Senior IT & Security Engineer (Robotics)

Tutor Intelligence • Watertown, MA

1d • $100,000 - $300,000

About The Position

We are seeking a Senior IT & Security Engineer to manage and own the IT and security infrastructure for our robotics company. This role involves overseeing the network connecting our office to robots in the field, managing the company's identity and device infrastructure, and maintaining our security and SOC 2 program. You will be the primary point of contact for customer IT and security teams, handling security questionnaires, vendor risk reviews, and network design discussions. A significant part of this role will involve leveraging AI coding agents for tasks such as auditing configurations, collecting compliance evidence, triaging alerts, and executing infrastructure tasks. The ideal candidate will have strong experience in networking, security, and working with AI tools, with the ability to direct agents, critically review their output, and build effective tooling.

Requirements

• 6+ years in networking and security at a company with production systems, with ownership of networks and security posture.
• Hands-on Linux networking experience: routing, VLANs, firewalls, VPNs, overlay networks (e.g., WireGuard), DNS, DHCP, PKI.
• Experience debugging site-to-site problems from a shell on both ends.
• Experience running a SOC 2 or ISO 27001 program, including controls, evidence, policies, and auditors through at least one full audit cycle.
• Experience working with enterprise IT and security teams, including completing long security questionnaires and defending network designs.
• Experience with identity and device management: SSO with SAML and OIDC, identity providers, MDM, and regular access reviews.
• Experience with Infrastructure as Code (IaC) tools like Terraform, Python, or similar, where configuration is versioned and reviewed.
• Comfort with AI coding agents (e.g., Claude Code) for real engineering work, including directing multi-step tasks, understanding failure modes, and knowing when to trust vs. verify.
• Ability to remain steady under interrupts, communicate clearly during outages, fix problems, and document incidents.

Nice To Haves

• Operational technology or plant-floor networks experience (PLCs, cell networks, industrial protocols).
• Experience with NixOS or another declarative, reproducible systems stack.
• Cloud and Kubernetes security experience (IAM, secrets, cluster hardening on AWS or Azure).
• Experience with compliance automation platforms such as Vanta.
• Experience as a security lead or a first security hire.
• Physical security and access control experience.

Responsibilities

• Own the network: including the office network, the encrypted mesh connecting to robots in the field, and customer site integrations with their IT infrastructure (VLANs, firewall rules, egress policy, certificates, and documentation).
• Work directly with customer IT and security teams on security questionnaires, vendor risk reviews, and network design reviews for deployments.
• Own and maintain the SOC 2 program: ensuring compliance, tightening controls, automating evidence collection, updating policies, and managing the annual audit.
• Manage security incident response and vulnerability management: including triage, remediation, disclosure, and communication.
• Run corporate IT through policy and automation: managing identity and SSO, device management, access reviews, and onboarding/offboarding processes.
• Set up the interrupt path for outages and security reports to reach the appropriate engineer promptly.
• Review changes to shared infrastructure, focusing on secrets, access, and network configurations, ensuring secure options are the default.
• Direct AI coding agents to audit configurations, collect compliance evidence, triage alerts, and carry out multi-step infrastructure tasks.
• Build tooling that AI agents can use effectively.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed