Carrot - Sr. IT Systems Engineer

• Architect and own Carrot's identity, endpoint, and SaaS platforms, including Okta, JAMF, Intune, and Google Workspace, with a focus on security, reliability, and user experience • Lead design and rollout of larger IT initiatives, such as zero-trust access models, device compliance frameworks, and global endpoint standards • Build and maintain automation and infrastructure as code that manage configuration, provisioning, and lifecycle workflows at scale • Partner with Information Security to design controls, drive vulnerability management, and keep Carrot audit-ready for SOC 2, HIPAA, and customer security reviews • Serve as the senior technical escalation point, leading incident response and root cause analysis for complex or high-impact issues • Define engineering standards, runbooks, and documentation, and mentor IT teammates to grow their technical depth • Evaluate vendors and tools, build business cases, and make clear recommendations on build versus buy tradeoffs • Design environments that support global care and operations teams, including secure and efficient remote computing setups • Contribute to the IT roadmap and communicate priorities, risks, and progress to technical and business stakeholders • What Success Looks Like  📈 • What Success Looks Like • In your first 12–18 months, you will have: • Established a clear, documented architecture and standards for identity, endpoint, and SaaS management that the team can build on • Delivered at least one major platform initiative, such as a zero-trust access model or endpoint modernization, with measurable gains in security posture and employee experience • Reduced manual IT work through automation and infrastructure as code, with a measurable drop in recurring ticket volume • Strengthened audit readiness, contributing to clean results on security and compliance reviews • Raised the technical capability of the team through mentorship, documentation, and shared standards • Built trusted partnerships with Information Security, People, Engineering, and Finance • You likely have: • 6+ years of experience in IT systems engineering, endpoint engineering, or infrastructure roles, including ownership of production platforms • Deep, hands-on expertise with identity and access platforms such as Okta, including SSO, SCIM, lifecycle automation, and conditional access • Expert-level experience managing Mac and Windows fleets with JAMF and Intune, including packaging, deployment, security policy, and compliance enforcement • Strong scripting and automation skills (for example Python, Bash, or PowerShell), with experience using APIs and source-controlled configuration • Experience designing and implementing security controls, such as encryption, vulnerability management, and zero-trust principles, in partnership with Security teams • A track record of leading cross-functional technical projects from design through rollout without direct authority • Experience mentoring or technically guiding other engineers • Strong written and verbal communication skills, with the ability to translate complex tradeoffs for executive and non-technical audiences