What skills do I need?
7+ years of software engineering experience, with direct involvement building and operating security-critical or identity/access systems in production
3+ years of people management experience leading a software team, where you've hired, given constructive feedback, and grown engineers
Hands-on depth with OAuth 2.0, SAML 2.0, OIDC, and SCIM in enterprise environments — you understand the specs and their failure modes, not just the libraries
Experience building multi-tenant systems where tenant isolation is a hard requirement
Working knowledge of IAM, secrets management, and access policy across AWS and Azure, including the tradeoffs when customers span both
A track record of shipping clean, tested code and holding a team to the same standard
Active use of AI tooling in your own practice, with a point of view on how it changes the way teams build
Bachelor’s degree in Computer Science or related field, or equivalent working experience
Key Responsibilities
Own the architecture and roadmap for identity & access — SSO/SAML/OIDC federation, SCIM provisioning, multi-tenant account structures, and the authorization layer across Tulip's multi-cloud infrastructure.
Represent Identity & Access in cross-functional architecture reviews and roadmap decisions.
Lead and grow a small, high-caliber team — run regular 1:1s, set quality standards, give direct feedback, and develop engineers on security-critical systems.
Protect operations where failures carry tangible stakes—from halted production lines to scrapped material and compliance risks. What you ship here has a direct impact on customers.
Drive adoption of AI tooling in how the team builds — code review, test generation, spec drafting, and agent loops — and share what works across engineering.
Create and own difficult tradeoffs on IAM and access policy where tenant isolation and enterprise compliance are non-negotiable.
Ship work that reaches customers quickly and reliably, with operational excellence as the default.
Key Collaborators
Security & Infrastructure
Platform Engineering
Product Management
Customer Success
Working At Tulip
We know even great candidates experience imposter syndrome. Even if you don’t match every requirement, applying gives you the opportunity to be considered.
We’re building a strong, diverse team that values hard work, families, and personal well-being. Benefits of working with us include:
Direct impact on product and culture
Company equity
Competitive benefits package including Health, Dental, Vision, Short-term Disability, Long-term Disability, Life Insurance, AD&D Insurance, Flexible Spending Account (FSA), Commuter Benefits, Parental Leave, and 401(K)
Flexible work schedule and unlimited vacation policy
Learning & Development program
Virtual and in-office global company events and happy hours
Fitness subsidies
An inclusive, dog-friendly office with diverse and inspiring colleagues
We are an equal opportunity employer. At Tulip, we celebrate all. Qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. Help us build an inclusive community that will transform frontline operations.
The compensation information displayed on each job posting reflects the range for new hire pay rates for the position across all US locations. Within the range posted, actual compensation will be determined depending on multiple factors including job-related knowledge & skills, experience, business needs, geographical location, market compensation data, and internal equity. Expected compensation ranges for this role may change over time. The salary range for this position is $160,000 - $220,000 per year.
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Please note that we may use AI-based tools to support parts of our hiring process. All data processing is carried out in compliance with local data protection laws, ensuring all personal candidate information is handled securely and ethically.
