Systems Engineer – Platform Deployment Operations

SPHERE Technology Solutions•,

19h•Remote

About The Position

The Systems Engineer – Platform Deployment Operations is a hands-on, customer-facing role dedicated to a long-term engagement with a global enterprise client. The engineer expands SPHEREboard’s unstructured data capabilities—which collect permission and activity data from file servers and NAS platforms—into new regions and secure network zones, and maintains the platform after deployment. The role is suited to a systems or infrastructure engineer who understands how Windows, Linux, directory, network, and storage systems work together; can deploy technical software across regional, regulatory, and organizational boundaries; and enjoys working closely with client teams as a trusted technical partner. SPHERE describes itself as a global leader in Identity Hygiene. Its solutions use automation to discover, remediate, and secure identities, helping organizations reduce risks to their accounts, data, and infrastructure. SPHERE emphasizes passion, empathy, and authenticity, and is an equal-opportunity employer.

Requirements

At least 5 years of hands-on experience in systems administration, infrastructure engineering, or technical operations, ideally in large, regulated enterprises.
Strong Linux administration skills, including users and groups, file ownership and permissions, sudo, SSH, services, and logs; comfort with shell scripting.
Working knowledge of Windows Server and Active Directory, including accounts, groups, Group Policy, LDAP, and Kerberos.
Solid understanding of NTFS/NFS and file-share permissions.
Practical networking knowledge, including TCP/IP, DNS, firewalls and ports, proxies, and requesting, installing, and validating SSL/TLS certificates.
Experience with virtualization, such as VMware or cloud VMs and OVA appliances, and infrastructure as code such as Terraform.
Working SQL skills on Microsoft SQL Server, including queries, joins, permissions, and basic database administration.
Methodical diagnosis of multi-system issues from symptom to root cause, with a security-minded approach to least privilege, credentials, and change control.
Ability to build trusted relationships with varied client personas, learn appropriate points of contact, explain findings clearly, and influence without authority.

Nice To Haves

Experience deploying enterprise software in customer environments as a vendor or consultant.
Hitachi or NetApp NAS administration, or experience with file activity monitoring tools.
CyberArk or another privileged access management (PAM) platform, particularly credential retrieval for infrastructure, servers, and applications.
Experience with multi-region deployments involving data residency rules, such as APAC or EMEA, and Cassandra or similar data stores.
PowerShell, REST APIs, and reporting tools such as Power BI or Tableau.

Responsibilities

Review target architecture, confirm prerequisites, and design deployments for new regions and secure zones that meet local regulatory, data residency, and change-control requirements; shepherd changes through client approvals.
Provision virtual machines and appliances, including OVA-based components, using infrastructure as code such as Terraform; specify region, identifiers, CPU, memory, and storage.
Install and configure the SPHEREboard application, SQL Server database, and data collection components.
Set up service accounts, groups, database and file-system permissions, and credential retrieval, including CyberArk safes for Linux server authentication.
Research, test in a lab, and agree on least-privilege approaches such as granular sudo rights when requested by a client.
Configure connectors to Hitachi, NetApp, and Windows file platforms over SMB/CIFS and NFS; deploy and validate activity collection; run migrations and upgrades across DEV, QA, and PROD.
Request firewall and port changes; validate DNS and connectivity between components; request, install, and test SSL/TLS certificates.
Track scan coverage and data refreshes, and drive failures through successful re-scans.
Diagnose issues caused by client-side changes, such as modified GPOs, closed ports, expired certificates, or rotated credentials, by understanding how systems authenticate, communicate, and share data.
Query and validate SQL data, deliver it through feeds such as CSV extracts or Power BI datasets, and reconcile platform results against the live environment.
Maintain runbooks, service-account inventories, and deployment records; share field lessons with Engineering and Product.
Build trusted relationships with client infrastructure, security, and business stakeholders; explain findings clearly and influence without authority.