About the Role

Our robots run inside customer facilities, on customer networks. Each of those customers has an IT and security team, and they need someone at Tutor who can work with them directly. We're looking for a senior engineer to be that person and to own the systems behind the conversation: the network between our office and the robots in the field, the identity and device infrastructure the company runs on, and our security and SOC 2 program.

This is an ownership role. You would be the first person at Tutor whose full-time job is shared IT and security infrastructure, with the authority to change it. Most of the work is planned: moving a system from where it is to where it should be. Some of it is interrupt-driven: a site loses connectivity, a customer sends a security questionnaire, someone reports a vulnerability. Part of the job is setting up the routing so those interrupts reach the right person quickly.

A significant portion of this role involves working with AI coding agents. You'll direct agents to audit configurations, collect compliance evidence, triage alerts, and carry out multi-step infrastructure tasks. Knowing how to scope work for an agent, review its output critically, and build tooling that agents can use effectively is as important as doing the work yourself.

What You'll Do

• Own the network: The office network, the encrypted mesh that reaches every robot in the field, and each customer site's integration with its own IT: VLANs, firewall rules, egress policy, certificates, and the documentation a customer's network team needs to approve a deployment
• Work directly with customer IT and security teams: Security questionnaires, vendor risk reviews, and network design reviews for deployments
• Own the SOC 2 program: Tutor is SOC 2 certified. You keep it that way and make it better each cycle: tighten controls, automate evidence collection, keep policies current with how the company actually works, and run the annual audit
• Own security incident response and vulnerability management: Triage, remediation, and disclosure, and the communication with whoever reported the issue
• Run corporate IT through policy and automation: Identity and SSO, device management, access reviews, onboarding and offboarding. Recurring requests should become systems rather than tickets
• Set up the interrupt path: Decide how outages and security reports reach the right engineer within the hour, and handle the ones that land on you
• Review changes to shared infrastructure: Code and configuration that touches secrets, access, or the network gets a review from you, and you make the secure option the default one

What We're Looking For

• 6+ years in networking and security at a company with production systems: You have owned networks and the security posture around them, not only advised on them
• Hands-on Linux networking: Routing, VLANs, firewalls, VPNs and overlay networks such as WireGuard, DNS and DHCP, PKI. You can debug a site-to-site problem from a shell on both ends
• You have run a SOC 2 or ISO 27001 program: Controls, evidence, policies, and auditors, through at least one full audit cycle
• Experience working with enterprise IT and security teams: You have completed long security questionnaires and defended a network design to a customer's infrastructure team
• Identity and device management: SSO with SAML and OIDC, an identity provider, MDM, and regular access reviews
• Infrastructure as code: Terraform, Python, or similar. Configuration is versioned and reviewed
• Comfort with AI coding agents: You have used tools like Claude Code or similar for real engineering work, directing agents through multi-step tasks. You understand their failure modes and know when to trust vs. verify
• Steady under interrupts: During an outage you communicate clearly, fix the problem, and write up what happened

Nice to Have

• Operational technology or plant-floor networks: PLCs, cell networks, industrial protocols
• NixOS or another declarative, reproducible systems stack
• Cloud and Kubernetes security: IAM, secrets, cluster hardening on AWS or Azure
• Compliance automation platforms such as Vanta
• Experience as a security lead or a first security hire
• Physical security and access control

$100,000 - $300,000 a year

About Our Roles & Titles

At Tutor, we believe great engineers and researchers are defined by what they build and the impact they have - not where they sit in an org chart or what title they have. Therefore, everyone in our R&D org holds the title Member of Technical Staff (MoTS). Our job postings use standard titles so you can find us, but if you join Tutor, you'll be a MoTS - with a level that is determined through the interview process.

That also means we hire people, not slots. Work at Tutor evolves every quarter, and we set the expectation of flexibility from day one - it's common for people to start on one thing and shift to another based on where the team needs them most. A high technical bar across the board is what makes that flexibility possible: it's what allows people to contribute meaningfully whatever problem they take on.