Carrotfertility Sr. IT Systems Engineer responsible for designing, scaling, and securing identity, endpoint, and SaaS platforms for a global remote-first workforce. Lead IT initiatives, partner with Information Security, and mentor IT team members.
Responsibilities
Carrot is looking for a Sr. IT Systems Engineer to design, scale, and secure the identity, endpoint, and SaaS platforms that power our global, remote-first workforce. You will set the technical direction for how employees and devices connect to Carrot systems, while staying hands-on in the tooling, automation, and complex problem-solving that make IT reliable at scale.
This role sits at the center of IT engineering. You will lead larger initiatives from design through rollout, partner closely with Information Security on zero-trust and compliance priorities, and raise the bar for the rest of the team through standards, documentation, and mentorship. If you want broad technical ownership, influence over the IT roadmap, and the chance to build systems that grow with a high-growth healthcare company, this role was built for that.
What You’ll Own 💼
Architect and own Carrot's identity, endpoint, and SaaS platforms, including Okta, JAMF, Intune, and Google Workspace, with a focus on security, reliability, and user experience
Lead design and rollout of larger IT initiatives, such as zero-trust access models, device compliance frameworks, and global endpoint standards
Build and maintain automation and infrastructure as code that manage configuration, provisioning, and lifecycle workflows at scale
Partner with Information Security to design controls, drive vulnerability management, and keep Carrot audit-ready for SOC 2, HIPAA, and customer security reviews
Serve as the senior technical escalation point, leading incident response and root cause analysis for complex or high-impact issues
Define engineering standards, runbooks, and documentation, and mentor IT teammates to grow their technical depth
Evaluate vendors and tools, build business cases, and make clear recommendations on build versus buy tradeoffs
Design environments that support global care and operations teams, including secure and efficient remote computing setups
Contribute to the IT roadmap and communicate priorities, risks, and progress to technical and business stakeholders
Qualification
You likely haveDeepWhile not requiredExperience in healthcareWhy This Role Matters 🧡
Required
You likely have:
6+ years of experience in IT systems engineering, endpoint engineering, or infrastructure roles, including ownership of production platforms
Deep, hands-on expertise with identity and access platforms such as Okta, including SSO, SCIM, lifecycle automation, and conditional access
Expert-level experience managing Mac and Windows fleets with JAMF and Intune, including packaging, deployment, security policy, and compliance enforcement
Strong scripting and automation skills (for example Python, Bash, or PowerShell), with experience using APIs and source-controlled configuration
Experience designing and implementing security controls, such as encryption, vulnerability management, and zero-trust principles, in partnership with Security teams
A track record of leading cross-functional technical projects from design through rollout without direct authority
Experience mentoring or technically guiding other engineers
Strong written and verbal communication skills, with the ability to translate complex tradeoffs for executive and non-technical audiences
Preferred
While not required, we would be especially excited if you bring:
Experience in healthcare, health tech, or another regulated environment (for example, HIPAA or SOC 2)
Experience with infrastructure as code and CI/CD practices applied to endpoint or SaaS configuration
Hands-on experience with AWS or GCP and modern cloud networking concepts
Experience designing remote computing environments for call center or clinical operations teams, such as VDI or managed browser models
Experience building AI-assisted workflows or tooling to improve IT operations
Relevant certifications (for example JAMF Certified Expert, Okta Certified Professional, or Microsoft Endpoint Administrator)