SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 150,000 - 190,000 / annual
Carrot Fertility is seeking a Senior IT Systems Engineer to design, scale, and secure the identity, endpoint, and SaaS platforms that power their global, remote-first workforce. This is a hands-on technical leadership role where you will set the technical direction for how employees and devices connect to Carrot systems while remaining deeply involved in tooling, automation, and complex problem-solving.
You will own Carrot's identity, endpoint, and SaaS platforms including Okta, JAMF, Intune, and Google Workspace, with a focus on security, reliability, and user experience. Key responsibilities include architecting and leading the design and rollout of larger IT initiatives such as zero-trust access models, device compliance frameworks, and global endpoint standards. You will build and maintain automation and infrastructure as code that manages configuration, provisioning, and lifecycle workflows at scale.
This role partners closely with Information Security to design controls, drive vulnerability management, and keep Carrot audit-ready for SOC 2, HIPAA, and customer security reviews. You will serve as the senior technical escalation point, leading incident response and root cause analysis for complex or high-impact issues. Additionally, you will define engineering standards, runbooks, and documentation, and mentor IT teammates to grow their technical depth.
You will evaluate vendors and tools, build business cases, and make clear recommendations on build versus buy tradeoffs. You will design environments that support global care and operations teams, including secure and efficient remote computing setups, and contribute to the IT roadmap while communicating priorities, risks, and progress to technical and business stakeholders.
In your first 12–18 months, success means establishing clear, documented architecture and standards for identity, endpoint, and SaaS management; delivering at least one major platform initiative with measurable gains in security posture and employee experience; reducing manual IT work through automation with measurable drops in recurring ticket volume; strengthening audit readiness; raising technical capability of the team through mentorship and documentation; and building trusted partnerships across Information Security, People, Engineering, and Finance.
Carrot is the leading global fertility and family care platform, built on intelligent care orchestration. More than a thousand multinational employers, health plans, and health systems trust Carrot to support millions of members across 195 countries. The company has received recognition including Fast Company's Most Innovative Companies and CNBC's 100 Barrier Breaking Startups.
**Requirements:**
- 6+ years of experience in IT systems engineering, endpoint engineering, or infrastructure roles, including ownership of production platforms
- Deep, hands-on expertise with identity and access platforms such as Okta, including SSO, SCIM, lifecycle automation, and conditional access
- Expert-level experience managing Mac and Windows fleets with JAMF and Intune, including packaging, deployment, security policy, and compliance enforcement
- Strong scripting and automation skills (Python, Bash, or PowerShell), with experience using APIs and source-controlled configuration
- Experience designing and implementing security controls such as encryption, vulnerability management, and zero-trust principles in partnership with Security teams
- Track record of leading cross-functional technical projects from design through rollout without direct authority
- Experience mentoring or technically guiding other engineers
- Strong written and verbal communication skills, with ability to translate complex tradeoffs for executive and non-technical audiences
**Nice to Have:**
- Experience in healthcare, health tech, or another regulated environment (HIPAA or SOC 2)
- Experience with infrastructure as code and CI/CD practices applied to endpoint or SaaS configuration
- Hands-on experience with AWS or GCP and modern cloud networking concepts
- Experience designing remote computing environments for call center or clinical operations teams, such as VDI or managed browser models
- Experience building AI-assisted workflows or tooling to improve IT operations
- Relevant certifications (JAMF Certified Expert, Okta Certified Professional, or Microsoft Endpoint Administrator)
