IT Engineer

About the role

This role is located in Somerville, MA - We are a hybrid work environment and are in the office 3+ days/per week.

Responsibilities

• Identity & Access Management: Administer and improve identity and access management systems: Okta authentication policies, device trust, and user lifecycle automation. Maintain reliable onboarding and offboarding automation for accurate, timely access provisioning.
• Network Engineering & Security: Manage office Meraki and Palo Alto network infrastructure — secure wireless, VPN, and hardware — across global offices. Implement and maintain security controls to protect the network and connected systems.
• Endpoint & Device Management: Oversee the device management platform, ensuring configurations and policies are consistent across device types and the full device lifecycle. Monitor, alerting & reliability: Build and maintain monitoring and alerting coverage for critical IT systems — identity, devices, network, and core SaaS. Centralize alerting and document runbooks so any team member can triage independently.
• Infrastructure, Automation & Resilience: Manage automation and infrastructure-as-code; use AI tooling to reduce toil and accelerate delivery. Audit backup coverage and develop disaster recovery plans, including runbooks and tabletop exercises.
• IT Support: Jump in and handle IT support requests when needed; you set the bar for response quality and use recurring issues as a signal for systemic improvements. Documentation & Knowledge Management: Maintain centralized IT documentation and capture institutional knowledge to ensure team continuity. Project Management: Lead and maintain the IT roadmap — from project execution and stakeholder communication to balancing operational support with strategic priorities.

Requirements

• 4–6+ years in IT engineering, system administration, and network management.
• Proficiency in macOS, Windows, and Linux.
• Solid understanding of IAM principles: SSO, SCIM, MFA, directory services, and device trust.
• Experience with enterprise device management and endpoint security.
• Strong networking fundamentals: enterprise Wi-Fi, VPN, network hardware, and security protocols.
• Experience with scripting, automation, and AI tools.
• IT security best practices; compliance experience (SOC2, NIS2, or similar) is a plus.
• Bonus points: High-growth startup experience. Infrastructure-as-code experience. Cloud platform familiarity (AWS, Azure, or similar). Relevant certifications (networking, security, or cloud).

Qualifications

You're hands-on and service-oriented — as comfortable resolving a support ticket as you are leading a strategic project. No task is beneath you, and you bring the same energy to a network outage at 10pm as you do to a multi-month infrastructure initiative. You identify root causes quickly, communicate clearly with both technical and non-technical stakeholders, and own projects from scoping through delivery without needing hand-holding. You're comfortable with AI and automation tools and know how to balance day-to-day support with longer-term strategic work.

Skills

• Hands-on and service-oriented
• Comfortable resolving support tickets and leading strategic projects
• Identify root causes quickly and communicate clearly
• Balance day-to-day support with longer-term strategic work
• Comfortable with AI and automation tools

Benefits

• Direct impact on product and culture
• Company equity
• Competitive benefits package including Health, Dental, Vision, Short-term Disability, Long-term Disability, Life Insurance, AD&D, FSA, Commuter Benefits, Parental Leave, and 401(K)
• Flexible work schedule and unlimited vacation policy
• Virtual company events and happy hours
• Fitness subsidies
• Dog-friendly office

Pay

The compensation information displayed on each job posting reflects the range for new hire pay rates for the position across all US locations. Within the range posted, actual compensation will be determined depending on multiple factors including job-related knowledge & skills, experience, business needs, geographical location, market compensation data, and internal equity. Expected compensation ranges for this role may change over time. The salary range for this position is $90,000- $150,000 per year, based on a level 3 (minimum) to a level 4 (maximum). The final level will be determined during the interview process. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Please note that we may use AI-based tools to support parts of our hiring process. All data processing is carried out in compliance with local data protection laws, ensuring all personal candidate information is handled securely and ethically.