Job description

This role is located in Somerville, MA - We are a hybrid work environment and are in the office 3+ days/per week. Tulip , the leader in AI-native frontline operations, is helping companies around the world equip their workforce with composable, connected apps, leading to higher quality work, improved efficiency, and end-to-end traceability across operations. Tulip’s cloud-native, no-code platform, powered by embedded AI, is driving the digital transformation of industrial environments through composable, human-centric solutions that go beyond disrupting the Manufacturing Execution System (MES) category. A spinoff out of MIT, Tulip is headquartered in Somerville, MA, with offices in Germany, Hungary, Singapore, Israel and Japan. Tulip has been recognized as a World Economic Forum Global Innovator, a 2024 Deloitte Technology Fast award winner, one of Energage’s Top Workplaces USA, and one of Built In Boston’s “Best Places to Work” and “Best Midsize Places to Work.” About You You're an engineering leader who cares about getting security-critical systems right and who wants to reach customers fast, not sit buried in a backlog. You think in specs and failure modes, you stay close to the code, and you're already using AI tooling to change how your team builds, not just how quickly they move. You'll take over a small, strong team and own how the world's most demanding manufacturers authenticate, provision, and govern access for their people and, increasingly, the AI agents acting on their behalf. What skills do I need? 7+ years of software engineering experience, with direct involvement building and operating security-critical or identity/access systems in production 3+ years of people management experience leading a software team, where you've hired, given constructive feedback, and grown engineers Hands-on depth with OAuth 2.0, SAML 2.0, OIDC, and SCIM in enterprise environments — you understand the specs and their failure modes, not just the libraries Experience building multi-tenant systems where tenant isolation is a hard requirement Working knowledge of IAM, secrets management, and access policy across AWS and Azure, including the tradeoffs when customers span both A track record of shipping clean, tested code and holding a team to the same standard Active use of AI tooling in your own practice, with a point of view on how it changes the way teams build Bachelor’s degree in Computer Science or related field, or equivalent working experience Key Responsibilities Own the architecture and roadmap for identity & access — SSO/SAML/OIDC federation, SCIM provisioning, multi-tenant account structures, and the authorization layer across Tulip's multi-cloud infrastructure. Represent Identity & Access in cross-functional architecture reviews and roadmap decisions. Lead and grow a small, high-caliber team — run regular 1:1s, set quality standards, give direct feedback, and develop engineers on security-critical systems. Protect operations where failures carry tangible stakes—from halted production lines to scrapped material and compliance risks. What you ship here has a direct impact on customers. Drive adoption of AI tooling in how the team builds — code review, test generation, spec drafting, and agent loops — and share what works across engineering. Create and own difficult tradeoffs on IAM and access policy where tenant isolation and enterprise compliance are non-negotiable. Ship work that reaches customers quickly and reliably, with operational excellence as the default. Key Collaborators Security & Infrastructure Platform Engineering Product Management Customer Success Working At Tulip We know even great candidates experience imposter syndrome. Even if you don’t match every requirement, applying gives you the opportunity to be considered. We’re building a strong, diverse team that values hard work, families, and personal well-being. Benefits of working with us include: Direct impact on product and culture Company equity Competitive benefits package including Health, Dental, Vision, Short-term Disability, Long-term Disability, Life Insurance, AD&D Insurance, Flexible Spending Account (FSA), Commuter Benefits, Parental Leave, and 401(K) Flexible work schedule and unlimited vacation policy Learning & Development program Virtual and in-office global company events and happy hours Fitness subsidies An inclusive, dog-friendly office with diverse and inspiring colleagues We are an equal opportunity employer. At Tulip, we celebrate all. Qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Help us build an inclusive community that will transform frontline operations. The compensation information displayed on each job posting reflects the range for new hire pay rates for the position across all US locations. Within the range posted, actual compensation will be determined depending on multiple factors including job-related knowledge & skills, experience, business needs, geographical location, market compensation data, and internal equity. Expected compensation ranges for this role may change over time. The salary range for this position is $160,000 - $220,000 per year. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Please note that we may use AI-based tools to support parts of our hiring process. All data processing is carried out in compliance with local data protection laws, ensuring all personal candidate information is handled securely and ethically.

Requirements

Must-haves

What skills do I need?
7+ years of software engineering experience, with direct involvement building and operating security-critical or identity/access systems in production
3+ years of people management experience leading a software team, where you've hired, given constructive feedback, and grown engineers
Hands-on depth with OAuth 2.0, SAML 2.0, OIDC, and SCIM in enterprise environments — you understand the specs and their failure modes, not just the libraries
Experience building multi-tenant systems where tenant isolation is a hard requirement
Working knowledge of IAM, secrets management, and access policy across AWS and Azure, including the tradeoffs when customers span both
A track record of shipping clean, tested code and holding a team to the same standard
Active use of AI tooling in your own practice, with a point of view on how it changes the way teams build
Bachelor’s degree in Computer Science or related field, or equivalent working experience
Own the architecture and roadmap for identity & access — SSO/SAML/OIDC federation, SCIM provisioning, multi-tenant account structures, and the authorization layer across Tulip's multi-cloud infrastructure.
Represent Identity & Access in cross-functional architecture reviews and roadmap decisions.
Lead and grow a small, high-caliber team — run regular 1:1s, set quality standards, give direct feedback, and develop engineers on security-critical systems.
Protect operations where failures carry tangible stakes—from halted production lines to scrapped material and compliance risks. What you ship here has a direct impact on customers.
Drive adoption of AI tooling in how the team builds — code review, test generation, spec drafting, and agent loops — and share what works across engineering.
Create and own difficult tradeoffs on IAM and access policy where tenant isolation and enterprise compliance are non-negotiable.
Ship work that reaches customers quickly and reliably, with operational excellence as the default.
Key Collaborators
Security & Infrastructure
Platform Engineering
Product Management
Customer Success
Working At Tulip
We know even great candidates experience imposter syndrome. Even if you don’t match every requirement, applying gives you the opportunity to be considered.
We’re building a strong, diverse team that values hard work, families, and personal well-being. Benefits of working with us include:

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aigoawsazure

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Parental Leave