Senior IT Systems Engineer

This role is located in Somerville, MA - We are a hybrid work environment and are in the office 3+ days/per week. Tulip, the leader in AI-native frontline operations, is helping companies around the world equip their workforce with composable, connected apps, leading to higher quality work, improved efficiency, and end-to-end traceability across operations. Tulip’s cloud-native, no-code platform, powered by embedded AI, is driving the digital transformation of industrial environments through composable, human-centric solutions that go beyond disrupting the Manufacturing Execution System (MES) category. A spinoff out of MIT, Tulip is headquartered in Somerville, MA, with offices in Germany, Hungary, Singapore, and Israel. Tulip has been recognized as a World Economic Forum Global Innovator, a 2024 Deloitte Technology Fast award winner, one of Energage’s Top Workplaces USA, and one of Built In Boston’s “Best Places to Work” and “Best Midsize Places to Work.” About You You’re hands-on and service-oriented — as comfortable resolving a support ticket as you are leading a strategic project. No task is beneath you, and you bring the same energy to a network outage at 10pm as you do to a multi-month infrastructure initiative. You identify root causes quickly, communicate clearly with both technical and non-technical stakeholders, and own projects from scoping through delivery without needing hand-holding. You’re comfortable with AI and automation tools and know how to balance day-to-day support with longer-term strategic work. What skills do I need? 4-6+ years in IT engineering, system administration, and network management. Proficiency in macOS, Windows, and Linux. Solid understanding of IAM principles: SSO, SCIM, MFA, directory services, and device trust. Experience with enterprise device management and endpoint security. Strong networking fundamentals: enterprise Wi-Fi, VPN, network hardware, and security protocols. Experience with scripting, automation, and AI tools. IT security best practices; compliance experience (SOC2, NIS2, or similar) is a plus. Nice to have: High-growth startup experience. Infrastructure-as-code experience. Cloud platform familiarity (AWS, Azure, or similar). Relevant certifications (networking, security, or cloud). You’ve helped shape an IT strategy before — translating where a company is going into a roadmap that actually gets built. You’re the kind of IT person other teams loop in when they’re designing something new, not just when something breaks. You have experience leading and managing IT projects end to end Key Responsibilities Identity & Access Management Administer and improve identity and access management systems: Okta authentication policies, device trust, and user lifecycle automation. Maintain reliable onboarding and offboarding automation for accurate, timely access provisioning. Network Engineering & Security Manage office Meraki and Palo Alto network infrastructure — secure wireless, VPN, and hardware — across global offices. Implement and maintain security controls to protect the network and connected systems. Endpoint & Device Management Oversee the device management platform, ensuring configurations and policies are consistent across device types and the full device lifecycle. Monitoring, Alerting & Reliability Build and maintain monitoring and alerting coverage for critical IT systems — identity, devices, network, and core SaaS. Centralize alerting and document runbooks so any team member can triage independently. Infrastructure, Automation & Resilience Manage automation and infrastructure-as-code; use AI tooling to reduce toil and accelerate delivery. Audit backup coverage and develop disaster recovery plans, including runbooks and tabletop exercises. IT Support Jump in and handle IT support requests when needed; you set the bar for response quality and use recurring issues as a signal for systemic improvements. Documentation & Knowledge Management Maintain centralized IT documentation and capture institutional knowledge to ensure team continuity. Project Management Lead and maintain the IT roadmap — from project execution and stakeholder communication to balancing operational support with strategic priorities. Key Collaborators IT Operations People Ops TechOps Security Working At Tulip We’re building a strong, diverse team that values hard work, families, and personal well-being. Benefits of working with us include: Direct impact on product and culture Company equity Competitive benefits package including Health, Dental, Vision, Short-term Disability, Long-term Disability, Life Insurance, AD&D, FSA, Commuter Benefits, Parental Leave, and 401(K) Flexible work schedule and unlimited vacation policy Virtual company events and happy hours Fitness subsidies Dog-friendly office We are an equal opportunity employer. At Tulip, we celebrate all. Qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Help us build an inclusive community that will transform frontline operations. The compensation information displayed on each job posting reflects the range for new hire pay rates for the position across all US locations. Within the range posted, actual compensation will be determined depending on multiple factors including job-related knowledge & skills, experience, business needs, geographical location, market compensation data, and internal equity. Expected compensation ranges for this role may change over time. The salary range for this position is $90,000- $150,000 per year, based on a level 3 (minimum) to a level 4 (maximum). The final level will be determined during the interview process. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Please note that we may use AI-based tools to support parts of our hiring process. All data processing is carried out in compliance with local data protection laws, ensuring all personal candidate information is handled securely and ethically.