Systems Engineer II

About the Role

The Systems Engineer II will build, run, and improve the platforms that connect Torus sites: provisioning and operating systems, secure remote access, telemetry collection, and the integration of industrial controllers and facility equipment into our central monitoring environment. You will own the day-to-day health of these systems and drive them toward more automation, reliability, and visibility.

This is a hands-on role for an engineer who is comfortable crossing boundaries between servers, networks, and industrial equipment. You will work closely with network, compute, and controls teams to bring data from the field into our platforms, and you will administer the core infrastructure tooling that keeps it all running.

Who You Are

You build technology people can rely on, and when it breaks, you find out why. You write down what you learn so the next engineer doesn’t start from zero.

• You ask before you push back. You find out what others know about the environment before you reject a design or change a config, and you assume good intent.
• You say it early and directly. You flag risks and missed windows as soon as you see them, give clear feedback, and praise good work openly.
• You build on strengths. You look for what each teammate does well and use it to cover the team’s gaps.
• You lead with the answer. Incident updates, change requests, and runbooks open with the status and the action needed.
• You move fast and test first. You automate repeatable work and validate before rollout.
• You think in systems. Network, compute, software, and security decisions depend on each other, and on power and cooling at the site. You use telemetry and logs to make the call, and when a technical preference conflicts with what the customer needs, the customer wins.

Responsibilities

Provisioning and operating systems

• Administer and operate MAAS (Metal as a Service) for bare-metal provisioning, including machine enlistment, commissioning, and deployment workflows
• Build and maintain standardized OS images, cloud-init configurations, and deployment templates for Linux hosts
• Automate OS patching, configuration management, and baseline compliance across the fleet
• Troubleshoot provisioning, boot, and OS-level issues, and document root causes and fixes
• Work with Compute Engineering on the handoff between hardware standards (BIOS, boot order, BMC) and the MAAS workflow

Secure remote access and connectivity

• Deploy and maintain Tailscale subnet routers and related access infrastructure across sites, designed for high availability so that no single router is a single point of failure for site access
• Manage Tailscale ACLs, tags, and access policies based on least-privilege principles, and support third-party and vendor access requests
• Monitor tunnel health and connectivity, and troubleshoot routing, DNS, and ACL issues using a tiered diagnostic approach
• Keep subnet routers and supporting hosts patched, hardened, and consistently configured

Telemetry and monitoring

• Build, deploy, and operate telemetry collection servers and data pipelines that aggregate sensor and device data from field sites, including BMCs (IPMI and Redfish), PDUs, power shelves, cooling distribution units, and network gear
• Integrate with vendor REST and JSON-RPC APIs, SNMP, and industrial protocols to collect operational data
• Configure polling, collection intervals, retention, and alerting for operational data
• Integrate telemetry sources with monitoring, logging, and visualization platforms (for example Datadog)
• Maintain accurate inventories of data sources, device registers, and collection configurations

Controller and PLC integration

• Support integration of PLCs and industrial devices (for example chiller and cooling controllers) into central monitoring and control systems, using protocols such as Modbus TCP and other industrial standards
• Work with controls engineers and vendors on register maps, protocol gateways (serial-to-IP converters, protocol translators), addressing, and test plans
• Help design network segmentation for controllers and gateways in coordination with network engineering, and validate that integrations stay within defined security boundaries
• Support commissioning and troubleshooting of controller integrations in the field

Administrative platforms and management plane

• Administer the management plane of enterprise network and security platforms, including Arista, Cisco, and Palo Alto environments, covering user and role management, configuration backups, firmware upgrades, and logging
• Maintain management-plane standards: access control, MFA, credential vaulting and rotation across BMCs, PDUs, and network devices, audit logging, and configuration baselines
• Use centralized management tools (for example, Arista CloudVision, Cisco management platforms, and Panorama) to push and verify configurations
• Contribute to change management by testing, documenting, and implementing approved changes, working with Network Engineering, who own data-plane design and templates

Documentation, reliability, and collaboration

• Write and maintain runbooks, diagrams, configuration records, and integration documentation
• Support security and compliance efforts with NIST and CIS-aligned evidence and configuration documentation
• Participate in a defined on-call rotation for the platforms you operate
• Mentor interns and junior staff as opportunities arise

Required Experience

• Bachelor's degree in IT, computer science, engineering, or a related field, or equivalent practical experience
• 3-5 years of experience in systems engineering, infrastructure engineering, or a similar role
• Strong Linux administration skills (Ubuntu preferred), including networking, services, storage, and command-line troubleshooting
• Experience with automated or bare-metal provisioning tools (MAAS, Foreman, PXE/iPXE, Kickstart, cloud-init, or similar)
• Solid networking fundamentals: TCP/IP, VLANs, routing, DNS, firewall concepts, and VPN technologies
• Experience administering enterprise network or security platforms (Cisco, Arista, Palo Alto, Juniper, Fortinet, or comparable)
• Proficiency in Python or Bash, including integrating with REST or JSON APIs, plus familiarity with configuration management (Ansible or similar)
• Experience with monitoring, logging, or telemetry systems
• Ability to write clear technical documentation and follow change-control procedures
• Self-directed problem solving with the judgment to know when to escalate
• Willingness to be part of an on-call rotation
• Willingness to travel within Utah, with occasional travel to remote sites

Preferred Experience

• Experience with Tailscale, WireGuard, or other mesh or overlay VPNs, including high-availability subnet routing
• Familiarity with industrial protocols (Modbus RTU/TCP, OPC UA, DNP3, BACnet) and experience integrating PLCs or sensors with IT systems
• Experience with PLC or SCADA platforms (for example CODESYS or Ignition)
• Experience with serial-to-IP gateways and protocol translation devices
• Experience with time-series databases and telemetry stacks (Prometheus, Grafana, InfluxDB, Datadog, or similar)
• Experience with secrets management and credential rotation at fleet scale
• Familiarity with centralized management platforms such as CloudVision, Panorama, or Cisco Catalyst Center
• Experience with endpoint security and device management tools (EDR, MDM)
• Background in OT/ICS, energy, or critical infrastructure environments
• Knowledge of NIST, CIS, IEC 62443, NERC CIP, CMMC, and similar security frameworks
• Relevant certifications (CCNA/CCNP, PCNSA/PCNSE, Arista ACE, RHCSA, Linux Foundation)

Additional Details

Background Check All candidates are subject to a background check.

Location This role is a hybrid remote position based in Salt Lake City. The Engineer will be expected to travel to Torus locations located in Salt Lake and Utah counties as needed.

Compensation $100,000 - 160,000 (Note: We have the flexibility to hire at different levels, which may impact the corresponding pay range.)

Work Authorization Applicants must already have the legal authorization to work in the US without requiring any employer sponsorship.

Physical Requirements

• Regularly operates a computer and other peripheral office equipment such as a printer or mouse.
• Ability to communicate information so others can understand. Must be able to exchange accurate information in these situations.
• Must report to work reliably and with the ability to use full and unimpaired skills and judgment to safely execute your job.
• Proficiency in reading, writing, and speaking English required.