Senior Infrastructure Engineer

WHY HARVEY At Harvey, we’re transforming how legal and professional services operate. By combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise, we’re reshaping how critical knowledge work gets done for decades to come. This is a rare chance to help build a generational company at a true inflection point. We have strong product-market fit and world-class investor support. We’re scaling fast and defining a new category in real time. The work is ambitious, the bar is high, and the opportunity for growth — personal, professional, and financial — is unmatched. Our team moves fast, takes ownership, and is deeply committed to the mission — operating with intensity, staying close to our customers, and pushing each other for excellence. We live by three values: Decisiveness, Simplicity, and Job's Not Finished. We act quickly on clear judgment over perfect information, we believe simplicity is what scales, and we're never satisfied with where we are. If you want to do the best work of your career alongside people who share that drive, we'd love to build with you. At Harvey, the future of professional services is being written today — and we’re just getting started.   ROLE OVERVIEW We're hiring a Sr. Infrastructure Engineer to own the shared layer that every Harvey IT system runs on. You'll join Core IT Engineering & Infrastructure, reporting to Dave Vega, Director of IT, alongside engineers who own identity and collaboration, Microsoft platforms, networking, and client platforms. Harvey is cloud-first. We run no servers or data centers of our own. Our IT infrastructure is cloud tenants, SaaS configuration, office networks across a growing global footprint, and the automation that ties them together. Today that cross-cutting work is done on the side by each platform owner. This role makes it someone's primary job, so it gets built once, done well, and doesn't break quietly. WHAT YOU'LL DO You'll own the shared infrastructure, automation and reliability work that cuts across every IT platform. - IT cloud accounts and tenants. Own access, guardrails and cost for the cloud accounts IT runs (AWS, Azure, GCP projects for IT tooling). Be the BizTech engineering partner to Security and Infrastructure on tenant-level changes, such as cloud migrations that touch Entra and M365. - Infrastructure as code for IT. Build and run the Git repos, CI pipelines and review process for IT configuration (Okta, Jamf, Intune, Google Workspace). Platform owners keep owning their config. You own the framework they all use. - IT automation and provisioning. Own the automation behind identity lifecycle and IT workflows: SCIM and provisioning flows, onboarding and offboarding orchestration across systems, and IT workflows in Serval. - Monitoring, backup and resilience. Set up health checks and alerting for critical IT systems and integrations, config drift detection, SaaS backup (Google, Slack, M365) and tested recovery runbooks. - Scripts and internal tooling. Take over the scripts and admin utilities that live on individual laptops today. Put them in source control, document them and keep them running. - Office site standard. Work with Network and AV/Media teams to define the repeatable technical template for new offices: configuration, monitoring and documentation each site copies. Network and AV build execution stays with their owners. - Engineering practices. Raise the bar on change control, documentation and runbooks across the pillar, so primaries and backups can cover for each other. - Certificates, domains and DNS. Track and renew every certificate IT depends on (Apple Push, SAML signing, SSL, Wi-Fi/802.1X). Work with Network and CorpSec teams to own and manage DNS NS solutions for IT. Build expi