Senior IT & Security Engineer (Robotics)

Tutorintelligence; Watertown (MA); On-site; USD 140,000 - 190,000; Full time

Job summary

Tutorintelligence seeks a Senior Engineer to own the systems behind the conversation: the network between our office and field robots, identity and device infrastructure, and our security and SOC 2 program.

You will partner with customer IT/security teams and automate security tasks leveraging AI coding agents, ensuring rapid, reliable incident response and compliant security posture.

Qualifications

• 6+ years in networking and security at a company with production systems.
• This role owns shared IT and security infrastructure at Tutorintelligence.
• Experience with SOC 2 or ISO 27001 audits and controls.
• Experience with enterprise IT and security teams and security questionnaires.
• Infrastructure as code using Terraform, Python, or similar.
• Comfort with AI coding agents and automating security tasks.

Responsibilities

• Own the network and security infrastructure, including office network, encrypted mesh, VLANs, firewalls, and egress policies.
• Work with customer IT and security teams on security questionnaires and design reviews.
• Own the SOC 2 program, automate evidence collection, and maintain policies.
• Lead security incident response and vulnerability management, including remediation and disclosure.
• Run corporate IT through policy and automation: Identity, SSO, device management, onboarding/offboarding.
• Set up interrupt paths to ensure outages reach the right engineer quickly.
• Review changes to shared infrastructure affecting secrets, access, or the network.

Skills

Networking

Security

SOC 2

ISO 27001

Terraform

Python

WireGuard

Kubernetes

AWS/Azure

SAML/OIDC

IAM/SSO

Education

Bachelor’s or higher in CS/Engineering

Tools

Vanta

Job description

The Company

We believe general-purpose, generally-intelligent robots will be built in our lifetimes. Robots will work in our factories, move our goods, walk on our streets and eventually be in our homes. To build that future, research and deployment must work in lockstep: real-world operation must make the technology better and better technology must make deployment easier. We're looking for the thinkers, builders, and researchers who want to be part of that loop.

As an AI robotics company that deploys its inventions directly into the facilities that need them, on state-of-the-art hardware, every line of code written at Tutor has a direct impact on the global, physical economy.

Our Culture

We believe that something truly special can happen when talented, motivated people work together; at Tutor, every member of our team is empowered to have real impact in everything that they do. We're characterized by both technical excellence and next-level collaboration and respect.

About the Role

Our robots run inside customer facilities, on customer networks. Each of those customers has an IT and security team, and they need someone at Tutor who can work with them directly. We're looking for a senior engineer to be that person and to own the systems behind the conversation: the network between our office and the robots in the field, the identity and device infrastructure the company runs on, and our security and SOC 2 program.

This is an ownership role. You would be the first person at Tutor whose full-time job is shared IT and security infrastructure, with the authority to change it. Most of the work is planned: moving a system from where it is to where it should be. Some of it is interrupt-driven: a site loses connectivity, a customer sends a security questionnaire, someone reports a vulnerability. Part of the job is setting up the routing so those interrupts reach the right person quickly.

A significant portion of this role involves working with AI coding agents. You'll direct agents to audit configurations, collect compliance evidence, triage alerts, and carry out multi-step infrastructure tasks. Knowing how to scope work for an agent, review its output critically, and build tooling that agents can use effectively is as important as doing the work yourself.

• Own the network: The office network, the encrypted mesh that reaches every robot in the field, and each customer site's integration with its own IT: VLANs, firewall rules, egress policy, certificates, and the documentation a customer's network team needs to approve a deployment
• Work directly with customer IT and security teams: Security questionnaires, vendor risk reviews, and network design reviews for deployments
• Own the SOC 2 program: Tutor is SOC 2 certified. You keep it that way and make it better each cycle: tighten controls, automate evidence collection, keep policies current with how the company actually works, and run the annual audit
• Own security incident response and vulnerability management: Triage, remediation, and disclosure, and the communication with whoever reported the issue
• Run corporate IT through policy and automation: Identity and SSO, device management, access reviews, onboarding and offboarding. Recurring requests should become systems rather than tickets
• Set up the interrupt path: Decide how outages and security reports reach the right engineer within the hour, and handle the ones that land on you
• Review changes to shared infrastructure: Code and configuration that touches secrets, access, or the network gets a review from you, and you make the secure option the default one
• 6+ years in networking and security at a company with production systems: You have owned networks and the security posture around them, not only advised on them
• Hands-on Linux networking: Routing, VLANs, firewalls, VPNs and overlay networks such as WireGuard, DNS and DHCP, PKI. You can debug a site-to-site problem from a shell on both ends
• You have run a SOC 2 or ISO 27001 program: Controls, evidence, policies, and auditors, through at least one full audit cycle
• Experience working with enterprise IT and security teams: You have completed long security questionnaires and defended a network design to a customer's infrastructure team
• Identity and device management: SSO with SAML and OIDC, an identity provider, MDM, and regular access reviews
• Infrastructure as code: Terraform, Python, or similar. Configuration is versioned and reviewed
• Comfort with AI coding agents: You have used tools like Claude Code or similar for real engineering work, directing agents through multi-step tasks. You understand their failure modes and know when to trust vs. verify
• Steady under interrupts: During an outage you communicate clearly, fix the problem, and write up what happened
• Operational technology or plant-floor networks: PLCs, cell networks, industrial protocols
• NixOS or another declarative, reproducible systems stack
• Cloud and Kubernetes security: IAM, secrets, cluster hardening on AWS or Azure
• Compliance automation platforms such as Vanta
• Experience as a security lead or a first security hire
• Physical security and access control

About Our Roles & Titles

At Tutor, we believe great engineers and researchers are defined by what they build and the impact they have — not where they sit in an org chart or what title they have. Therefore, everyone in our R&D org holds the title Member of Technical Staff (MoTS). Our job postings use standard titles so you can find us, but if you join Tutor, you'll be a MoTS — with a level that is determined through the interview process.

That also means we hire people, not slots. Work at Tutor evolves every quarter, and we set the expectation of flexibility from day one — it's common for people to start on one thing and shift to another based on where the team needs them most. A high technical bar across the board is what makes that flexibility possible: it's what allows people to contribute meaningfully whatever problem they take on.