Sr. IT Systems Engineer

Accountabilities: Architect, manage, and continuously improve identity, endpoint, and SaaS platforms, including Okta, JAMF, Intune, and Google Workspace, with a focus on security, reliability, and employee experience. Lead the design and rollout of major IT initiatives, including zero-trust access models, device compliance frameworks, and global endpoint standards. Develop and maintain automation and infrastructure-as-code solutions for configuration, provisioning, and technology lifecycle management at scale. Partner with Information Security to implement security controls, manage vulnerabilities, and maintain audit readiness for SOC 2, HIPAA, and customer security reviews. Act as the senior technical escalation point for complex or high-impact incidents, leading response efforts and root cause analysis. Establish engineering standards, operational runbooks, and technical documentation while mentoring IT colleagues and strengthening the team's technical expertise. Evaluate vendors and technology solutions, develop business cases, and provide recommendations on build-versus-buy decisions. Design secure and efficient remote computing environments that meet the needs of global care and operations teams. Contribute to the IT roadmap and communicate priorities, risks, technical decisions, and project progress to business and technical stakeholders. Deliver measurable improvements in platform architecture, security posture, automation, employee experience, and operational efficiency. Requirements: 6+ years of experience in IT systems engineering, endpoint engineering, or infrastructure roles, including ownership of production platforms. Deep hands-on expertise with identity and access management platforms such as Okta, including SSO, SCIM, lifecycle automation, and conditional access. Advanced experience managing Mac and Windows device fleets through JAMF and Intune, including application packaging, deployment, security policies, and compliance enforcement. Strong scripting and automation skills using languages such as Python, Bash, or PowerShell, with experience working with APIs and source-controlled configurations. Experience designing and implementing security controls, including encryption, vulnerability management, and zero-trust principles, in collaboration with Information Security teams. Proven ability to lead cross-functional technical projects from initial design through implementation and rollout, including influencing stakeholders without direct authority. Experience mentoring, coaching, or providing technical guidance to other engineers. Excellent written and verbal communication skills, with the ability to explain complex technical concepts and tradeoffs to executive and non-technical audiences. Strong ownership, analytical thinking, and problem-solving skills, with the ability to balance strategic architecture decisions and hands-on technical delivery. Nice to have: Experience in healthcare, health technology, or another regulated environment, with familiarity with HIPAA or SOC 2 requirements. Experience applying infrastructure-as-code and CI/CD practices to endpoint or SaaS configuration management. Hands-on experience with AWS or GCP and modern cloud networking concepts. Experience designing remote computing environments for call center or clinical operations teams, including virtual desktop infrastructure (VDI) or managed browser solutions. Experience developing AI-assisted workflows or tools to improve IT operations. Relevant certifications, such as JAMF Certified Expert, Okta Certified Professional, or Microsoft Endpoint Administrator. Benefits: Base salary range of $150,000–$175,000, with a geographic adjustment of up to $190,000 for highly experienced candidates located within 50 miles of San Francisco, New York City, or Seattle. Competitive compensation package, including short- and long-term incentives. Equity compensation. Comprehensive health and wellness benefits. Retirement savings plans. Flexible Time Off, supported by a culture that encourages employees to recharge. Comprehensive parental leave and family-forming assistance. Opportunity to contribute to a mission-driven organization focused on expanding access to fertility and family-forming care worldwide. A high-growth, collaborative, and inclusive environment where employees can shape strategy and make a meaningful impact.