Systems Engineer

About the job Systems Engineer

About:

Bento Holdings, Inc. is based out of Portland, Maine. We are a professional services & technology company that accelerates cyber security assurance in small companies. Majority of our customers rely on us to understand, select, implement common cyber security controls necessary for attestation or certification. Our own cyber security framework empowers small companies to personalize their information security and our engineering services ensure successful implementation.

Our values are centered around personal and fiduciary responsibility. We expect all staff to always do the right thing, work in the interest of our clients, and grow in their positions. While we are fanatical about our customers, we do so at no expense to our staff's learning, advancement, and family.

We are looking for a dynamic individual who strives for order in the chaos, is motivated to continuously learn and actively exhibits the pillars of our culture communication, collaboration, trust and fun. We value diversity and are committed to an inclusive, fair and respectful workplace. We have created an open and welcoming environment that allows every crew member to bring their complete, authentic selves to work every day, and provides opportunities to grow and reach their full potential.

Responsibilities:

The Systems Engineer will be one of the primary point of technical escalations for all TechBento managed services clients. This position requires that you participate in strategy and escalation for projects, assessments or escalation-related matters. You will oversee the planning, design and implementation of technical projects and will install, configure and upgrade any enhancements to software/hardware/network systems.

Below is our requirements for an IT Generalist. We expect System Engineers to have a selection of skills from the list below with rich understanding of that selection. For example, while an IT generalist may write and use scripts, we expect our engineers to have end-to-end understanding of infrastructure as code including version control, code reviews, building and deployment, best practices, and secrets management.

• General:
  • Automation of redundant tasks, scripting, and writing of functions that get things done.
  • Provide support for devices and users. While sometimes that means end-user support, most of the time it means effective and professional device management that exceeds clients expectations.
  • Practical experience in a cyber security domain. This is an open requirement that supports our initiatives to be secure at the core. Examples include compliance, controls development, controls implementation, control attestation, evidence collection, incident management, policy implementation, etc. Show us your skill set.
  • Design solutions for small and big challenges, write work-orders, and prepare procedures.
  • Maintain documentation internal and external. Write procedures, summaries, and notes.
  • Learn and use our client management systems, handle support requests effectively, and ensure SLAs are always met.
  • Lead meetings and conferences.
  • Evaluate vulnerabilities, the risks they pose, and suggest mitigation actions.
  • Kaizen. Optimize things that need optimizing, recognize change and adapt quickly. We are agile and adapt quickly - you need to as well.
• Identity & Device Management
  • Microsoft 365 & relevant Azure services including the full Defender suite, device management, conditional access, OAUTH, SAML. PowerApps experience a plus.
  • Remote management and administration of endpoints including automation, script execution, and troubleshooting in bespoke environments.
  • Mobile Device Management including AutoPilot/Apple Automated Deployment, Apps distribution, compliance, and device trust.
• Data
  • Clear understanding of data protection approaches.
  • Data loss protection, labeling, etc.
  • Auditing.
• Infrastructure:
  • Windows Server environments (Active Directory, Group Policy, FSMO roles, DHCP, DNS, NTP, DFS, etc.)
  • E-Mail delivery and protection. Beyond routing and filtering, we expect our team to have a strong practical understanding of anti-phishing and data protection services.
  • Amazon Web Services environments utilizing VPC, EC2, RDS, S3 with knowledge demonstrated by AWS SysOps Administrator Associate Certification or parallel practical experience.
  • Microsoft 365 & relevant Azure services including the full Defender suite, device management, conditional access, OAUTH, SAML. PowerApps experience a plus.
• Network:
  • Working knowledge of Cisco Meraki firewalls, switches, and access points. (TCP/IP, DNS, DHCP, VPN, VLANs, SNMP, VoIP, etc.)
  • Virtual Private Networks with layered design.
  • Implementation of lateral movement protections.
• Apps:
  • Integrate identity and authentication services.
  • API auditing and usage.
  • Manage access control.
  • Audit.

It should go without saying that

• You are an ace at problem solving. To us, that means you:
  • can understand the initial request and the context that frames the problem often uncovering root causes that are far different from what is reported. Another way to say this is that you have a skill for validating issues.
  • create plausible hypotheses that are testable
  • work through each hypothesis until you arrive at the root problem
  • implement/advice/manage a resolution
  • verify it worked
  • document, optimize, or implement future mitigation.
• You need to be able to speak and write well.
• You need to be able to manage and track time really well for your sake and ours. Your day is 8 hours, 6 of which are work, 2 are there for your benefit to document/admin/learn. Use it well.
• Impress our customers.
• We don't believe in multi-tasking, and we expect you to do one thing at a time and do it well. However, serial-single-tasking is reality of our business and you need to demonstrate that you can do that well.
• Understand our clients.
• Tie your work to value.
• Know how to schedule, manage resources, and use your time effectively.

The ideal candidate possesses the following:

• BA/BS degree preferred
• 5+ years of prior related work experience working for an MSP
• Scripting in a language such as BASH, ZSH, PowerShell, Python for management and automation purposes.
• AWS Cloud Practitioner and Microsoft 900-series exams are a given. If you don't have them, we will expect you to have all of them within the first 30 days of working for us.
• AWS and Azure associate certifications are required. If you don't have them, we will expect you to have select certifications within the first 30 days of working for us. You must demonstrate your general understanding of their requirements and your ability to pass before an interview.

What you can expect from us

• A fun, fast-paced and supportive work environment that respects everyone
• An inclusive and collaborative working environment that encourages creativity, curiosity, and celebrates success
• Competitive compensation commensurate with your experience and skills
• Full complement of benefits
• Opportunities for career advancement
• Remote work environment where you work remotely but dont feel remote (offices may reopen after COVID)
• Equity participation in the company, commensurate with your role

Our expectations of this role are high, and we demand the best. In return, we provide a work environment that is professionally challenging, personally rewarding and intellectually stimulating. Guided by strong leadership, we support initiative, encourage ambition, recognize and reward talent (monetary incentives and opportunities for advancement).

We would like to thank everyone for their application; however, only those being considered for an interview will be contacted.

Collection, use, and retention of personal information will be in accordance with TechBento. privacy policies and practices. By submitting your resume and personal information to TechBento., and/or participating in a personal interview, you acknowledge and consent to the collection, use and disclosure of your personal information by TechBento to determine your suitability for employment opportunities.

COVID-19 precautions

• Remote interview process
• Social distancing guidelines in place
• Virtual meetings

TechBento does not sponsor H1B visa applicants.