This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Sr. IT Systems Engineer based in the United States.
The Sr. IT Systems Engineer will shape and scale the identity, endpoint, and SaaS infrastructure supporting a global, remote-first workforce. This role combines hands-on technical engineering with architectural ownership, giving you the opportunity to define how employees and devices securely access essential systems. You will lead major initiatives across identity management, endpoint modernization, automation, and zero-trust security while partnering closely with Information Security and other business teams. You will also serve as a senior technical escalation point, guiding incident response and resolving complex infrastructure challenges. Through engineering standards, documentation, and mentorship, you will strengthen the team's capabilities and help build reliable, secure systems that support continued global growth.
Accountabilities
• Architect, manage, and continuously improve identity, endpoint, and SaaS platforms, including Okta, JAMF, Intune, and Google Workspace, with a focus on security, reliability, and employee experience.
• Lead the design and rollout of major IT initiatives, including zero-trust access models, device compliance frameworks, and global endpoint standards.
• Develop and maintain automation and infrastructure-as-code solutions for configuration, provisioning, and technology lifecycle management at scale.
• Partner with Information Security to implement security controls, manage vulnerabilities, and maintain audit readiness for SOC 2, HIPAA, and customer security reviews.
• Act as the senior technical escalation point for complex or high-impact incidents, leading response efforts and root cause analysis.
• Establish engineering standards, operational runbooks, and technical documentation while mentoring IT colleagues and strengthening the team's technical expertise.
• Evaluate vendors and technology solutions, develop business cases, and provide recommendations on build-versus-buy decisions.
• Design secure and efficient remote computing environments that meet the needs of global care and operations teams.
• Contribute to the IT roadmap and communicate priorities, risks, technical decisions, and project progress to business and technical stakeholders.
• Deliver measurable improvements in platform architecture, security posture, automation, employee experience, and operational efficiency.
Requirements:
• 6+ years of experience in IT systems engineering, endpoint engineering, or infrastructure roles, including ownership of production platforms.
• Deep hands-on expertise with identity and access management platforms such as Okta, including SSO, SCIM, lifecycle automation, and conditional access.
• Advanced experience managing Mac and Windows device fleets through JAMF and Intune, including application packaging, deployment, security policies, and compliance enforcement.
• Strong scripting and automation skills using languages such as Python, Bash, or PowerShell, with experience working with APIs and source-controlled configurations.
• Experience designing and implementing security controls, including encryption, vulnerability management, and zero-trust principles, in collaboration with Information Security teams.
• Proven ability to lead cross-functional technical projects from initial design through implementation and rollout, including influencing stakeholders without direct authority.
• Experience mentoring, coaching, or providing technical guidance to other engineers.
• Excellent written and verbal communication skills, with the ability to explain complex technical concepts and tradeoffs to executive and non-technical audiences.
• Strong ownership, analytical thinking, and problem-solving skills, with the ability to balance strategic architecture decisions and hands-on technical delivery.
Nice to have:
• Experience in healthcare, health technology, or another regulated environment, with familiarity with HIPAA or SOC 2 requirements.
• Experience applying infrastructure-as-code and CI/CD practices to endpoint or SaaS configuration management.
• Hands-on experience with AWS or GCP and modern cloud networking concepts.
• Experience designing remote computing environments for call center or clinical operations teams, including virtual desktop infrastructure (VDI) or managed browser solutions.
• Experience developing AI-assisted workflows or tools to improve IT operations.
• Relevant certifications, such as JAMF Certified Expert, Okta Certified Professional, or Microsoft Endpoint Administrator.
Benefits:
• Base salary range of $150,000–$175,000, with a geographic adjustment of up to $190,000 for highly experienced candidates located within 50 miles of San Francisco, New York City, or Seattle.
• Competitive compensation package, including short- and long-term incentives.
• Equity compensation.
• Comprehensive health and wellness benefits.
• Retirement savings plans.
• Flexible Time Off, supported by a culture that encourages employees to recharge.
• Comprehensive parental leave and family-forming assistance.
• Opportunity to contribute to a mission-driven organization focused on expanding access to fertility and family-forming care worldwide.
• A high-growth, collaborative, and inclusive environment where employees can shape strategy and make a meaningful impact.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
