Access Management (PAM) solutions, ideally Delinea.
- Understanding of how infrastructure and operational systems can interact with AI-driven tooling and platforms.
Desirable
- Knowledge of AI platforms and APIs such as OpenAI and Anthropic, and how they can be applied to infrastructure and operational workflows.
- Familiarity with Cloudflare, including Zero Trust and related network/security services.
- Experience in a global or enterprise IT environment operating across multiple regions.
- Familiarity with compliance frameworks such as ISO 27001, SOC 2, or DORA.
- Experience administering Zoom telephony and contact centre solutions.
Leadership & mindset
- Strong stakeholder management, able to translate technical concepts for non-technical audiences.
- Customer-focused, proactive problem-solver who thrives in ambiguous, fast-paced environments.
- Passion for continuous learning and driving operational excellence through automation and best practice.
End-to-End ownership
Technologies & Tools
- Microsoft Azure
- Microsoft Entra ID
- Terraform
- Microsoft Power Platform
- Dynamics 365
- Python
- PowerShell
- Microsoft Intune
- Kandji
- Microsoft 365
- Delinea
- Cloudflare
- Enterprise network and firewall hardware
- Zoom (telephony / contact centre)
Location
- London (Hybrid)
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location