[Hiring] Senior Systems Engineer @Share

Role Description

This role sits at the intersection of network engineering and systems engineering. You will own the infrastructure that makes internet access work for Share’s partner ISPs.

We are hiring a Systems Engineer to own Share’s network-facing infrastructure:

• FreeRADIUS proxy servers that authenticate ISP subscribers
• The provisioning pipeline that pushes credentials and plan attributes to per-partner RADIUS servers
• BNG integration layer
• Deployment and monitoring of all systems infrastructure

This is a hands-on role. You will:

• Configure FreeRADIUS servers
• Write deployment scripts
• Troubleshoot authentication failures on production networks
• Design infrastructure that scales from 5 ISP partners to 50

You will be the person the team calls when a subscriber can’t authenticate or when a new ISP’s BNG doesn’t behave as expected.

What you will own

• FreeRADIUS proxy architecture: Own the configuration, deployment, monitoring, and scaling of the central RADIUS proxy that routes authentication requests.
• Per-partner FreeRADIUS servers: Manage dedicated FreeRADIUS instances with a Hono API overlay for programmatic CRUD of subscriber credentials and plan attributes.
• BNG integration support: Work with the network team to define and validate BNG-side configuration changes for each ISP partner.
• Provisioning pipeline: Ensure the FreeRADIUS API, database, and RADIUS configuration are correct and performant.
• Infrastructure and deployment: Handle server provisioning, deployment automation, monitoring, logging, and security for all systems infrastructure.
• CoA (Change of Authorization): Design and implement the CoA endpoint on per-partner FreeRADIUS servers for real-time plan changes and session disconnects without re-authentication.

Technical environment

• RADIUS and network authentication
• FreeRADIUS (v3 in production, v4 evaluation in progress)
• RADIUS protocols: Access-Request/Accept/Reject, Accounting (Start/Interim/Stop), CoA (Disconnect-Request, CoA-Request)
• PPPoE authentication flow
• MikroTik RouterOS BNG configuration
• Per-user flat attributes pushed via Hono API to FreeRADIUS SQL backend

• Systems and infrastructure
• Linux server administration (Ubuntu)
• Docker containerization for FreeRADIUS instances
• Hono (lightweight Node.js framework) for the FreeRADIUS API overlay
• PostgreSQL for RADIUS user databases
• GitHub Actions for CI/CD
• Monitoring: Loki + Pino for structured logging, Sentry for error tracking

• Integration points with the software platform
• NestJS Provisioning microservice calls your FreeRADIUS API
• Kafka events trigger provisioning actions
• The proxy’s routing decision determines the subscriber’s billing path

Requirements

• 5+ years of professional systems engineering or network engineering experience
• At least 2 years working directly with RADIUS (FreeRADIUS, Radiator, or NPS) in a production ISP or telecommunications environment
• Deep FreeRADIUS expertise
• Strong Linux systems administration
• Understanding of PPPoE authentication, DHCP, IP pool management, and BNG interactions with RADIUS servers
• Experience deploying and managing infrastructure in production
• Comfortable with scripting and light application development

Strong preference

• Experience in East African ISP or telecommunications infrastructure
• Experience with FreeRADIUS proxy configurations
• Experience with CoA (Change of Authorization) and Disconnect-Message implementation
• Docker and container orchestration for networking services
• Experience working alongside software engineering teams

AI-augmented engineering (required mindset)

Share operates with AI tools as a core part of engineering workflows. This applies to systems engineering as much as software development.

• You use AI tools for configuration generation, troubleshooting, documentation, and scripting.
• You are comfortable with AI-generated specifications and can validate them against real-world behavior.
• You see AI as a way to handle the breadth of systems knowledge required for this role.
• You contribute to the team’s AI workflows by writing clear, structured documentation.

Benefits

• A seat at the table while we build the technical backbone of Africa’s next-generation internet.
• Competitive salary and meaningful equity in a mission-driven, investor-backed company.
• Private health and wellness benefits.
• A high-ownership environment with a steep but well-supported learning curve.