Systems Engineer 2

About Torus

Torus is headquartered in Utah and is expanding manufacturing at our 545,000-square-foot facility in Salt Lake City called GigaOne. We are the world’s first mesh energy infrastructure, uniting communities through resilient, sustainable, and intelligent power. We design, engineer, manufacture, install, and support our systems end-to-end, standing behind them throughout their lifecycle. Torus systems help reduce costs, lower emissions, and protect facilities from outages, while strengthening the security and reliability of the broader utility grid. Torus is committed to American manufacturing, engineering excellence, and building energy systems that last.

Torus has raised over $267 million from investors like Magnetar, Mercado, ICONIQ and Origin Ventures. The investments are helping to accelerate deployment of modular power plants across utilities, data centers, and industrial sectors. This investor confidence reflects the strength of our team, technology as well as the scale of the problem we are solving. 

At Torus, you will be part of something larger than a single product or technology. Your work will help build energy infrastructure that supports and strengthens our electrical grid, critical  systems, industry, and communities for decades to come. We value accountability, collaboration, and clear thinking. We are looking for people who want to solve hard problems and build things that matter.

About the Role

The Systems Engineer II will build, run, and improve the platforms that connect Torus sites: provisioning and operating systems, secure remote access, telemetry collection, and the integration of industrial controllers and facility equipment into our central monitoring environment. You will own the day-to-day health of these systems and drive them toward more automation, reliability, and visibility.

This is a hands-on role for an engineer who is comfortable crossing boundaries between servers, networks, and industrial equipment. You will work closely with network, compute, and controls teams to bring data from the field into our platforms, and you will administer the core infrastructure tooling that keeps it all running.

Who You Are

You build technology people can rely on, and when it breaks, you find out why. You write down what you learn so the next engineer doesn’t start from zero.

• You ask before you push back. You find out what others know about the environment before you reject a design or change a config, and you assume good intent.
• You say it early and directly. You flag risks and missed windows as soon as you see them, give clear feedback, and praise good work openly.
• You build on strengths. You look for what each teammate does well and use it to cover the team’s gaps.
• You lead with the answer. Incident updates, change requests, and runbooks open with the status and the action needed.
• You move fast and test first. You automate repeatable work and validate before rollout.
• You think in systems. Network, compute, software, and security decisions depend on each other, and on power and cooling at the site. You use telemetry and logs to make the call, and when a technical preference conflicts with what the customer needs, the customer wins.

Responsibilities

Provisioning and operating systems

• Administer and operate MAAS (Metal as a Service) for bare-metal provisioning, including machine enlistment, commissioning, and deployment workflows
• Build and maintain standardized OS images, cloud-init configurations, and deployment templates for Linux hosts
• Automate OS patching, configuration management, and baseline compliance across the fleet
• Troubleshoot provisioning, boot, and OS-level issues, and document root causes and fixes
• Work with Compute Engineering on the handoff between hardware standards (BIOS, boot order, BMC) and the MAAS workflow

Secure remote access and connectivity

• Deploy and maintain Tailscale subnet routers and related access infrastructure across sites, designed for high availability so that no single router is a single point of failure for site access
• Manage Tailscale ACLs, tags, and access policies based on least-privilege principles, and support third-party and vendor access requests
• Monitor tunnel health and connectivity, and troubleshoot routing, DNS, and ACL issues using a tiered diagnostic approach
• Keep subnet routers and supporting hosts patched, hardened, and consistently configured

Telemetry and monitoring

• Build, deploy, and operate telemetry collection servers and data pipelines that aggregate sensor and device data from field sites, including BMCs (IPMI and Redfish), PDUs, power shelves, cooling distribution units, and network gear
• Integrate with vendor REST and JSON-RPC APIs, SNMP, and industrial protocols to collect operational data
• Configure polling, collection intervals, retention, and alerting for operational data
• Integrate telemetry sources with monitoring, logging, and visualization platforms (for example Datadog)
• Maintain accurate inventories of data sources, device registers, and collection configurations

Controller and PLC integration

• Support integration of PLCs and industrial devices (for example chiller and cooling controllers) into central monitoring and control systems, using protocols such as Modbus TCP and other industrial standards
• Work with controls engineers and vendors on register maps, protocol gateways (serial-to-IP converters, protocol translators), addressing, and test plans
• Help design network segmentation for controllers and gateways in coordination with network engineering, and validate that integrations stay within defined security boundaries
• Support commissioning and troubleshooting of controller integrations in the field

Administrative platforms and management plane

• Administer the management plane of enterprise network and security platforms, including Arista, Cisco, and Palo Alto environments, covering user and role management, configuration backups, firmware upgrades, and logging
• Maintain management-plane standards: access control, MFA, credential vaulting and rotation across BMCs, PDUs, and network devices, audit logging, and configuration baselines
• Use centralized management tools (for example, Arista CloudVision, Cisco management platforms, and Panorama) to push and verify configurations
• Contribute to change management by testing, documenting, and implementing approved changes, working with Network Engineering, who own data-plane design and templates

