Systems Engineer – Platform Deployment Operations

Remote (U.S. – based, Eastern or Central time zone)

• Plan and design deployments: Review target architecture, confirm prerequisites, and design deployments for new regions and secure zones that meet local regulatory, data residency, and change control requirements; shepherd changes through client approvals.
• Build the infrastructure: Provision virtual machines and appliances (including OVA-based components) using infrastructure as code such as Terraform, specifying region, identifiers, CPU, memory, and storage. Install and configure SPHEREboard application, SQL Server database, and data collection components.
• Configure access the right way: Set up service accounts, groups, database and file system permissions, and credential retrieval, such as CyberArk safes for authenticating to Linux servers. When a client asks for a tighter least-privilege model, such as granular sudo rights instead of full sudo, research it, test it in our lab, and agree the approach.
• Connect storage and collect activity data: Configure connectors to Hitachi, NetApp, and Windows file platforms over SMB/CIFS and NFS; deploy and validate activity collection; run migrations and upgrades across DEV, QA, and PROD.
• Manage networking and certificates: Request firewall and port changes, validate DNS and connectivity between components, and request, install, and test SSL/TLS certificates.
• Keep the platform healthy: Track scan coverage and data refreshes and drive failures to a successful re-scan. Diagnose issues caused by client-side changes, such as a modified GPO, closed port, expired certificate, or rotated credential, by understanding how systems authenticate, communicate, and share data.
• Work with the data: Query and validate data in SQL, deliver it through feeds such as CSV extracts or Power BI datasets, and reconcile what the platform shows against the live environment.
• Document and improve: Maintain runbooks, service account inventories, and deployment records; share field lessons with Engineering and Product.

• 5+ years of hands-on experience in systems administration, infrastructure engineering, or technical operations, ideally in large, regulated enterprises.
• Strong Linux administration: users and groups, file ownership and permissions, sudo, SSH, services, and logs; comfortable with shell scripting.
• Working knowledge of Windows Server and Active Directory (accounts, groups, Group Policy, LDAP, Kerberos), enough to work confidently with the systems SPHEREboard connects to.
• Solid understanding of file share permissions: NTFS/NFS and share permissions.
• Practical networking knowledge: TCP/IP, DNS, firewalls and ports, proxies, and SSL/TLS certificates (requesting, installing, and validating them).
• Experience with virtualization (VMware or cloud VMs, OVA appliances) and infrastructure as code such as Terraform.
• Working SQL skills on Microsoft SQL Server, including queries, joins, permissions, and basic database administration.
• Methodical diagnosis of multi-system issues from symptom to root cause, with a security-minded approach to least privilege, credentials, and change control.
• Client skills: Builds trusted relationships with varied client personas, from infrastructure engineers to security and business stakeholders; learns who to go to for what; explains findings clearly; and influences without authority.

• Deploying enterprise software in customer environments, as a vendor or consultant.
• Hitachi or NetApp NAS administration, or file activity monitoring tools.
• CyberArk or another PAM platform, particularly credential retrieval for infrastructure, servers and applications.
• Multi-region deployments with data residency rules (APAC, EMEA); Cassandra or similar data stores.
• PowerShell, REST APIs, and reporting tools such as Power BI or Tableau.

• Inquisitive: Asks the right questions; wants to know how things work, not take them at face value.
• Systems thinking: Sees how components connect, authenticate, and depend on each other.
• Data storytelling: Reads granular details or an Excel export and tells the story of what the data means versus the live environment.
• Automation mindset: Turns repeatable work into consistent, documented steps.

• New regions and secure zones go live on a predictable cadence, with validation evidence.
• Scan coverage stays high, and failures are resolved quickly and don’t recur.
• Client teams trust the engineer, changes clear approvals smoothly, and documentation stays current.