System Engineer - Secure Fleet Platform

System Engineer - Secure Fleet Platform (80–100%)

Location:

Zurich / Bern

We are looking for a System Engineer to join the team responsible for the secure operational foundations of Open Systems’ managed security platform.

This role sits at the centre of two strategic engineering initiatives: a complete redesign of our management-access architecture and a modernisation of the connectivity layer that enables secure, reliable operation of a production fleet of approximately 10,000 systems.

You will help build the technical foundations through which engineers and services securely access, configure, operate, update, observe, and troubleshoot this fleet. The work spans Linux-based systems, secure access, authentication and authorisation, networking, automation, configuration, software lifecycle management, and operational tooling.

With close support from experienced colleagues, you will develop toward independent ownership of services and components. You will learn how to make safe changes to a large live environment and build the engineering judgement required for production systems.

You are excited by the prospect of solving difficult production-engineering problems at fleet scale; where security, reliability, automation, and a safe migration path all matter equally.

• Help design, implement, and operate the next generation of secure management access for people, services, and automated operational workflows.
• Build secure, least-privilege, and auditable access paths to production systems, including management gateways, SSH-based access, authentication, authorisation, and related controls.
• Improve the resilience, usability, traceability, and operational safety of privileged access.
• Collaborate with security, platform, and operations teams to ensure the target architecture works in normal operations as well as under incident pressure.
• Contribute to the incremental migration of existing systems and workflows to the new access architecture, with careful rollback and continuity considerations.

• Help redesign the secure connectivity foundation that enables access to, control of, and operation of an approximately 10,000-system production fleet.
• Engineer resilient, scalable connectivity patterns between central platform services and distributed Linux hosts, virtual machines, and related infrastructure.
• Develop automation, observability, and tooling that make fleet-wide changes safe, repeatable, measurable, and recoverable.
• Improve the foundations used for remote management, configuration delivery, software lifecycle management, diagnostics, and incident response.
• Operate and evolve core platform services, including management access, remote connectivity, time synchronisation, Nginx, Redis, and supporting Linux-based infrastructure.

• Learn to own systems through their lifecycle: design, implementation, testing, rollout, operation, incident learning, and continuous improvement.
• Use Git-based development, CI/CD, infrastructure-as-code, and automated testing to deliver reliable changes.
• Collaborate across engineering and Mission Control operations to turn production requirements into practical, supportable platform capabilities.
• Contribute to clear operational documentation, runbooks, and architectural decision‑making.
• Evaluate and adopt tools and approaches that improve the team’s security, speed, and reliability.

• Linux:
  Solid practical knowledge of Linux systems, service management, permissions, processes, file systems, and troubleshooting.
• Networking:
  Strong understanding of TCP/IP, DNS, TLS, SSH, routing…