Documentation, reliability, and collaboration

• Write and maintain runbooks, diagrams, configuration records, and integration documentation
• Support security and compliance efforts with NIST and CIS-aligned evidence and configuration documentation
• Participate in a defined on-call rotation for the platforms you operate
• Mentor interns and junior staff as opportunities arise

Required Experience

• Bachelor's degree in IT, computer science, engineering, or a related field, or equivalent practical experience
• 3-5 years of experience in systems engineering, infrastructure engineering, or a similar role
• Strong Linux administration skills (Ubuntu preferred), including networking, services, storage, and command-line troubleshooting
• Experience with automated or bare-metal provisioning tools (MAAS, Foreman, PXE/iPXE, Kickstart, cloud-init, or similar)
• Solid networking fundamentals: TCP/IP, VLANs, routing, DNS, firewall concepts, and VPN technologies
• Experience administering enterprise network or security platforms (Cisco, Arista, Palo Alto, Juniper, Fortinet, or comparable)
• Proficiency in Python or Bash, including integrating with REST or JSON APIs, plus familiarity with configuration management (Ansible or similar)
• Experience with monitoring, logging, or telemetry systems
• Ability to write clear technical documentation and follow change-control procedures
• Self-directed problem solving with the judgment to know when to escalate
• Willingness to be part of an on-call rotation
• Willingness to travel within Utah, with occasional travel to remote sites

Preferred Experience

• Experience with Tailscale, WireGuard, or other mesh or overlay VPNs, including high-availability subnet routing
• Familiarity with industrial protocols (Modbus RTU/TCP, OPC UA, DNP3, BACnet) and experience integrating PLCs or sensors with IT systems
• Experience with PLC or SCADA platforms (for example CODESYS or Ignition)
• Experience with serial-to-IP gateways and protocol translation devices
• Experience with time-series databases and telemetry stacks (Prometheus, Grafana, InfluxDB, Datadog, or similar)
• Experience with secrets management and credential rotation at fleet scale
• Familiarity with centralized management platforms such as CloudVision, Panorama, or Cisco Catalyst Center
• Experience with endpoint security and device management tools (EDR, MDM)
• Background in OT/ICS, energy, or critical infrastructure environments
• Knowledge of NIST, CIS, IEC 62443, NERC CIP, CMMC, and similar security frameworks
• Relevant certifications (CCNA/CCNP, PCNSA/PCNSE, Arista ACE, RHCSA, Linux Foundation)

Additional Details

Background Check All candidates are subject to a background check.

Location This role is a hybrid remote position based in Salt Lake City. The Engineer will be expected to travel to Torus locations located in Salt Lake and Utah counties as needed.

Compensation $100,000 - 160,000 (Note: We have the flexibility to hire at different levels, which may impact the corresponding pay range.)

Work Authorization Applicants must already have the legal authorization to work in the US without requiring any employer sponsorship.

Physical Requirements

• Regularly operates a computer and other peripheral office equipment such as a printer or mouse.
• Ability to communicate information so others can understand. Must be able to exchange accurate information in these situations.
• Must report to work reliably and with the ability to use full and unimpaired skills and judgment to safely execute your job.
• Proficiency in reading, writing, and speaking English required.
• When on the production floor, required to don personal protective equipment to include, but not limited to ear protection, gloves, eye protection and/or safety helmet.
• When on the production floor, ability to observe, detect and respond to audible and visual machine malfunction warnings.
• Ability to lift up to 50 lbs and to occasionally rack and install equipment.
• Ability to participate in an on-call rotation, including responding to alerts outside business hours.
• Ability to travel to Torus sites in Salt Lake and Utah counties and occasionally to remote sites.

Our Perks & Benefits

Benefits eligibility is based on employment status.

Financial

• Employee Rewards Package including equity
• 401(k) Retirement Savings Plan
• Torus paid life and AD&D Insurance with options to purchase additional coverage
• Voluntary short- and long-term disability insurance

Health & Wellness

• Health Benefits Package: Choice between traditional PPO or HSA-eligible medical plans with Torus covering 50% of medical premiums; Dental insurance; and Vision insurance
• Plan participants have access to telehealth services, mental health support and coaching, and exclusive discounts on brands, dining, entertainment, and more.

Time Off

• Unlimited discretionary PTO or 10 days annual PTO
• 10 paid company holidays
• Waiting period-free 100% paid parental leave

Culture & Community

• Regular company-wide offsites to showcase our progress and learnings. A time to step back, think strategically, and work on the business together.
• Team members receive Torus branded gear
• Peer Recognition Program
• Fully stocked break rooms with free snacks and drinks. Because great work deserves great fuel.

Torus is proud to be an Equal Opportunity Employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.

Torus participates in E-Verify. Once you accept a job offer, we will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from your Form I-9 to confirm work authorization.

#li-lw #li-hybrid