System Engineer - Secure Fleet Platform

About the role

We are looking for a System Engineer to join the team responsible for the secure operational foundations of Open Systems’ managed security platform. The role focuses on redesigning management‑access architecture and modernising the connectivity layer for a production fleet of about 10,000 Linux systems.

Key responsibilities

• Design, implement and operate a next‑generation secure management‑access architecture, including least‑privilege SSH gateways, authentication and authorisation controls.
• Redesign and engineer resilient, scalable connectivity patterns between central services and distributed Linux hosts, virtual machines and related infrastructure.
• Develop automation, observability and tooling to make fleet‑wide changes safe, repeatable and recoverable.
• Operate core platform services such as management access, remote connectivity, time synchronisation, Nginx, Redis and supporting Linux infrastructure.
• Collaborate with security, platform and operations teams to ensure architecture works under normal and incident conditions.

Required profile

• Solid practical knowledge of Linux systems, service management, permissions, processes and troubleshooting.
• Strong understanding of TCP/IP, DNS, TLS, SSH, routing and systematic network troubleshooting.
• Experience or strong interest in authentication, authorisation, privileged access, VPN or remote‑access services.
• Proficiency in scripting or programming languages such as Python, Go, Bash or Perl.
• Familiarity with Git, code review, CI/CD pipelines and automated deployments.

Required skills

• Linux
• TCP/IP, DNS, TLS, SSH, routing
• Authentication, authorisation, privileged access, VPN
• Python, Go, Bash, Perl
• Git, CI/CD, infrastructure‑as‑code
• HashiCorp Boundary, bastion/jump‑host architectures, PKI, SSH certificate authorities
• OpenVPN, configuration management, Helm, Kubernetes, GitOps
• Redis, Nginx, RPM packaging, monitoring, logging, alerting, tracing