Senior IT & Security Engineer (Robotics)
Summary
First dedicated IT & security engineer at an AI robotics company: owns the network linking the office to robots deployed on customer networks, corporate identity/device management, incident response, and the SOC 2 program, while working directly with customer IT/security teams and using AI coding agents to automate infrastructure and compliance work.
What You'll Do
- Own the network: The office network, the encrypted mesh that reaches every robot in the field, and each customer site's integration with its own IT: VLANs, firewall rules, egress policy, certificates, and the documentation a customer's network team needs to approve a deployment
- Work directly with customer IT and security teams: Security questionnaires, vendor risk reviews, and network design reviews for deployments
- Own the SOC 2 program: Tutor is SOC 2 certified. You keep it that way and make it better each cycle: tighten controls, automate evidence collection, keep policies current with how the company actually works, and run the annual audit
- Own security incident response and vulnerability management: Triage, remediation, and disclosure, and the communication with whoever reported the issue
- Run corporate IT through policy and automation: Identity and SSO, device management, access reviews, onboarding and offboarding. Recurring requests should become systems rather than tickets
- Set up the interrupt path: Decide how outages and security reports reach the right engineer within the hour, and handle the ones that land on you
- Review changes to shared infrastructure: Code and configuration that touches secrets, access, or the network gets a review from you, and you make the secure option the default one
What We're Looking For
- 6+ years in networking and security at a company with production systems: You have owned networks and the security posture around them, not only advised on them
- Hands-on Linux networking: Routing, VLANs, firewalls, VPNs and overlay networks such as WireGuard, DNS and DHCP, PKI. You can debug a site-to-site problem from a shell on both ends
- You have run a SOC 2 or ISO 27001 program: Controls, evidence, policies, and auditors, through at least one full audit cycle
- Experience working with enterprise IT and security teams: You have completed long security questionnaires and defended a network design to a customer's infrastructure team
- Identity and device management: SSO with SAML and OIDC, an identity provider, MDM, and regular access reviews
- Infrastructure as code: Terraform, Python, or similar. Configuration is versioned and reviewed
- Comfort with AI coding agents: You have used tools like Claude Code or similar for real engineering work, directing agents through multi-step tasks. You understand their failure modes and know when to trust vs. verify
- Steady under interrupts: During an outage you communicate clearly, fix the problem, and write up what happened
Nice to Have
- Operational technology or plant-floor networks: PLCs, cell networks, industrial protocols
- NixOS or another declarative, reproducible systems stack
- Cloud and Kubernetes security: IAM, secrets, cluster hardening on AWS or Azure
- Compliance automation platforms such as Vanta
- Experience as a security lead or a first security hire
- Physical security and access control
Skills
As published by lever · 4 questions · 1 written answer
Basics
Resume/CV, Full name, Email, Phone, Current location, Current company
Pick from a list (3)
- Are you comfortable commuting to Watertown MA? optional
- Are you legally authorized to work in the United States? optional
- Will you now, or in the future, require sponsorship for employment visa status (e.g. H-1B visa status)? optional
Written answers (1)
- Why do you want to work here?