Senior IT Engineer, Babylist

• This is a highly collaborative, hands-on role for someone who likes solving operational problems, tightening systems, and building infrastructure that quietly makes the entire company work better. If you prefer highly static environments with rigid playbooks already built, this role will feel uncomfortable — a big part of the job is improving systems while operating them
• 7+ years in IT engineering or systems administration, with a track record of owning identity, access, and endpoint infrastructure in cloud-first environments — and a demonstrated ability to keep secure systems from becoming friction for the people who use them
• Deep experience designing and managing identity lifecycle workflows — provisioning, deprovisioning, access groups, MFA, API integrations, and entitlement management are familiar territory
• Hands-on Okta expertise across the full ecosystem, including Workflows, Device Trust, API Access Management, and SSO integrations across SaaS platforms
• Experience working with HRIS as a source of truth for identity — using employee data to drive provisioning, deprovisioning, and access lifecycle automation across the organization
• Experience administering Google Workspace at scale — managing users, groups, policies, and integrations across a distributed workforce
• Solid networking fundamentals with hands-on Cisco Meraki experience — you understand how DNS, DHCP, VLANs, firewalls, and VPNs fit together and can troubleshoot connectivity issues without needing someone else to translate
• Proven ability to troubleshoot complex issues independently and serve as a technical resource for the people around you — you stay calm in messy systems and work problems through to resolution
• Genuinely excited about what AI can do within IT — and already getting your hands on it. You're looking for ways to automate repetitive ops tasks, streamline access workflows, and bring smarter solutions to identity and device management. At Babylist, every team uses AI daily and we're looking for people who push it forward, not just follow it

Desirable

• Babylist is looking for a Senior IT Engineer to help strengthen the systems that keep our employees secure, productive, and able to move quickly. This role sits at the intersection of identity, access, endpoint management, and employee experience — with a heavier focus on building and evolving our IAM infrastructure as the company scales
• You'll own and improve the systems that manage authentication, provisioning, access lifecycle, and endpoint compliance across a primarily macOS, cloud-first environment. That includes deep hands-on work in Okta, partnering across the business, and building the operational foundation that keeps access secure without creating unnecessary friction for employees
• You'll also support endpoint management initiatives across tools like Jamf, Intune to help ensure devices stay healthy, compliant, and easy to manage at scale
• Own and evolve identity infrastructure — authentication policies, lifecycle management, and access governance across the company
• Manage provisioning, entitlement reviews, service accounts, and role-based permissions across business-critical systems
• Maintain and improve device management across a primarily macOS fleet, ensuring devices stay compliant, healthy, and easy to support at scale
• Strengthen MFA, device trust, and endpoint security controls while keeping employee workflows usable
• Partner with Security, IT, and business systems teams to integrate identity and endpoint tooling across SaaS applications and cloud platforms — including network infrastructure and Cisco Meraki administration across office and remote environments
• Support audits, access reviews, and system assessments to ensure alignment with security standards and operational policies
• Build scalable documentation, runbooks, and operational practices that make systems easier to support as the company grows
• Serve as a technical escalation point for the broader IT team — jumping in on complex issues, driving root-cause improvements, and actively investing in the growth and development of the people around you. And yes, that includes jumping into the helpdesk queue when the team needs it