[Hiring] Systems Engineer @SPHERE Technology Solutions

Role Description

The Systems Engineer – Platform Deployment Operations is a hands-on, customer-facing role dedicated to a long-term engagement with a global enterprise client. You will expand SPHEREboard’s unstructured data capabilities, which collect permission and activity data from file servers and NAS platforms, into new regions and secure network zones, and keep the platform healthy once it is running.

It suits a systems or infrastructure engineer who understands how Windows, Linux, directory, network, and storage systems work together; can deploy technical software where every change crosses regional, regulatory, and organizational boundaries; and enjoys working closely with client teams as a trusted, steady technical partner.

Essential Functions:

• Plan and design deployments:
  • Review target architecture, confirm prerequisites, and design deployments for new regions and secure zones that meet local regulatory, data residency, and change control requirements; shepherd changes through client approvals.
• Build the infrastructure:
  • Provision virtual machines and appliances (including OVA-based components) using infrastructure as code such as Terraform, specifying region, identifiers, CPU, memory, and storage.
  • Install and configure SPHEREboard application, SQL Server database, and data collection components.
• Configure access the right way:
  • Set up service accounts, groups, database and file system permissions, and credential retrieval, such as CyberArk safes for authenticating to Linux servers.
  • Research and test tighter least-privilege models, such as granular sudo rights instead of full sudo.
• Connect storage and collect activity data:
  • Configure connectors to Hitachi, NetApp, and Windows file platforms over SMB/CIFS and NFS; deploy and validate activity collection; run migrations and upgrades across DEV, QA, and PROD.
• Manage networking and certificates:
  • Request firewall and port changes, validate DNS and connectivity between components, and request, install, and test SSL/TLS certificates.
• Keep the platform healthy:
  • Track scan coverage and data refreshes and drive failures to a successful re-scan.
  • Diagnose issues caused by client-side changes, such as a modified GPO, closed port, expired certificate, or rotated credential.
• Work with the data:
  • Query and validate data in SQL, deliver it through feeds such as CSV extracts or Power BI datasets, and reconcile what the platform shows against the live environment.
• Document and improve:
  • Maintain runbooks, service account inventories, and deployment records; share field lessons with Engineering and Product.

Qualifications

• 5+ years of hands-on experience in systems administration, infrastructure engineering, or technical operations, ideally in large, regulated enterprises.
• Strong Linux administration: users and groups, file ownership and permissions, sudo, SSH, services, and logs; comfortable with shell scripting.
• Working knowledge of Windows Server and Active Directory (accounts, groups, Group Policy, LDAP, Kerberos).
• Solid understanding of file share permissions: NTFS/NFS and share permissions.
• Practical networking knowledge: TCP/IP, DNS, firewalls and ports, proxies, and SSL/TLS certificates.
• Experience with virtualization (VMware or cloud VMs, OVA appliances) and infrastructure as code such as Terraform.
• Working SQL skills on Microsoft SQL Server, including queries, joins, permissions, and basic database administration.
• Methodical diagnosis of multi-system issues from symptom to root cause, with a security-minded approach to least privilege, credentials, and change control.

Requirements

• Builds trusted relationships with varied client personas, from infrastructure engineers to security and business stakeholders.
• Explains findings clearly and influences without authority.

Preferred Experience

• Deploying enterprise software in customer environments, as a vendor or consultant.
• Hitachi or NetApp NAS administration, or file activity monitoring tools.
• CyberArk or another PAM platform, particularly credential retrieval for infrastructure, servers and applications.
• Multi-region deployments with data residency rules (APAC, EMEA); Cassandra or similar data stores.
• PowerShell, REST APIs, and reporting tools such as Power BI or Tableau.

Personality Traits

• Inquisitive: Asks the right questions; wants to know how things work, not take them at face value.
• Systems thinking: Sees how components connect, authenticate, and depend on each other.
• Data storytelling: Reads granular details or an Excel export and tells the story of what the data means versus the live environment.
• Automation mindset: Turns repeatable work into consistent, documented steps.

What Success Looks Like

• New regions and secure zones go live on a predictable cadence, with validation evidence.
• Scan coverage stays high, and failures are resolved quickly and don’t recur.
• Client teams trust the engineer, changes clear approvals smoothly, and documentation stays current.

Benefits

• Build deep expertise on a demanding global deployment that reduces data access risk.
• High-growth, collaborative company with competitive compensation, benefits, and room to grow.

Company Description

SPHERE is the global leader in Identity Hygiene. We are dedicated to reshaping modern identity programs by embedding this foundational fabric, enabling organizations to quickly reduce risks. Our solutions deliver immediate time-to-value by leveraging automation to discover, remediate and secure identities, now and forever.

Driven by our core values of passion, empathy, and authenticity, our vision drives us to continually innovate, helping our clients to sleep better knowing their attack surface is drastically reduced, thwarting the plans of bad actors every single day.

To find out more about SPHERE and our solutions, please visit www.sphereco.com .

SPHERE is an equal-opportunity employer. Applicants will be evaluated without regard to race, color, religion, sex, national origin, disability, veteran status, and other legally protected characteristics.