> Markdown version of [/jobs/ext/4524952-senior-it-engineer](https://www.wearedevelopers.com/jobs/ext/4524952-senior-it-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior IT Engineer - **Company:** Walden Robotics - **Location:** Cambridge, MA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Proxmox, IEEE 802.1X, Microsoft Windows, Access Network, Application Programming Interfaces (APIs), Artificial Intelligence, Apple Mac Systems, Systems Engineering, JIRA, Bash Shell, Software as a Service, Configuration Management Databases, Configuration Management, Dynamic Host Configuration Protocol, Linux, Domain Name System (DNS), Hyper-V, Identity and Access Management, Virtual Private Networks (VPN), Python (Programming Language), Meter Data Management (Flow Meters), Network Planning and Design, Windows PowerShell, Ansible, Zero Trust Network Access, Virtual Local Area Networks, Virtualization Technology, Ceph (Software), Wi-Fi Technology, Okta, Information Technology, Casper Suite, Gsuite, Claude, Terraform, GPT, Vmware - **Published:** November 2, 2026 - **Apply:** https://www.careerbuilder.com/job-details/senior-it-engineer-cambridge-ma--c920c7ac-eb15-4c61-9adc-2f051247aa65 ## About the Role 1. 5+ years in corporate IT or systems engineering (8+ without a degree). At least 3 of those years as the accountable owner of production platforms, not only a user of them. 2. Production admin of an identity provider (Okta preferred): SSO, SCIM provisioning, lifecycle automation and access reviews. 3. Production ownership of an MDM platform across macOS and at least one of Linux or Windows: zero-touch provisioning, patching and compliance policy. Ideally including a migration you led. 4. Hands-on operation of virtualization and storage in production (Proxmox, VMware or Hyper-V; Ceph, SAN or NAS), including upgrades and recovering from a failure. 5. Experience directing an MSP, contractors or a Tier 1 team against service levels and documentation you wrote. 6. Automation in Python, Bash or PowerShell against vendor APIs. You can show us something you automated and what it saved. 7. Enough enterprise networking to operate and troubleshoot it: VLANs, DHCP/DNS, Wi-Fi, 802.1X, VPN or zero-trust access. 8. Clear writing. Your runbooks work for someone else, and you explain trade-offs plainly to engineers and non-technical staff alike. Preferred * Fleet or osquery, JumpCloud, or Jamf, including a migration between MDMs. * Cisco Meraki, and Tailscale or another WireGuard-based access tool. * Jira Service Management and a CMDB. Google Workspace and Box admin. * Infrastructure-as-code or configuration management (Terraform, Ansible or similar). * Operating controls in a SOC 2 or ISO 27001 environment. Vanta or a similar platform. * Supporting Linux-heavy engineering teams (robotics, embedded, ML or similar). * Basic AWS IAM and account hygiene. * Using AI tools (Claude, ChatGPT) to speed up your own work, and helping others adopt them safely. * Early-stage or growth-stage startup experience. ## Description We're hiring a Senior IT Engineer to own the systems that run Walden's corporate IT: identity, endpoints, the infrastructure underneath them, and the helpdesk as a service. You report to a hands-on Head of IT & Infrastructure. You are one of three IT employees, alongside a Corporate Security Engineer, with contractor partners who handle Tier 1 support, field work and specialist projects. This is an engineering and ownership role first. Contracted Tier 1 technicians work the queue using playbooks and escalation paths you design. You handle the escalations that need an engineer and fix root causes so they don't come back. Most of your time goes into building and running platforms. You'll move our fleet from JumpCloud to Fleet, run Okta and access reviews, keep our virtualization and storage healthy, and turn new-hire setup and new-site stand-up into repeatable kits. You'll succeed if engineers building robots never think about IT, auditors can see our controls working, and each new hire, device or site takes less hands-on effort than the last. You'll be the visible face of IT in Cambridge. What you'll own 1. Identity and access. Run Okta and Google Workspace as production platforms. * Administer SSO and SCIM, and automate joiner-mover-leaver so access follows HR data, not tickets. * Run periodic access reviews and produce the evidence our SOC 2 controls rely on, with the Corporate Security Engineer. * Own onboarding and offboarding end to end. Every hire is ready on day one, and every leaver loses access on schedule. 2. Endpoint platform. Own device management for our macOS, Linux and Windows fleet, plus mobile. * Lead the migration from JumpCloud to Fleet. Then own MDM policy, zero-touch provisioning, patching and compliance reporting. * Make sure every device is enrolled, encrypted and running CrowdStrike before it reaches a user. * Drive down the hands-on technician time it takes to deploy a machine, and measure it. 3. Infrastructure operations. Run the on-prem infrastructure day to day. * Operate our Proxmox virtualization and Ceph storage. * Operate the Cisco Meraki switching and wireless estate and 802.1X network access, and direct field technicians for hands-on work, partnering with the Head of IT on network design and the Corporate Security Engineer on firewall policy. * Write the runbooks and monitoring that let someone else operate a system at 4 a.m. Nothing you build is done until it's documented, monitored and has a named owner. * Partner with our resilience engineer so the systems you run have tested backups and recovery targets. 4. Helpdesk as a service. Own support as a product. Enable Tier 1 to deliver it. * Set the service levels, escalation paths and quality bar in Jira Service Management, and hold our Tier 1 partner to them. * Write the playbooks that let a new Tier 1 technician be productive in their first week. * Handle escalations that need an engineer, and fix the cause rather than the symptom. Personal queue work is expected to stay under about 20% of your week. * Report on queue health, ticket trends and user satisfaction, and fix the top drivers upstream. * Plan the user side of platform changes: rollout communications, short training, and self-service guides so changes don't become tickets. 5. Systems of record and SaaS. Keep the data IT runs on accurate. * Own the CMDB and asset lifecycle: procurement, inventory, refresh and secure disposal. * Administer Box and other SaaS tenants. Bring new tools behind SSO with sensible defaults, including AI tools. 6. Scale and delivery. Make growth easy for IT. * Build a remote-site kit covering network, identity, devices and support, so a new site can be stood up from a checklist. * Automate repetitive work with scripts, APIs and infrastructure-as-code, and use AI tools where they help. * Run IT's biweekly roadmap review, and deliver projects the Head of IT hands you, including contractor-delivered projects. * Plan work with the Head of IT, and direct and review contractors working on your platforms.