All remote jobs

Sr. IT Systems Engineer

Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move.

Remote from
USA
Salary
USD 150k–175k / yr
Employment
Full Time
Experience
Director
Published
Apply before
20 Nov 2026
Listing views
26
Application actions
0
Application toolkit

Make your next move.

Prepare your resume, explore your fit, and draft a cover letter for this opportunity.

AI Summary

The role, at a glance.

Carrot seeks a senior IT Systems Engineer to own and scale identity, endpoint, and SaaS platforms for a global remote-first workforce. The role leads architecture and rollout work across Okta, JAMF, Intune, Google Workspace, automation, device compliance, and zero-trust controls. This engineer will partner closely with Information Security, lead complex incident response, support SOC 2 and HIPAA readiness, and establish technical standards. Success requires strong hands-on systems engineering expertise, cross-functional leadership, mentoring, and clear communication with both technical and business stakeholders.

Role DNA

A quick view of the complexity, pace, ownership and collaboration implied by the job description.

Job Complexity

5/5
EasyHard

Pace & Pressure

4/5
RelaxedFast-paced

Autonomy Level

5/5
GuidedFull ownership

Communication Load

5/5
IndependentCollaborative
AI insightThis is a senior, high-ownership role responsible for security-critical production platforms, global endpoint management, and complex technical initiatives. It requires deep expertise across identity, automation, compliance, incident response, and stakeholder leadership.

Salary analysis

Estimated compensation compared with the broader US market for similar roles.

Estimated job median (per year)Market rate
$162,500
US market range (per year)$150k–$190k
AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. The employer explicitly provides a primary base salary range of $150,000–$175,000 USD. The annual cadence is inferred from the stated base-salary amount and the senior full-time US technology role; the posting also describes geo-tier compensation up to $190,000 for certain highly experienced candidates near San Francisco, NYC, or Seattle. Estimated US market compensation for this senior IT systems engineering role is approximately $150,000–$190,000 per year.

Core skills

Skills and capabilities most closely associated with this opportunity.

Sample interview questions
How would you design a scalable identity lifecycle process using Okta for a growing global workforce?

I would define authoritative HR-driven identity sources, automate joiner-mover-leaver workflows through SCIM and APIs, apply role-based access controls, and enforce conditional access policies. I would also document exception handling, monitor provisioning failures, and regularly review access and application ownership.

Describe your approach to managing both macOS and Windows endpoint fleets securely.

I would use JAMF and Intune to establish baseline configurations, encryption, patching, application deployment, compliance controls, and device inventory. I would phase policy changes through testing rings, monitor deployment health, and provide clear self-service and support documentation to protect employee experience.

How would you lead a zero-trust access initiative across SaaS applications and endpoints?

I would begin with an inventory of identities, devices, applications, data sensitivity, and current access paths. From there, I would prioritize strong authentication, managed-device posture checks, least-privilege access, segmented application controls, logging, and measurable adoption milestones while partnering closely with Security and business owners.

Tell us about how you would handle a high-impact IT incident involving identity or endpoint access.

I would first contain the issue and establish an incident command structure with clear stakeholder updates. After restoring service safely, I would conduct root-cause analysis, document contributing factors, implement corrective actions, and update runbooks, monitoring, and preventive controls.

How do you communicate complex infrastructure tradeoffs to non-technical leaders?

I frame options around business impact, risk, cost, operational effort, and employee experience rather than implementation details alone. I present a clear recommendation, explain the consequences of delaying action, and use concise metrics and milestones to make decisions transparent.

This analysis is generated from the job description. Salary estimates, role characteristics and sample answers are guidance, not employer-provided facts.
Opportunity details

About this role.

About Carrot:

Carrot is the leading global fertility and family care platform, built on intelligent care orchestration: the right clinical guidance, at the right moment, in the context of each member’s life. More than a thousand multinational employers, health plans, and health systems trust Carrot to support millions of members across 195 countries – from pre-pregnancy through menopause and major life moments in between. Carrot’s comprehensive clinical program delivers industry-leading cost savings for plan sponsors and award-winning experiences and improved outcomes for millions of people worldwide.

