Описание вакансии
Коротко о ролиIT Systems Engineer to design, scale, and secure the identity, endpoint, and SaaS platforms that power our global, remote-first workforce. You will set the technical direction for how employees and devices connect to Carrot systems, while staying hands-on in the tooling, automation, and complex problem-solving that make IT reliable at scale.
Responsibilities:
— Architect and own Carrot's identity, endpoint, and SaaS platforms, including Okta, JAMF, Intune, and Google Workspace, focusing on security, reliability, and user experience.
— Lead design and rollout of major IT initiatives such as zero-trust access models, device compliance frameworks, and global endpoint standards.
— Build and maintain automation and infrastructure as code for configuration, provisioning, and lifecycle workflows at scale.
— Partner with Information Security to design controls, manage vulnerabilities, and maintain audit readiness for SOC 2, HIPAA, and customer security reviews.
— Serve as senior technical escalation point, leading incident response and root cause analysis for complex issues.
— Define engineering standards, runbooks, documentation, and mentor IT teammates to enhance technical skills.
— Evaluate vendors and tools, build business cases, and recommend build versus buy decisions.
— Design environments supporting global care and operations teams, including secure remote computing setups.
— Contribute to the IT roadmap and communicate priorities, risks, and progress to stakeholders.
Requirements:
— 6+ years in IT systems engineering, endpoint engineering, or infrastructure roles with production platform ownership.
— Deep hands-on expertise with identity and access platforms like Okta (SSO, SCIM, lifecycle automation, conditional access).
— Expert experience managing Mac and Windows fleets with JAMF and Intune, including packaging, deployment, security policy, and compliance enforcement.
— Strong scripting and automation skills (Python, Bash, PowerShell), experience with APIs and source-controlled configuration.
— Experience designing and implementing security controls such as encryption, vulnerability management, and zero-trust principles in collaboration with Security teams.
— Proven leadership of cross-functional technical projects from design through rollout without direct authority.
— Experience mentoring or guiding other engineers technically.
— Strong communication skills to explain complex tradeoffs to executive and non-technical audiences.
Nice to Have:
— Experience in healthcare, health tech, or regulated environments (HIPAA, SOC 2).
— Experience with infrastructure as code and CI/CD applied to endpoint or SaaS configuration.
— Hands-on experience with AWS or GCP and modern cloud networking.
— Experience designing remote computing environments for call center or clinical operations (VDI, managed browser models).
— Experience building AI-assisted workflows or tooling to improve IT operations.
— Relevant certifications such as JAMF Certified Expert, Okta Certified Professional, or Microsoft Endpoint Administrator.
Benefits:
— Competitive compensation with base salary range $150,000 – $175,000 per year, up to $190,000 for candidates near San Francisco, NYC, or Seattle.
— Equity and comprehensive benefits including health and wellness, retirement savings, parental leave, and family-forming assistance.
— Flexible Time Off and a culture encouraging employee recharge.
— Opportunity to work remotely in a high-growth healthcare company focused on fertility and family care globally.
Language: English.