Head of Information Technology (IT)

Formlabs•Somerville, MA

4d•Onsite

About The Position

Formlabs is seeking a Head of Information Technology to own the company’s global IT infrastructure and security program. This is a combined leadership and hands-on player-coach role, leading a global team of seven across network administration, systems administration, help desk, and cybersecurity. The role supports offices in Somerville, Germany, Budapest, and Shenzhen, and is part of the Systems team, which enables company teams through enterprise applications, infrastructure, data, AI, and security. The position is based onsite at the Somerville, Massachusetts office and reports to the CIO. The Head of IT is responsible for global networking and connectivity, on-premise servers, endpoints, the IT service desk, identity and access management, cybersecurity, vendors, and budget. The role will set and deliver an infrastructure and security roadmap, ensure resilient and well-documented systems, and improve service delivery through automation and AI-assisted workflows. It will also determine the appropriate balance of in-house capabilities, managed services, and security partners.

Requirements

At least 8 years of experience in IT infrastructure and/or security.
At least 2 years of experience leading teams.
Hands-on expertise in enterprise networking, including routing, VPN, firewalls, segmentation, and Wi-Fi, and in server virtualization.
Practical experience building or running a security program in a company without a large dedicated security team, including EDR, identity, vulnerability management, and incident response.
A service-oriented approach, including measuring IT service quality and leading a help desk with rigor.
Proven ability to design a team staffing and sourcing model and to select, negotiate with, and hold managed service providers accountable.
Ability to translate technical risk into clear business decisions for executives and write clear policies, runbooks, and recommendations.
Experience with frameworks such as NIST CSF, ISO 27001, or SOC 2, and with IT general controls in an audit-ready environment.
Bachelor’s degree in a technical field or equivalent experience.

Nice To Haves

Experience in a mid-sized company of 500–2,000 people with multiple international sites.
Experience with Cisco Meraki, Proxmox, CrowdStrike, Google Workspace, and Cloudflare.
Experience operating IT in China, including cross-border connectivity, local regulations, and remote-site support.
Familiarity with GCP and AWS security fundamentals, including IAM, logging, and network controls.
Scripting and automation skills in Python, PowerShell, Terraform, or similar, and hands-on use of AI tools in IT or security operations.
Security certifications such as CISSP, CISM, or CCNP Security.
Experience in a hardware or manufacturing company with R&D labs and lab networks.

Responsibilities

Lead, coach, and develop a global team of seven across network, systems, help desk, and cybersecurity; set priorities and build technical leadership, automation, and scripting skills.
Own the Cisco Meraki network estate across four countries, including SD-WAN, site-to-site VPN, firewalls, segmentation, Wi-Fi, ISP circuits, cloud VPN tunnels, remote access, and China-specific connectivity and compliance needs.
Define and drive an infrastructure and security roadmap that balances reliability, risk, cost, and user experience, and communicate it in business terms to executives.
Own on-premise Proxmox compute and associated services, including lifecycle management, patching, monitoring, backups, tested restores, and disaster recovery; determine what should remain on-premise versus move to cloud or SaaS.
Own the cybersecurity program, including policies, risk register, vulnerability and patch management, endpoint protection, email and SaaS security, logging, data loss prevention, incident detection and response runbooks, and exercises.
Decide how the team is staffed and which services are built in-house or sourced from managed service and security partners; hold partners accountable to defined scope and SLAs.
Own joiner, mover, and leaver processes; SSO and MFA; privileged and break-glass access; and administrator hygiene across Google Workspace and core SaaS, maintaining audit evidence.
Ensure a fast, friendly, measurable service desk for approximately 800 employees, including ticket SLAs, onboarding and offboarding, laptop lifecycle and MDM, conference rooms and A/V, and site support; personally handle the hardest escalations.
Replace manual, repeatable work with automation and AI-assisted workflows for provisioning, monitoring, ticket triage, and reporting.
Manage infrastructure and security vendors and budgets, including contracts, renewals, licensing, hardware refresh plans, and build/buy/partner decisions.
Maintain up-to-date diagrams, inventories, runbooks, and on-call and escalation coverage so systems are not dependent on one person’s knowledge.