Senior IT Systems Engineer

Tulip Interfaces; Somerville (MA); Hybrid; USD 90,000 - 150,000; Full time

Benefits offered by this job

Health benefits

Dental & Vision

Flexible work schedule

Unlimited vacation

401(k)

Company equity

Dog-friendly office

Job summary

Tulip is seeking an experienced IT Engineer to lead identity, access management, network security, and device management in a hybrid Somerville, MA setting.

You will balance day‑to‑day IT support with strategic initiatives, leveraging automation and AI tools to reduce toil while improving reliability and security across global offices.

Qualifications

• 4-6+ years in IT engineering, system administration, and network management.
• Proficiency in macOS, Windows, and Linux.
• Solid understanding of IAM: SSO, SCIM, MFA, directory services, and device trust.
• Experience with enterprise device management and endpoint security.
• Strong networking fundamentals: enterprise Wi‑Fi, VPN, network hardware, and security protocols.
• Experience with scripting, automation, and AI tools.
• IT security best practices; compliance experience (SOC2, NIS2, or similar) is a plus.

Responsibilities

• Identity & Access Management: Administer Okta policies, device trust, and onboarding/offboarding automation.
• Network Engineering & Security: Manage Meraki and Palo Alto infrastructure, secure wireless, VPN, and hardware.
• Endpoint & Device Management: Oversee device management platform across device types and lifecycle.
• Monitoring, Alerting & Reliability: Build monitoring and runbooks for IT systems.
• Infrastructure, Automation & Resilience: Manage IaC; use AI tooling to reduce toil; plan DR and runbooks.
• IT Support: Handle IT requests and drive systemic improvements.
• Documentation & Knowledge Management: Maintain centralized IT documentation.
• Project Management: Lead the IT roadmap from execution to strategy balance.

Skills

IT engineering

Cross‑platform OS

IAM (SSO/SCIM/MFA)

Device management

Networking fundamentals

Scripting & automation

IT security & compliance

Startup experience

Infrastructure as code

Cloud platforms

Certifications

IT strategy

Cross‑team collaboration

IT project leadership

Tools

Okta

Meraki

Palo Alto

SCCM/SCIM

Job description

This role is located in Somerville, MA - We are a hybrid work environment and are in the office 3+ days/per week.

Tulip, the leader in AI-native frontline operations, is helping companies around the world equip their workforce with composable, connected apps, leading to higher quality work, improved efficiency, and end-to-end traceability across operations. Tulip’s cloud-native, no-code platform, powered by embedded AI, is driving the digital transformation of industrial environments through composable, human-centric solutions that go beyond disrupting the Manufacturing Execution System (MES) category.

A spinoff out of MIT, Tulip is headquartered in Somerville, MA, with offices in Germany, Hungary, Singapore, and Israel. Tulip has been recognized as a World Economic Forum Global Innovator, a 2024 Deloitte Technology Fast award winner, one of Energage’s Top Workplaces USA, and one of Built In Boston’s “Best Places to Work” and “Best Midsize Places to Work.”

About You

You’re hands‑on and service‑oriented — as comfortable resolving a support ticket as you are leading a strategic project. No task is beneath you, and you bring the same energy to a network outage at 10pm as you do to a multi‑month infrastructure initiative. You identify root causes quickly, communicate clearly with both technical and non‑technical stakeholders, and own projects from scoping through delivery without needing hand‑holding. You’re comfortable with AI and automation tools and know how to balance day‑to‑day support with longer‑term strategic work.

What skills do I need?

• 4-6+ years in IT engineering, system administration, and network management.
• Proficiency in macOS, Windows, and Linux.
• Solid understanding of IAM principles: SSO, SCIM, MFA, directory services, and device trust.
• Experience with enterprise device management and endpoint security.
• Strong networking fundamentals: enterprise Wi‑Fi, VPN, network hardware, and security protocols.
• Experience with scripting, automation, and AI tools.
• IT security best practices; compliance experience (SOC2, NIS2, or similar) is a plus.

Nice to have

• High‑growth startup experience.
• Infrastructure‑as‑code experience.
• Cloud platform familiarity (AWS, Azure, or similar).
• Relevant certifications (networking, security, or cloud).
• You’ve helped shape an IT strategy before — translating where a company is going into a roadmap that actually gets built.
• You’re the kind of IT person other teams loop in when they’re designing something new, not just when something breaks.
• You have experience leading and managing IT projects end to end

Key Responsibilities

• Identity & Access Management
  • Administer and improve identity and access management systems: Okta authentication policies, device trust, and user lifecycle automation.
  • Maintain reliable onboarding and offboarding automation for accurate, timely access provisioning.
• Network Engineering & Security
  • Manage office Meraki and Palo Alto network infrastructure — secure wireless, VPN, and hardware — across global offices.
  • Implement and maintain security controls to protect the network and connected systems.
• Endpoint & Device Management
  • Oversee the device management platform, ensuring configurations and policies are consistent across device types and the full device lifecycle.
• Monitoring, Alerting & Reliability
  • Build and maintain monitoring and alerting coverage for critical IT systems — identity, devices, network, and core SaaS.
  • Centralize alerting and document runbooks so any team member can triage independently.
• Infrastructure, Automation & Resilience
  • Manage automation and infrastructure-as-code; use AI tooling to reduce toil and accelerate delivery.
  • Audit backup coverage and develop disaster recovery plans, including runbooks and tabletop exercises.
• IT Support
  • Jump in and handle IT support requests when needed; you set the bar for response quality and use recurring issues as a signal for systemic improvements.
• Documentation & Knowledge Management
  • Maintain centralized IT documentation and capture institutional knowledge to ensure team continuity.
• Project Management
  • Lead and maintain the IT roadmap — from project execution and stakeholder communication to balancing operational support with strategic priorities.

Key Collaborators

• IT
• Operations
• People Ops
• TechOps
• Security

Working At Tulip

We’re building a strong, diverse team that values hard work, families, and personal well‑being. Benefits of working with us include:

• Direct impact on product and culture
• Company equity
• Competitive benefits package including Health, Dental, Vision, Short‑term Disability, Long‑term Disability, Life Insurance, AD&D, FSA, Commuter Benefits, Parental Leave, and 401(K)
• Flexible work schedule and unlimited vacation policy
• Virtual company events and happy hours
• Fitness subsidies
• Dog‑friendly office

We are an equal opportunity employer. At Tulip, we celebrate all. Qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Help us build an inclusive community that will transform frontline operations.

The compensation information displayed on each job posting reflects the range for new hire pay rates for the position across all US locations. Within the range posted, actual compensation will be determined depending on multiple factors including job‑related knowledge & skills, experience, business needs, geographical location, market compensation data, and internal equity. Expected compensation ranges for this role may change over time. The salary range for this position is $90,000- $150,000 per year, based on a level 3 (minimum) to a level 4 (maximum). The final level will be determined during the interview process

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Please note that we may use AI-based tools to support parts of our hiring process. All data processing is carried out in compliance with local data protection laws, ensuring all personal candidate information is handled securely and ethically.