Carrot is widely regarded as a defining force in healthcare innovation as a recipient of several top-tier awards, including Fast Company’s ‘Most Innovative Companies’ and CNBC’s ‘100 Barrier Breaking Startups’. The company is regularly cited by leading global outlets — including The Economist, Bloomberg, The Wall Street Journal, NPR, ABC News, and Harvard Business Review — as a leading voice on digital health, the future of work, and family health. Learn more at get-carrot.com.

The Opportunity 🚀

Carrot is looking for a Sr. IT Systems Engineer to design, scale, and secure the identity, endpoint, and SaaS platforms that power our global, remote-first workforce. You will set the technical direction for how employees and devices connect to Carrot systems, while staying hands-on in the tooling, automation, and complex problem-solving that make IT reliable at scale.

This role sits at the center of IT engineering. You will lead larger initiatives from design through rollout, partner closely with Information Security on zero-trust and compliance priorities, and raise the bar for the rest of the team through standards, documentation, and mentorship. If you want broad technical ownership, influence over the IT roadmap, and the chance to build systems that grow with a high-growth healthcare company, this role was built for that.

What You’ll Own 💼

In this role, you will:

  • Architect and own Carrot’s identity, endpoint, and SaaS platforms, including Okta, JAMF, Intune, and Google Workspace, with a focus on security, reliability, and user experience
  • Lead design and rollout of larger IT initiatives, such as zero-trust access models, device compliance frameworks, and global endpoint standards
  • Build and maintain automation and infrastructure as code that manage configuration, provisioning, and lifecycle workflows at scale
  • Partner with Information Security to design controls, drive vulnerability management, and keep Carrot audit-ready for SOC 2, HIPAA, and customer security reviews
  • Serve as the senior technical escalation point, leading incident response and root cause analysis for complex or high-impact issues
  • Define engineering standards, runbooks, and documentation, and mentor IT teammates to grow their technical depth
  • Evaluate vendors and tools, build business cases, and make clear recommendations on build versus buy tradeoffs
  • Design environments that support global care and operations teams, including secure and efficient remote computing setups
  • Contribute to the IT roadmap and communicate priorities, risks, and progress to technical and business stakeholders

What Success Looks Like 📈

In your first 12–18 months, you will have:

  • Established a clear, documented architecture and standards for identity, endpoint, and SaaS management that the team can build on
  • Delivered at least one major platform initiative, such as a zero-trust access model or endpoint modernization, with measurable gains in security posture and employee experience
  • Reduced manual IT work through automation and infrastructure as code, with a measurable drop in recurring ticket volume
  • Strengthened audit readiness, contributing to clean results on security and compliance reviews
  • Raised the technical capability of the team through mentorship, documentation, and shared standards
  • Built trusted partnerships with Information Security, People, Engineering, and Finance

About You ✨

You likely have:

  • 6+ years of experience in IT systems engineering, endpoint engineering, or infrastructure roles, including ownership of production platforms
  • Deep, hands-on expertise with identity and access platforms such as Okta, including SSO, SCIM, lifecycle automation, and conditional access
  • Expert-level experience managing Mac and Windows fleets with JAMF and Intune, including packaging, deployment, security policy, and compliance enforcement
  • Strong scripting and automation skills (for example Python, Bash, or PowerShell), with experience using APIs and source-controlled configuration
  • Experience designing and implementing security controls, such as encryption, vulnerability management, and zero-trust principles, in partnership with Security teams
  • A track record of leading cross-functional technical projects from design through rollout without direct authority
  • Experience mentoring or technically guiding other engineers
  • Strong written and verbal communication skills, with the ability to translate complex tradeoffs for executive and non-technical audiences

Nice to Have ⭐

While not required, we would be especially excited if you bring:

