Head of Information Technology (IT)

Formlabs•Somerville, MA

4h•$150,000 - $190,000•Onsite

About The Position

As Head of Information Technology at Formlabs, you will own the global IT foundation, including the network, on-premise servers, endpoints, IT service desk, identity and access, and the security program protecting Formlabs and its customers’ data. This is a combined leadership and hands-on player-coach role. You will lead a global team of seven across network administration, systems administration, help desk, and cybersecurity, supporting offices in Somerville, Germany, Budapest, and Shenzhen. You will join the Systems team and report to the CIO. The position is based onsite in the Somerville, Massachusetts office. You will lead the team and set priorities; own global network connectivity, on-premise computing and resilience, and the end-to-end cybersecurity program; and establish infrastructure and security roadmaps. You will oversee identity and access, service desk and endpoint operations, vendors and budgets, staffing and sourcing decisions, and documentation and continuity. You will also identify opportunities to automate repeatable work and use AI-assisted workflows to help the team scale. The role requires 8+ years of IT infrastructure and/or security experience, including 2+ years leading teams. Formlabs is seeking hands-on expertise in enterprise networking and server virtualization, practical security-program leadership, a strong service mindset, vendor-management capability, executive communication skills, and experience with controls and compliance. A bachelor’s degree in a technical field or equivalent experience is required. The annual base pay range is $150,000–$190,000 USD; equity is also provided, and base pay depends on skills, qualifications, experience, location, and expected impact.

Requirements

8+ years of experience in IT infrastructure and/or security, including 2+ years leading teams.
Hands-on expertise in enterprise networking, including routing, VPN, firewalls, segmentation, and Wi-Fi, and in server virtualization.
Practical experience building or running a security program at a company without a large dedicated security team, including EDR, identity, vulnerability management, and incident response.
A service-oriented approach, with the ability to measure IT service quality and lead a help desk rigorously.
Proven ability to design a team staffing and sourcing model and select, negotiate with, and hold managed service providers accountable.
Ability to translate technical risk into clear business decisions for executives and write clear policies, runbooks, and recommendations.
Experience with frameworks such as NIST CSF, ISO 27001, or SOC 2, and IT general controls in an audit-ready environment.
Bachelor’s degree in a technical field or equivalent experience.

Nice To Haves

Experience with Cisco Meraki, Proxmox, CrowdStrike, Google Workspace, and Cloudflare.
Experience operating IT in China, including cross-border connectivity, local regulations, and remote-site support.
Familiarity with GCP and AWS security fundamentals, including IAM, logging, and network controls.
Scripting and automation skills in Python, PowerShell, Terraform, or similar, and hands-on use of AI tools in IT or security operations.
Security certifications such as CISSP, CISM, or CCNP Security.
Experience in a hardware or manufacturing company with R&D labs and lab networks.
Experience in a mid-sized company of 500–2,000 people with multiple international sites.

Responsibilities

Lead, coach, and develop a team of seven across network, systems, help desk, and cybersecurity; set priorities and build technical leadership, automation, and scripting skills.
Own the Cisco Meraki network across four countries, including SD-WAN, site-to-site VPN, firewalls, segmentation, Wi-Fi, ISP circuits, cloud VPN tunnels, remote access, and China-specific connectivity and compliance requirements.
Define and drive an infrastructure and security roadmap balancing reliability, risk, cost, and user experience, and communicate it in business terms to company leadership.
Own on-premise compute using Proxmox and its services, including lifecycle management, patching, monitoring, backup, restore testing, and disaster recovery; determine what remains on-premise versus moves to cloud or SaaS.
Own the cybersecurity program, including policy, risk register, vulnerability and patch management, endpoint protection, email and SaaS security, logging, data loss prevention, incident detection and response runbooks, and exercises.
Determine the team staffing and sourcing model, including what to build in-house and what to source from managed service and security partners; hold partners accountable to scope and SLAs.
Own joiner/mover/leaver processes, SSO and MFA, privileged and break-glass access, and administrator hygiene across Google Workspace and core SaaS, maintaining audit-ready evidence.
Ensure a fast, friendly, measurable help desk for approximately 800 employees, covering ticket SLAs, onboarding and offboarding, laptop lifecycle and MDM, conference rooms and A/V, and site support; personally handle the hardest escalations.
Use automation and AI-assisted workflows for provisioning, monitoring, ticket triage, and reporting.
Own infrastructure and security vendors and budget, including contracts, renewals, licensing, hardware refresh plans, and build/buy/partner decisions.
Maintain current diagrams, inventories, runbooks, and on-call and escalation coverage to ensure continuity.