Senior IT Systems Engineer

About the role

This role is located in Somerville, MA - We are a hybrid work environment and are in the office 3+ days/per week.

Key Responsibilities

• Identity & Access Management
  • Administer and improve identity and access management systems: Okta authentication policies, device trust, and user lifecycle automation.
  • Maintain reliable onboarding and offboarding automation for accurate, timely access provisioning.
• Network Engineering & Security
  • Manage office Meraki and Palo Alto network infrastructure — secure wireless, VPN, and hardware — across global offices.
  • Implement and maintain security controls to protect the network and connected systems.
• Endpoint & Device Management
  • Oversee the device management platform, ensuring configurations and policies are consistent across device types and the full device lifecycle.
  • Monitoring, Alerting & Reliability
    • Build and maintain monitoring and alerting coverage for critical IT systems — identity, devices, network, and core SaaS.
    • Centralize alerting and document runbooks so any team member can triage independently.
  • Infrastructure, Automation & Resilience
    • Manage automation and infrastructure-as-code; use AI tooling to reduce toil and accelerate delivery.
    • Audit backup coverage and develop disaster recovery plans, including runbooks and tabletop exercises.
  • IT Support
    • Jump in and handle IT support requests when needed; you set the bar for response quality and use recurring issues as a signal for systemic improvements.
    • Documentation & Knowledge Management
      • Maintain centralized IT documentation and capture institutional knowledge to ensure team continuity.
    • Project Management
      • Lead and maintain the IT roadmap — from project execution and stakeholder communication to balancing operational support with strategic priorities.

  Qualifications

  • 4-6+ years in IT engineering, system administration, and network management.
  • Proficiency in macOS, Windows, and Linux.
  • Solid understanding of IAM principles: SSO, SCIM, MFA, directory services, and device trust.
  • Experience with enterprise device management and endpoint security.
  • Strong networking fundamentals: enterprise Wi-Fi, VPN, network hardware, and security protocols.
  • Experience with scripting, automation, and AI tools.
  • IT security best practices; compliance experience (SOC2, NIS2, or similar) is a plus.

  Nice to have

  • High-growth startup experience.
  • Infrastructure-as-code experience.
  • Cloud platform familiarity (AWS, Azure, or similar).
  • Relevant certifications (networking, security, or cloud).
  • You've helped shape an IT strategy before — translating where a company is going into a roadmap that actually gets built.
  • You're the kind of IT person other teams loop in when they're designing something new, not just when something breaks.
  • You have experience leading and managing IT projects end to end.

  Benefits

  • Direct impact on product and culture
  • Company equity
  • Competitive benefits package including Health, Dental, Vision, Short-term Disability, Long-term Disability, Life Insurance, AD&D, FSA, Commuter Benefits, Parental Leave, and 401(K)
  • Flexible work schedule and unlimited vacation policy
  • Virtual company events and happy hours
  • Fitness subsidies
  • Dog-friendly office

  Equal Opportunity Employer

  We are an equal opportunity employer. At Tulip, we celebrate all. Qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.