Senior Software Engineering Manager, Identity & Access
Leads a small engineering team owning identity & access for Tulip's manufacturing frontline operations platform — SSO/SAML/OIDC federation, SCIM provisioning, and multi-tenant authorization across AWS and Azure. A hands-on engineering manager role, hybrid in Somerville, MA, with emphasis on security-critical systems and driving AI tooling adoption.
- Compensation
- $160K–$220K / yr
- Location
- Somerville, MA
- Work setup
- Hybrid
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Software engineering
- Posted
Skills
Must have
- 7+ years of software engineering experience, with direct involvement building and operating security-critical or identity/access systems in production
- 3+ years of people management experience leading a software team, including hiring, feedback, and growing engineers
- Hands-on depth with OAuth 2.0, SAML 2.0, OIDC, and SCIM in enterprise environments, including understanding specs and failure modes
- Experience building multi-tenant systems where tenant isolation is a hard requirement
- Working knowledge of IAM, secrets management, and access policy across AWS and Azure
- Track record of shipping clean, tested code and holding a team to the same standard
- Active use of AI tooling in your own practice, with a point of view on how it changes how teams build
- Bachelor's degree in Computer Science or related field, or equivalent working experience
Full description
This role is located in Somerville, MA - We are a hybrid work environment and are in the office 3+ days/per week.
Tulip, the leader in AI-native frontline operations, is helping companies around the world equip their workforce with composable, connected apps, leading to higher quality work, improved efficiency, and end-to-end traceability across operations. Tulip’s cloud-native, no-code platform, powered by embedded AI, is driving the digital transformation of industrial environments through composable, human-centric solutions that go beyond disrupting the Manufacturing Execution System (MES) category.
A spinoff out of MIT, Tulip is headquartered in Somerville, MA, with offices in Germany, Hungary, Singapore, Israel and Japan. Tulip has been recognized as a World Economic Forum Global Innovator, a 2024 Deloitte Technology Fast award winner, one of Energage’s Top Workplaces USA, and one of Built In Boston’s “Best Places to Work” and “Best Midsize Places to Work.”
About You
You're an engineering leader who cares about getting security-critical systems right and who wants to reach customers fast, not sit buried in a backlog. You think in specs and failure modes, you stay close to the code, and you're already using AI tooling to change how your team builds, not just how quickly they move. You'll take over a small, strong team and own how the world's most demanding manufacturers authenticate, provision, and govern access for their people and, increasingly, the AI agents acting on their behalf.
What skills do I need?
- 7+ years of software engineering experience, with direct involvement building and operating security-critical or identity/access systems in production
- 3+ years of people management experience leading a software team, where you've hired, given constructive feedback, and grown engineers
- Hands-on depth with OAuth 2.0, SAML 2.0, OIDC, and SCIM in enterprise environments — you understand the specs and their failure modes, not just the libraries
- Experience building multi-tenant systems where tenant isolation is a hard requirement
- Working knowledge of IAM, secrets management, and access policy across AWS and Azure, including the tradeoffs when customers span both
- A track record of shipping clean, tested code and holding a team to the same standard
- Active use of AI tooling in your own practice, with a point of view on how it changes the way teams build
- Bachelor’s degree in Computer Science or related field, or equivalent working experience
Key Responsibilities
- Own the architecture and roadmap for identity & access — SSO/SAML/OIDC federation, SCIM provisioning, multi-tenant account structures, and the authorization layer across Tulip's multi-cloud infrastructure.