  • Experience in healthcare, health tech, or another regulated environment (for example, HIPAA or SOC 2)
  • Experience with infrastructure as code and CI/CD practices applied to endpoint or SaaS configuration
  • Hands-on experience with AWS or GCP and modern cloud networking concepts
  • Experience designing remote computing environments for call center or clinical operations teams, such as VDI or managed browser models
  • Experience building AI-assisted workflows or tooling to improve IT operations
  • Relevant certifications (for example JAMF Certified Expert, Okta Certified Professional, or Microsoft Endpoint Administrator)

Why This Role Matters 🧡

Every Carrot employee depends on technology that is secure, reliable, and easy to use, whether they are supporting members through deeply personal care journeys or partnering with global employers. This role sets the technical foundation that makes that possible.

As Carrot continues to scale across geographies and functions, the architecture and standards you establish will protect member trust, strengthen our security posture, and give the business the speed and confidence to keep growing.

Why Candidates Join Carrot 🌍

Carrot offers the opportunity to do meaningful work in service of a deeply human mission.

Highlights include:

  • A mission-driven company focused on expanding access to fertility and family-forming care globally.
  • A high-growth environment where leaders are empowered to shape strategy and drive impact.
  • Competitive compensation, equity, and comprehensive benefits.
  • Flexible Time Off and a culture that actively encourages employees to recharge.
  • Comprehensive parental leave and family-forming benefits.
  • A collaborative, inclusive, and values-driven culture.
  • The opportunity to work alongside passionate, thoughtful teammates committed to improving healthcare outcomes worldwide.

Compensation💰

Carrot offers a holistic Total Rewards package designed to support our employees in all aspects of their lives inside and outside of work, including health and wellness benefits, retirement savings plans, short- and long-term incentives, parental leave, family-forming assistance, and a competitive compensation package.

  • Base Salary Range: $150,000 – $175,000 (primary range).
  • Geo-Tier Adjustment: Up to $190,000 for highly experienced candidates within 50 miles of San Francisco, NYC, or Seattle.

Actual compensation may vary from the posted base salary depending on your confirmed job-related skills and experience.

Fraud and Security Notice: Please note that all communication regarding job opportunities at Carrot will come exclusively from an @get-carrot.com email address. If you receive messages from any other domain, please disregard them and report the incident to: securityreporting@get-carrot.com

A Note on AI

At Carrot, we believe AI can help us work smarter, move faster, and create more meaningful experiences for our members, customers, and each other. While not every role requires deep technical AI expertise, we value people who are curious, eager to learn, and excited to thoughtfully incorporate AI into their day-to-day work.

For some roles, AI fluency is a core requirement—and we’ll call that out clearly in the qualifications. For everyone else, we’re looking for people who embrace new ways of working, use AI responsibly to improve quality and efficiency, and continue to learn as the technology evolves.

Why Carrot?

Carrot has received national and international recognition for its pioneering work, including Fast Company’s Most Innovative Companies and World Changing Ideas, Inc. Power Partners, and Modern Healthcare’s Innovators. Carrot’s global workforce has been acknowledged with several accolades, including Fortune’s Best Workplaces in Healthcare, Great Place to Work, and Age-Friendly Employer certifications. Carrot is regularly featured in media reporting on issues related to the future of work, women in leadership, and healthcare innovation, including MSNBC, The Economist, Bloomberg, The Wall Street Journal, CNBC, National Public Radio, Harvard Business Review, and more. Learn more at carrotfertility.com.

Apply now >

This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.

Next step

Apply now.

Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.

Did you apply?Let us know, and we’ll help you track your application.

Continue on the employer website

Protect your personal information and never pay to secure an interview or job offer. .

Log in to save
One quick step before you apply

Sign in to continue.

Sign in or create a free account to continue to the employer's application.

Applying is free. After signing in, return to this job and select Apply Now.
Add alert
Jobs Talent AI Tools Salaries
Menu