Senior IT Engineer

Walden Robotics•Cambridge, MA

11d•$175,000 - $227,500•Onsite

About The Position

Walden Robotics is hiring a Senior IT Engineer to own the systems that run corporate IT, including identity, endpoints, infrastructure, and helpdesk service. The role reports to the hands-on Head of IT & Infrastructure and is part of a three-person IT team, alongside a Corporate Security Engineer, with contractor partners supporting Tier 1 service, field work, and specialist projects. This is primarily an engineering and platform-ownership role: the engineer designs Tier 1 playbooks and escalation paths, handles engineering-level escalations, and addresses root causes. The role also leads the migration from JumpCloud to Fleet, runs Okta and access reviews, maintains virtualization and storage, and develops repeatable onboarding and new-site kits. The Senior IT Engineer owns identity and access platforms, endpoint management for macOS, Linux, Windows, and mobile devices, and day-to-day on-premises infrastructure. They administer Okta and Google Workspace, manage SSO, SCIM, and lifecycle automation, and produce access-review evidence with the Corporate Security Engineer. They lead endpoint management and compliance, operate Proxmox, Ceph, Cisco Meraki networking, and 802.1X access, and document and monitor systems with runbooks, named owners, backups, and recovery targets. The role treats helpdesk support as a service: establishing service levels and quality standards, enabling Tier 1 technicians with playbooks, resolving engineering escalations, and tracking queue health and user satisfaction. Additional ownership includes the CMDB and asset lifecycle, Box and other SaaS tenants, and scalable IT delivery through automation, remote-site kits, roadmap reviews, and contractor direction. The position is on-site at the Cambridge, Massachusetts office, with travel of up to about 15% to company offices and new remote sites. Working hours are business hours plus planned maintenance windows; the engineer is an escalation point for incidents on owned platforms, and an on-call rotation is expected to be formalized as the team grows. The role requires the ability to lift 40 pounds and work in network closets, IDFs, server racks, and lab spaces. A standard pre-employment background check is required.

Requirements

At least 5 years of corporate IT or systems engineering experience, or 8 or more years without a degree.
At least 3 years as the accountable owner of production platforms, rather than solely a user of them.
Production administration of an identity provider, preferably Okta, including SSO, SCIM provisioning, lifecycle automation, and access reviews.
Production ownership of an MDM platform across macOS and at least one of Linux or Windows, including zero-touch provisioning, patching, and compliance policy.
Hands-on production operation of virtualization and storage (Proxmox, VMware, or Hyper-V; Ceph, SAN, or NAS), including upgrades and failure recovery.
Experience directing an MSP, contractors, or a Tier 1 team against service levels and documentation the candidate authored.
Automation using Python, Bash, or PowerShell against vendor APIs, with an example of automation and its impact.
Enterprise networking skills sufficient to operate and troubleshoot VLANs, DHCP/DNS, Wi-Fi, 802.1X, and VPN or zero-trust access.
Clear writing skills to produce usable runbooks and explain trade-offs to technical and non-technical audiences.
Ability to lift 40 pounds and work in network closets, IDFs, server racks, and lab spaces.
Standard pre-employment background check.

Nice To Haves

Fleet or osquery, JumpCloud, or Jamf experience, including an MDM migration.
Cisco Meraki and Tailscale or another WireGuard-based access tool.
Jira Service Management and CMDB experience.
Google Workspace and Box administration.
Infrastructure-as-code or configuration management experience, such as Terraform or Ansible.
Experience operating controls in a SOC 2 or ISO 27001 environment, using Vanta or a similar platform.
Experience supporting Linux-heavy engineering teams in robotics, embedded systems, machine learning, or similar fields.
Basic AWS IAM and account hygiene.
Use of AI tools such as Claude or ChatGPT to accelerate work and help others adopt them safely.
Early-stage or growth-stage startup experience.

Responsibilities

Run Okta and Google Workspace as production identity platforms, administering SSO, SCIM, lifecycle automation, and access reviews.
Automate joiner-mover-leaver processes so access follows HR data, and own onboarding and offboarding end to end.
Lead the migration from JumpCloud to Fleet and own MDM policy, zero-touch provisioning, patching, and compliance reporting across macOS, Linux, Windows, and mobile devices.
Ensure devices are enrolled, encrypted, and running CrowdStrike before they reach users; measure and reduce hands-on deployment time.
Operate Proxmox virtualization, Ceph storage, Cisco Meraki switching and wireless, and 802.1X network access.
Direct field technicians for infrastructure work and partner with the Head of IT on network design and the Corporate Security Engineer on firewall policy.
Write runbooks and monitoring, document systems, and establish named ownership; partner with the resilience engineer on tested backups and recovery targets.
Set helpdesk service levels, escalation paths, and quality standards in Jira Service Management, and hold the Tier 1 partner accountable.
Create Tier 1 playbooks, handle engineering-level escalations, resolve root causes, and report on queue health, ticket trends, and user satisfaction.
Plan communications, short training, and self-service guidance for platform changes.
Own the CMDB and asset lifecycle, including procurement, inventory, refresh, and secure disposal.
Administer Box and other SaaS tenants, and bring new tools behind SSO with sensible defaults, including AI tools.
Build a standard remote-site kit for network, identity, devices, and support.
Automate repetitive work with scripts, APIs, and infrastructure-as-code, using AI tools where helpful.
Run IT's biweekly roadmap review, deliver projects assigned by the Head of IT, and plan work with and direct and review contractors.
Produce access-review and device-compliance evidence for audits without manual follow-up.