Systems Engineer II

Torus is headquartered in Utah and is expanding manufacturing at our 545,000-square-foot facility in Salt Lake City called GigaOne. We are the world’s first mesh energy infrastructure, uniting communities through resilient, sustainable, and intelligent power. We design, engineer, manufacture, install, and support our systems end-to-end, standing behind them throughout their lifecycle. Torus systems help reduce costs, lower emissions, and protect facilities from outages, while strengthening the security and reliability of the broader utility grid. Torus is committed to American manufacturing, engineering excellence, and building energy systems that last.

• Administer and operate MAAS (Metal as a Service) for bare-metal provisioning, including machine enlistment, commissioning, and deployment workflows
• Build and maintain standardized OS images, cloud-init configurations, and deployment templates for Linux hosts
• Automate OS patching, configuration management, and baseline compliance across the fleet
• Troubleshoot provisioning, boot, and OS-level issues, and document root causes and fixes
• Work with Compute Engineering on the handoff between hardware standards (BIOS, boot order, BMC) and the MAAS workflow

• Deploy and maintain Tailscale subnet routers and related access infrastructure across sites, designed for high availability so that no single router is a single point of failure for site access
• Manage Tailscale ACLs, tags, and access policies based on least-privilege principles, and support third-party and vendor access requests
• Monitor tunnel health and connectivity, and troubleshoot routing, DNS, and ACL issues using a tiered diagnostic approach
• Keep subnet routers and supporting hosts patched, hardened, and consistently configured

• Build, deploy, and operate telemetry collection servers and data pipelines that aggregate sensor and device data from field sites, including BMCs (IPMI and Redfish), PDUs, power shelves, cooling distribution units, and network gear
• Integrate with vendor REST and JSON-RPC APIs, SNMP, and industrial protocols to collect operational data
• Configure polling, collection intervals, retention, and alerting for operational data
• Integrate telemetry sources with monitoring, logging, and visualization platforms (for example Datadog)
• Maintain accurate inventories of data sources, device registers, and collection configurations

• Support integration of PLCs and industrial devices (for example chiller and cooling controllers) into central monitoring and control systems, using protocols such as Modbus TCP and other industrial standards
• Work with controls engineers and vendors on register maps, protocol gateways (serial-to-IP converters, protocol translators), addressing, and test plans
• Help design network segmentation for controllers and gateways in coordination with network engineering, and validate that integrations stay within defined security boundaries
• Support commissioning and troubleshooting of controller integrations in the field

• Administer the management plane of enterprise network and security platforms, including Arista, Cisco, and Palo Alto environments, covering user and role management, configuration backups, firmware upgrades, and logging
• Maintain management-plane standards: access control, MFA, credential vaulting and rotation across BMCs, PDUs, and network devices, audit logging, and configuration baselines
• Use centralized management tools (for example, Arista CloudVision, Cisco management platforms, and Panorama) to push and verify configurations
• Contribute to change management by testing, documenting, and implementing approved changes, working with Network Engineering, who own data-plane design and templates

• Write and maintain runbooks, diagrams, configuration records, and integration documentation
• Support security and compliance efforts with NIST and CIS-aligned evidence and configuration documentation
• Participate in a defined on-call rotation for the platforms you operate
• Mentor interns and junior staff as opportunities arise

• Bachelor's degree in IT, computer science, engineering, or a related field, or equivalent practical experience
• 3-5 years of experience in systems engineering, infrastructure engineering, or a similar role
• Strong Linux administration skills (Ubuntu preferred), including networking, services, storage, and command-line troubleshooting
• Experience with automated or bare-metal provisioning tools (MAAS, Foreman, PXE/iPXE, Kickstart, cloud-init, or similar)
• Solid networking fundamentals: TCP/IP, VLANs, routing, DNS, firewall concepts, and VPN technologies
• Experience administering enterprise network or security platforms (Cisco, Arista, Palo Alto, Juniper, Fortinet, or comparable)
• Proficiency in Python or Bash, including integrating with REST or JSON APIs, plus familiarity with configuration management (Ansible or similar)
• Experience with monitoring, logging, or telemetry systems
• Ability to write clear technical documentation and follow change-control procedures
• Self-directed problem solving with the judgment to know when to escalate
• Willingness to be part of an on-call rotation
• Willingness to travel within Utah, with occasional travel to remote sites

• Experience with Tailscale, WireGuard, or other mesh or overlay VPNs, including high-availability subnet routing
• Familiarity with industrial protocols (Modbus RTU/TCP, OPC UA, DNP3, BACnet) and experience integrating PLCs or sensors with IT systems
• Experience with PLC or SCADA platforms (for example CODESYS or Ignition)
• Experience with serial-to-IP gateways and protocol translation devices
• Experience with time-series databases and telemetry stacks (Prometheus, Grafana, InfluxDB, Datadog, or similar)
• Experience with secrets management and credential rotation at fleet scale
• Familiarity with centralized management platforms such as CloudVision, Panorama, or Cisco Catalyst Center
• Experience with endpoint security and device management tools (EDR, MDM)
• Background in OT/ICS, energy, or critical infrastructure environments
• Knowledge of NIST, CIS, IEC 62443, NERC CIP, CMMC, and similar security frameworks
• Relevant certifications (CCNA/CCNP, PCNSA/PCNSE, Arista ACE, RHCSA, Linux Foundation)

• Regularly operates a computer and other peripheral office equipment such as a printer or mouse.
• Ability to communicate information so others can understand. Must be able to exchange accurate information in these situations.
• Must report to work reliably and with the ability to use full and unimpaired skills and judgment to safely execute your job.
• Proficiency in reading, writing, and speaking English required.
• When on the production floor, required to don personal protective equipment to include, but not limited to ear protection, gloves, eye protection and/or safety helmet.
• When on the production floor, ability to observe, detect and respond to audible and visual machine malfunction warnings.
• Ability to lift up to 50 lbs and to occasionally rack and install equipment.
• Ability to participate in an on-call rotation, including responding to alerts outside business hours.
• Ability to travel to Torus sites in Salt Lake and Utah counties and occasionally to remote sites.