Senior IT Engineer

Babylist is the leading platform for expecting and new families. More than 10 million people shop with Babylist every year, making it the go-to destination for seamless purchasing, guidance, and expert recommendations. As a modern, AI-forward tech company, Babylist has expanded from a universal registry into a full ecosystem — the Babylist Shop, Babylist Health, Babylist Money, NYC and LA showrooms, branded content, and more — generating $750M in revenue in 2025. Building the generational brand in baby, Babylist is reshaping the $235B kids and baby market and helping parents feel confident, connected, and cared for at every step.

Babylist is remote-first with team members across the U.S. and Canada who move fast, think smart, and use AI as part of how they work every day — not as an experiment, as an expectation. We come together twice a year to build the relationships behind the work, and we hire people who are genuinely excited about what's possible and prove it through how they show up.

Babylist is looking for a Senior IT Engineer to help strengthen the systems that keep our employees secure, productive, and able to move quickly. This role sits at the intersection of identity, access, endpoint management, and employee experience — with a heavier focus on building and evolving our IAM infrastructure as the company scales.

You'll own and improve the systems that manage authentication, provisioning, access lifecycle, and endpoint compliance across a primarily macOS, cloud-first environment. That includes deep hands-on work in Okta, partnering across the business, and building the operational foundation that keeps access secure without creating unnecessary friction for employees. You'll also support endpoint management initiatives across tools like Jamf, Intune to help ensure devices stay healthy, compliant, and easy to manage at scale.

This is a highly collaborative, hands-on role for someone who likes solving operational problems, tightening systems, and building infrastructure that quietly makes the entire company work better. If you prefer highly static environments with rigid playbooks already built, this role will feel uncomfortable — a big part of the job is improving systems while operating them.

• 7+ years in IT engineering or systems administration, with a track record of owning identity, access, and endpoint infrastructure in cloud-first environments — and a demonstrated ability to keep secure systems from becoming friction for the people who use them
• Deep experience designing and managing identity lifecycle workflows — provisioning, deprovisioning, access groups, MFA, API integrations, and entitlement management are familiar territory
• Hands-on Okta expertise across the full ecosystem, including Workflows, Device Trust, API Access Management, and SSO integrations across SaaS platforms
• Experience working with HRIS as a source of truth for identity — using employee data to drive provisioning, deprovisioning, and access lifecycle automation across the organization
• Experience administering Google Workspace at scale — managing users, groups, policies, and integrations across a distributed workforce
• Solid networking fundamentals with hands-on Cisco Meraki experience — you understand how DNS, DHCP, VLANs, firewalls, and VPNs fit together and can troubleshoot connectivity issues without needing someone else to translate
• Proven ability to troubleshoot complex issues independently and serve as a technical resource for the people around you — you stay calm in messy systems and work problems through to resolution
• Genuinely excited about what AI can do within IT — and already getting your hands on it. You're looking for ways to automate repetitive ops tasks, streamline access workflows, and bring smarter solutions to identity and device management. At Babylist, every team uses AI daily and we're looking for people who push it forward, not just follow it.

• Okta Certified Administrator and/or advanced Jamf certifications

• Own and evolve identity infrastructure — authentication policies, lifecycle management, and access governance across the company
• Manage provisioning, entitlement reviews, service accounts, and role-based permissions across business-critical systems
• Maintain and improve device management across a primarily macOS fleet, ensuring devices stay compliant, healthy, and easy to support at scale
• Strengthen MFA, device trust, and endpoint security controls while keeping employee workflows usable
• Partner with Security, IT, and business systems teams to integrate identity and endpoint tooling across SaaS applications and cloud platforms — including network infrastructure and Cisco Meraki administration across office and remote environments
• Support audits, access reviews, and system assessments to ensure alignment with security standards and operational policies
• Build scalable documentation, runbooks, and operational practices that make systems easier to support as the company grows
• Serve as a technical escalation point for the broader IT team — jumping in on complex issues, driving root-cause improvements, and actively investing in the growth and development of the people around you. And yes, that includes jumping into the helpdesk queue when the team needs it.

• We work with focus and intention, then step away to recharge
• We believe in exceptional management and invest in tools and opportunities to connect with colleagues
• We build products that positively impact millions of people's lives
• AI is intentionally embedded in how we work, create, and scale—supporting innovation and impact

• Competitive pay and meaningful opportunities for career advancement
• We believe technology and data can solve hard problems
• We're committed to career progression and performance-based advancement

Recorded Interviews. Babylist uses an interview recording tool to record and transcribe interviews for evaluation purposes in accordance with applicable privacy laws. By participating in an interview, you consent to this recording and transcription.

Interview Integrity. AI is part of how we work at Babylist — we expect you to use it too. Your application and interviews should still reflect you and your own thinking. We'll tell you when AI is encouraged. Misrepresentation at any stage may result in removal from consideration for this and future roles.

Connections at Babylist. If you have a family member or close personal relationship with a current Babylist employee, please let your recruiter know. This helps us keep our process fair and transparent for everyone.

Protect Yourself from Scams. All official outreach comes from the Babylist Talent Team via @babylist.com email addresses only. We will never ask for payment or personal financial information. If you receive outreach via WhatsApp, Telegram, or a non-Babylist email — it's not us. Verify open roles at babylist.com/careers.