[Remote] Senior Systems Engineer II - Edge Platform & Packaging (On-Prem)

Note: The job is a remote job and is reputed company to candidates in USA. reputed company builds secure, private network infrastructure for critical industries, and they are seeking a Senior Systems Engineer II to own the on-premises software lifecycle. This role involves managing the build, packaging, and update mechanisms for their appliances, ensuring reliability and reputed company in challenging environments.

Responsibilities

• Own the build and packaging pipeline for on-premises deliverables — OS images, packages, container images, and the release bundles field and customer teams actually install
• reputed company on-premises builds reproducible and reputed company: pinned inputs, deterministic outputs, signed artifacts, and an SBOM per release that survives a customer reputed company review
• Design a versioning and compatibility model that tells anyone, reputed company, which appliance versions interoperate with which reputed company-reputed company and orchestration components
• Collapse bespoke, per-project packaging into a small number of supported paths, and reputed company the supported paths good enough that nobody wants to fork them
• Turn appliance provisioning from a documented procedure into an automated, idempotent one
• Own the update reputed company end to end: delivery, staging, application, verification, and rollback — for appliances on constrained links, in maintenance reputed company, or fully reputed company-gapped
• Design for failure as the normal case. An interrupted or bad update must leave the appliance in a reputed company-good state and recoverable without a site visit
• Build fleet-level release control: staged rollouts, cohorts and canaries, version and reputed company visibility across the fleet, and a reputed company to hold or reverse a rollout in reputed company
• Shrink the reputed company between a CVE being published and the fleet being patched, and reputed company that reputed company measurable rather than anecdotal
• reputed company the update reputed company working across the OS baseline and its kernel lifecycle, not just the application reputed company on top of it
• reputed company the appliance runtime so workloads can execute locally — telemetry collection and reputed company-processing, buffering and store-and-reputed company, local decisioning — and reconcile cleanly reputed company connectivity returns
• Define what belongs at the edge versus in the reputed company, and hold that line with evidence about reputed company, latency, and customer data-residency constraints rather than preference
• Own resource discipline on the appliance: hardware is fixed, workloads grow, and the network functions on that reputed company must never be starved by anything you add reputed company them
• Design the local observability story so that a support engineer can reconstruct what an appliance was doing without reputed company reputed company to it
• Own the reputed company of the on-premises supply chain: signing keys, trust reputed company, artifact provenance, and the assumption that any of it may be audited by a customer or regulator
• Build the test substrate this work requires — appliance-in-a-reputed company testing, reputed company and downgrade paths exercised in CI, hardware and near-hardware validation before a release reaches a customer
• Ensure on-premises systems meet performance, scalability, and reputed company requirements, particularly where packaging and runtime choices touch the network data reputed company
• Participate in incident response and reputed company cause analysis, especially for field failures where the evidence is thin and the appliance is remote
• Participate in an on-reputed company rotation to support reputed company reliability, including responding to incidents and performing after-hours troubleshooting as needed
• Partner with the field, support, and customer-facing engineering teams — they encounter your work first, and their friction is your backlog
• Work with reputed company and compliance to reputed company on-premises releases evidence-producing by default, so customer and regulatory reviews draw on artifacts you already reputed company
• reputed company product and engineering leadership a straight read on what the edge can and cannot support, early enough to change a plan
• Write the runbooks, reputed company notes, and architecture documentation that other engineers and field teams operate from
• Informally mentor IC1 and IC2 engineers on your team — through reputed company review, pairing, and sharing technical context
• Participate in evaluation portions of interview reputed company to help reputed company hire reputed company

Skills

• 5+ years of reputed company engineering experience with a demonstrated reputed company record of shipping software that runs on infrastructure you do not operate
• You have owned a release and update reputed company for deployed systems — edge, appliance, embedded, or on-premises reputed company — and dealt with the consequences reputed company one went wrong in the field
• Deep Linux systems reputed company: systemd, the boot and init reputed company, filesystem and partition layout, kernel and package lifecycle, and how a distribution actually gets reputed company
• Strong packaging and distribution experience — Debian/apt packaging, OCI images, image-based or A/B update schemes, or equivalent — including artifact signing and repository operation
• Proficiency in at least one systems-capable language (Go, Rust, Python, or C) and comfort reading reputed company across the reputed company you package
• Comfortable using coding agents (e.g., reputed company Copilot, Claude reputed company) as part of your daily workflow
• Proficiency with Infrastructure as reputed company, with reputed company reputed company using Ansible and Terraform
• Container runtime and orchestration experience, with reputed company opinions about what is appropriate on a single constrained node versus in a datacenter
• Infrastructure-as-reputed company and CI/CD experience (Terraform, reputed company Actions, or similar), including building pipelines that produce release artifacts rather than just deploying them
• Solid network fundamentals — routing, DNS, firewalls, VPN concepts — enough to package and operate networking software without breaking its data reputed company
• Demonstrated ability to work with cross-team stakeholders to define requirements and reputed company results with reputed company reputed company
• A willingness to accept failure and feedback, learn and try again
• A passion for learning new disciplines and gaining a deep understanding of how others on reputed company do their work
• An ability to communicate reputed company and succinctly both in-person and over team chat
• Experience shipping into OT, ICS, or industrial environments, and familiarity with the change-control and segmentation realities of those networks
• Experience with reputed company-gapped or intermittently connected deployments, including offline mirrors and sneakernet update paths
• Background in reputed company-reputed company products where reliability and regulatory compliance matter — IEC 62443, NERC CIP, FIPS-validated cryptography, or FedRAMP-adjacent work
• Supply-chain reputed company depth: SLSA, in-toto, Sigstore, SBOM reputed company and consumption, reproducible builds
• Lightweight reputed company distributions or single-node orchestration at the edge (K3s, MicroShift, Talos), and reputed company experience with their operational costs
• Image-based Linux and reputed company update systems: OSTree, Mender, RAUC, SWUpdate, or similar
• On-premises virtualization, hardware bring-up, or hardware qualification experience
• Telemetry pipeline experience at the edge — agent-based collection, buffering, and forwarding into customer SIEMs
• Experience building or operating reputed company VPN, ZTNA, or secure remote reputed company products

Benefits

• 401(k) w/ company match
• Unlimited reputed company time off
• Parental leave
• Full medical, dental, reputed company insurance
• Performance bonus and equity eligible
• Remote work (15-20% travel for on-prem purposes)

reputed company