Senior IT Engineer
- Compensation
- Not disclosed
- Location
- Cambridge, MA
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Contract
- Experience
- 5+ years
- Category
- Software engineering
- Posted
Skills
Must have
- 5+ years in corporate IT or systems engineering (8+ without a degree). At least 3 of those years as the accountable owner of production platforms, not only a user of them.
- Production admin of an identity provider (Okta preferred): SSO, SCIM provisioning, lifecycle automation and access reviews.
- Production ownership of an MDM platform across macOS and at least one of Linux or Windows: zero-touch provisioning, patching and compliance policy. Ideally including a migration you led.
- Hands-on operation of virtualization and storage in production (Proxmox, VMware or Hyper-V; Ceph, SAN or NAS), including upgrades and recovering from a failure.
- Experience directing an MSP, contractors or a Tier 1 team against service levels and documentation you wrote.
- Automation in Python, Bash or PowerShell against vendor APIs. You can show us something you automated and what it saved.
- Enough enterprise networking to operate and troubleshoot it: VLANs, DHCP/DNS, Wi-Fi, 802.1X, VPN or zero-trust access.
- Clear writing. Your runbooks work for someone else, and you explain trade-offs plainly to engineers and non-technical staff alike.
Nice to have
- Fleet or osquery, JumpCloud, or Jamf, including a migration between MDMs.
- Cisco Meraki, and Tailscale or another WireGuard-based access tool.
- Jira Service Management and a CMDB. Google Workspace and Box admin.
- Infrastructure-as-code or configuration management (Terraform, Ansible or similar).
- Operating controls in a SOC 2 or ISO 27001 environment. Vanta or a similar platform.
- Supporting Linux-heavy engineering teams (robotics, embedded, ML or similar).
- Basic AWS IAM and account hygiene.
- Using AI tools (Claude, ChatGPT) to speed up your own work, and helping others adopt them safely.
- Early-stage or growth-stage startup experience.
Full description
Cambridge, MA (on-site) · Full-time
At Walden Robotics, we envision a world where general-purpose robots dramatically improve the quality of life for all people—supporting us at home, at work, in factories, on farms, and beyond. To accomplish this, we are building a team of exceptional professionals who combine world-class technical skills with creative vision, grounded in humility and collaboration.
Position summary
We're hiring a Senior IT Engineer to own the systems that run Walden's corporate IT: identity, endpoints, the infrastructure underneath them, and the helpdesk as a service. You report to a hands-on Head of IT & Infrastructure. You are one of three IT employees, alongside a Corporate Security Engineer, with contractor partners who handle Tier 1 support, field work and specialist projects.
This is an engineering and ownership role first. Contracted Tier 1 technicians work the queue using playbooks and escalation paths you design. You handle the escalations that need an engineer and fix root causes so they don't come back. Most of your time goes into building and running platforms. You'll move our fleet from JumpCloud to Fleet, run Okta and access reviews, keep our virtualization and storage healthy, and turn new-hire setup and new-site stand-up into repeatable kits.
You'll succeed if engineers building robots never think about IT, auditors can see our controls working, and each new hire, device or site takes less hands-on effort than the last. You'll be the visible face of IT in Cambridge.
What you'll own
- Identity and access. Run Okta and Google Workspace as production platforms.
- Administer SSO and SCIM, and automate joiner-mover-leaver so access follows HR data, not tickets.
- Run periodic access reviews and produce the evidence our SOC 2 controls rely on, with the Corporate Security Engineer.
- Own onboarding and offboarding end to end. Every hire is ready on day one, and every leaver loses access on schedule.
- Endpoint platform. Own device management for our macOS, Linux and Windows fleet, plus mobile.
- Lead the migration from JumpCloud to Fleet. Then own MDM policy, zero-touch provisioning, patching and compliance reporting.
- Make sure every device is enrolled, encrypted and running CrowdStrike before it reaches a user.
- Drive down the hands-on technician time it takes to deploy a machine, and measure it.
- Infrastructure operations. Run the on-prem infrastructure day to day.
- Operate our Proxmox virtualization and Ceph storage.
- Operate the Cisco Meraki switching and wireless estate and 802.1X network access, and direct field technicians for hands-on work, partnering with the Head of IT on network design and the Corporate Security Engineer on firewall policy.