System Engineer [Contract to Hire]

Job Description:

Who We Are:

We’re Cart.com, one of the fastest growing commerce enablement companies in the world. We provide the digital and physical infrastructure that empowers thousands of leading B2C, B2B and public sector organizations to unify commerce operations from product discovery to product delivery.

We’re building toward a world where commerce has no bounds. Our enterprise-grade software, services and logistics infrastructure, including our own network of omnichannel fulfillment and distribution centers, enable merchants to navigate an increasingly complex operating landscape and drive efficient growth.

Our goal is to be the global backbone of commerce. To achieve it, we’re looking for entrepreneurial, innovative and determined teammates who are eager to help our growing base of customers simplify their commerce operations and seamlessly reach their own customers, wherever they are. Sound like you? We’d love to hear from you.

Cart.com Fast Facts:

• 6,000+ customers worldwide

• 1,600+ employees globally

• 17 warehouses nationwide, totaling over 10 million square feet of space

• Headquartered in Houston, TX with international offices in Mexico and Poland

Our values:

Cart.com is building a company that is committed to living out these 6 core values:

• Be brand obsessed: Our lives are shaped by the brands we interact with daily. We obsess over the brands we serve, and about the things they care about.

• Think beyond the box: “We’ve always done it that way” is not a phrase uttered often at our office. We create creative solutions to complex problems.

• Don’t give up: We learn from our challenges and see them for what they are; great building blocks to an amazing brand story.

• Speak up: We communicate clearly and directly because we care deeply. Communication is the bedrock of our community.

• Work together: We’ve built a team that prides itself on diversity of thought and background. Collaboration is better with contrast.

• Remember to be human: We work hard, but we leave room for the people, places and things that we love.

This position is open to applicants or individuals who are located in or willing to move to AZ, CA, CO, CT, DE, FL, GA, HI, IL, IN, KY, MD, MA, MI, MS, NE, NV, NJ, NY, NC,OH, OR, PA, SC, TN, TX, UT, VA, WA.

The Role:  

The System Engineer for Endpoint Management is responsible for the administration, monitoring, reliability, and security of endpoint detection and response (EDR/XDR) and patch management platforms for Cart.com. This role ensures the availability, performance, security, and compliance of corporate endpoints, servers, cloud workloads, and Kubernetes environments. This role is also skilled in leveraging emerging AI-driven security capabilities to improve threat detection, response efficiencies, and overall operational decision-making.

You will serve as the technical authority for SentinelOne, collaborating closely with Cybersecurity Operations, Infrastructure, and Application teams to reduce risk through proactive monitoring, disciplined patch management, automation, and intelligent Cybersecurity tooling.

What You’ll Do:

XDR / Endpoint Security Operations

• Own and administer the SentinelOne platform across workstations, servers, and Kubernetes workloads.

• Ensure SentinelOne agents are deployed, healthy, and running supported versions across all environments (Windows, macOS, Linux, Kubernetes).

• Evaluate and adopt emerging AI‑powered security features and tooling to enhance detection fidelity and reduce operational noise.

• Monitor the SentinelOne management console for agent health, policy compliance, and security events; troubleshoot and remediate issues as needed.

• Stay current on SentinelOne releases, features, and advisories; plan and execute agent upgrades to address bugs, vulnerabilities, and enhancements.

• Partner with incident response teams and business units to investigate alerts, support containment and remediation, and participate in post‑incident reviews.

• Leverage AI‑driven capabilities within XDR, endpoint, and security platforms to improve alert triage, threat prioritization, and response workflows.

• Collaborate with security leadership to responsibly introduce AI technologies while considering governance, data protection, and risk.

Patch Management & Endpoint Compliance

• Administer and support Tanium for patch deployment and vulnerability remediation.

• Own the patching lifecycle for endpoints and servers, including: patch assessment and prioritization, testing and validation, deployment orchestration, post‑deployment verification and reporting

• Use Tanium modules to track patch compliance, maintain accurate application inventory, and reduce exposure windows.

• Coordinate patching activities with infrastructure, application, and business teams to minimize operational impact.

• Respond to emerging vulnerabilities (zero‑days, actively exploited CVEs) with rapid mitigation or patch deployment.

• Develop and maintain patching standards, maintenance windows, and compliance metrics.

Systems & Infrastructure Engineering

• Perform general system administration across production and non‑production environments.

• Maintain, configure, and support Windows, macOS, and Linux systems at enterprise scale.

• Leverage third‑party monitoring tools to ensure endpoint and system availability, performance, and reliability.

• Serve as the highest tier of technical escalation for complex system and security issues.

• Manage vendor relationships and escalations for endpoint, security, and infrastructure platforms.

Automation, Documentation & Support

• Develop and maintain automation using PowerShell, Python, Bash, or similar scripting languages to improve operational efficiency and consistency.

• Create and maintain technical documentation, runbooks, and standard operating procedures (SOPs).

• Provide technical guidance and mentorship to service desk and junior engineers.

• Participate in an on‑call rotation supporting production systems as required.   

Who You Are:

• 3–5 years of experience as a system or security engineer in an enterprise environment.

• Exposure to AI‑enabled security tools or platforms (e.g., AI‑assisted threat detection, automated response, intelligent alerting).

• Hands‑on experience with SentinelOne or equivalent EDR/XDR platforms.

• Strong understanding of patch management and vulnerability remediation best practices for Windows, macOS, and Linux systems using Tanium or other similar patching solutions.

• Working knowledge of Microsoft Entra ID (Azure AD), Microsoft 365, and SaaS administration.

• Experience supporting Windows, macOS, and Linux operating systems at scale.

• Familiarity with cloud infrastructure and containerized workloads (Kubernetes experience preferred).

• High proficiency in scripting and automation (PowerShell, Python, Bash, or equivalent).     

What You’ve Done:

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or related field — or equivalent practical experience.

• CompTIA certifications (A+, Network+, Server+) strongly preferred.

• SentinelOne or Tanium certifications recommended.

• Microsoft, Azure, or cloud security certifications (MCP, AZ‑series) are a plus.

• Experience working in Agile or DevOps‑oriented environments preferred.    

Currently, Cart.com does not intend to hire candidates who will need, now or in the future, Cart.com sponsorship through any non-immigrant visa category such as the H-1B, H-1B1, E-3, O-1, or TN.

All hiring is contingent on eligibility to work in the United States. We are unable to sponsor or transfer visas for applicants.

#LI-CS1

Cart.com is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.