Senior Platform/Implementation Engineer
Remote (U.S. – based, Eastern or Central time zone)
The Role:
A senior, hands-on technical professional responsible for delivering successful SPHEREboard implementations, upgrades, and integrations across complex enterprise environments. This role combines deep technical expertise with the ability to solve challenging infrastructure and identity-related problems, work directly with customer technical teams, and drive implementations from initial discovery through production deployment and customer handoff.
Working closely with customer stakeholders, the Senior Implementation Engineer takes ownership of technical execution, navigates complex enterprise environments, and ensures solutions are deployed reliably and ready for ongoing operation. Success requires strong systems engineering and troubleshooting capabilities, knowledge of identity and access technologies, sound technical judgment, and the ability to build customer confidence through clear communication, accountability, and follow-through.
What You Will Do:
- Assess client environment readiness before deployment, confirming servers, service accounts and permissions, database access, network and firewall rules, and certificates are in place; work with the client to close any gaps so the engagement can kick off.
- Install and upgrade the software across multiple environments (Dev, UAT, Prod), including distributed components and high-availability/disaster-recovery setups, for both on-premises and SaaS deployments.
- Connect the software to client identity and infrastructure systems, such as Active Directory (multi-domain and multi-forest), Entra ID, LDAP, CyberArk, databases, and Windows, Unix, and Linux servers.
- Bring in supporting data from HR, CMDB, and identity governance systems, and confirm records load completely and correlate correctly across sources.
- Configure how accounts are classified, which security policies are evaluated, and how account ownership is determined, tailoring standard settings to each client’s requirements.
- Troubleshoot deployment issues such as permissions, software dependencies, and unexpected results; resolve what you can, escalate to Engineering with complete evidence, and follow through to resolution.
- Lead technical working sessions with client teams and document configurations for handoff.
What You Bring:
Identity Know-How
Common authentication methods and how to configure them across the various systems being scanned, including directories, servers, databases, and cloud and SaaS platforms (e.g., Windows authentication, LDAP, local accounts, SSH keys, API keys, and OAuth 2.0 client credentials), including retrieving credentials from enterprise credential providers such as CyberArk CCP.
Active Directory structure and metadata at depth: multi-domain and multi-forest environments, trusts, OUs, group nesting, delegation, service account rights, and the attributes that indicate account status and ownership.
How identity data is sourced and joined: HR as the source of truth for people, CMDB for application and server context, IGA for entitlements, and how best to establish effective correlation.
How personal, privileged, service, shared, and application accounts differ, and why each follows different policies for password management, governance needs, and overall lifecycle.
Privileged access management concepts: vaulting, application credential retrieval, session management, and password rotation.
How organizations remediate identity risk, including owner engagement and attestation.
Technical Platform Experience
7+ years experience with technology that centers around systems management across infrastructure; an understanding of domain and local access within operating systems and database platforms.
Windows Server administration: installing, configuring, and maintaining .NET, IIS, and Windows services, including updates, permissions, and logs; working knowledge of Linux/Unix.
SQL scripting and general backend troubleshooting for reconciliation and validation. PowerShell scripting for automation; Python or Bash a plus.
Multi-environment enterprise deployments: Dev/UAT/Prod promotion, HA/DR, components distributed across servers and network zones, and client change management.
Network, firewall, DNS, and overall systems connectivity and troubleshooting.
Preferred:
Experience in implementation or professional services at an identity software vendor deploying its own product in customer environments.
Hands-on CyberArk, including CCP, PSM, and password rotation, on self-hosted or Privilege Cloud.
Familiarity with SailPoint or another IGA platform, ServiceNow CMDB, and HR data feeds such as Workday.
Certifications in Microsoft, identity, security, networking, or cloud.
About SPHERE:
SPHERE is the global leader in Identity Hygiene. We are dedicated to reshaping modern identity programs by embedding this foundational fabric, enabling organizations to quickly reduce risks. We work through an identity lens that protects an organization’s accounts, data, and infrastructure. Our solutions deliver immediate time-to-value by leveraging automation to discover, remediate and secure identities, now and forever. Driven by our core values of passion, empathy, and authenticity, our vision drives us to continually innovate, helping our clients to sleep better knowing their attack surface is drastically reduced, thwarting the plans of bad actors every single day.
To find out more about SPHERE and our solutions, please visit www.sphereco.com
SPHERE is an equal-opportunity employer. Applicants will be evaluated without regard to race, color, religion, sex, national origin, disability, veteran status, and other legally protected characteristics.