Senior Enterprise Infrastructure Engineer

Build the payment infrastructure powering global commerce. Boku connects billions of consumers to the payment methods they prefer, one market at a time. Our platform connects the world’s leading digital businesses to the local payment methods their customers already use. Spotify, Meta, Microsoft, Netflix and Tencent already run on Boku’s payment infrastructure. We operate across 60+ countries, support 200+ local payment methods and reach 7.5 billion consumer accounts. With headquarters in London and San Francisco and colleagues working across markets around the world, Boku is global by default. From London to Mumbai, São Paulo to Singapore, our teams collaborate across time zones, markets and cultures to build products for customers around the world. Join us to solve complex, real-time payment challenges at global scale. We share knowledge freely, take ownership of complexity and look for people who question how things are done and find better ways to build. Role Purpose Boku operates a cloud-first, global enterprise infrastructure estate spanning Azure, Microsoft 365, and 40+ SaaS products. As Senior Enterprise Infrastructure Engineer, you will contribute to the design, build, and ongoing maintenance of Boku's core infrastructure as part of the infrastructure team, with a strong focus on automation, Infrastructure-as-Code, and AI-driven operational tooling. You will operate autonomously on complex infrastructure problems as part of a small, senior infrastructure team, working closely and collaboratively with other infrastructure engineers, the Head of Global IT, and across the Service Delivery and Solution Engineering teams to deliver secure, scalable, and well-governed platforms. Key Responsibilities Infrastructure Design, Build & Maintenance Design, build, and maintain core cloud infrastructure across Azure, with a strong emphasis on repeatable, well-documented, Infrastructure-as-Code delivery. Contribute to the lifecycle of critical infrastructure components, from architecture through to day-to-day operation and continuous improvement, as part of the infrastructure team. Manage identity and access at scale using Entra ID, including RBAC, Conditional Access, and integration with downstream applications. Design, configure, and maintain enterprise networking and firewall infrastructure, including routing, WAN connectivity, and firewall administration across Boku's global sites. Support Privileged Access Management (PAM) using Delinea, including vault administration, access policy, and session management for privileged accounts, alongside the infrastructure team. Automation & AI-Driven Operations Develop and maintain Infrastructure-as-Code using Terraform for provisioning and configuration of Azure resources. Manage Power Platform environments, including environment strategy, governance, and access. Write scripts and tooling in Python and PowerShell to automate infrastructure tasks, reporting, and system…