{"id":2305153,"url":"https://alion.io/job/verda-linux-systems-engineer-identity-pki-security-idm","title":"Linux Systems Engineer – Identity, PKI & Security (IDM)","company":{"id":1932675,"name":"Verda","domain":"verda.com","url":"https://alion.io/company/verda-com","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":null,"work_mode":"remote","remote_scope":"stated_regions","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Finland"],"countries":["FI"],"hiring_countries":["DE","FR","AT","BE","BG","HR","CY","CZ","DK","FI","HU","IE","IT","NL","PL","RO","ES","SE","EE","GR","LV","LT","LU","MT","PT","SK","SI"],"hiring_countries_total":27,"salary":null,"salary_estimate":{"min_usd":46000,"max_usd":102000,"period":"year","method":"role_country_seniority_unknown","sample_n":11},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"Configuration Management","optional":false},{"name":"Debian","optional":false},{"name":"Linux","optional":false},{"name":"OpenSSH","optional":false},{"name":"PKI","optional":false},{"name":"SaltStack","optional":false},{"name":"Zero Trust","optional":false},{"name":"Active Directory","optional":true},{"name":"Python","optional":true},{"name":"Rust","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-09-01T07:13:13Z","employer_posted_date":null,"last_verified_at":"2026-09-01T07:13:13Z","board_verified":false,"closed_at":null,"days_open":43,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":43},"description":"Imagine a future where everyone has instant, low-cost access to intelligence. We’re building a fully featured European AI cloud - with everything one needs to train, experiment with, and deploy AI models. In addition, our GPUs run on 100% renewable energy.\nWe’re ambitious, curious, and gutsy doers. We practice a low hierarchy across the company and high morale in our teams. We’ve already achieved a lot, yet we’re only getting started. Now it’s your chance to join the ride. We offer more than just the job - we offer a career-defining opportunity to be part of building something big!\nJoin Verda while it’s still being built - not once it’s finished.\n\nAbout the roleIn this role, you will operate as a Linux Systems Engineer taking full ownership of how identities, credentials, certificates, and secrets are provisioned, authenticated, and distributed across our cloud infrastructure. You will bridge the gap between strict security policies and Linux-native infrastructure—building automated pipelines that replace legacy directory systems with modern, code-driven identity architectures.\nYou’ll serve as the primary engineering liaison to our Security team, turning threat models and compliance rules into production-grade systems code.\n\nYour ResponsibilitiesOwn the Linux Identity Layer: Champion and manage Kanidm as our central identity source of truth. Architect and support client-side Linux host integrations using SSSD, PAM, and NSS modules for seamless user lifecycle and access management.\n\nArchitect SSH & PKI Security: Design, deploy, and automate short-lived SSH Certificate Authority (SSH CA) workflows for host and user authentication, paired with step-ca for internal PKI and OpenBao for decentralized secrets management.\n\nAutomate Infrastructure as Code: Use SaltStack and Ansible to enforce 100% declarative configuration management across identity services, SSSD configs, OpenSSH daemons, and system access policies.\n\nAct as the Security Engineering Liaison: Partner directly with our Security team to translate compliance frameworks, zero-trust requirements, and threat models into hardened, automated Linux infrastructure.\n\nFederate Authentication: Architect, deploy, and troubleshoot OIDC and OAuth2 integrations across our internal engineering toolchain, anchoring host-level access back to our central identity platform.\n\nYour key competenciesLinux Systems Engineering Core: Deep, hands-on experience managing Linux operating systems at scale (RHEL/Debian families), with explicit knowledge of the Linux authentication ecosystem (SSSD, PAM, NSS, OpenSSH).\n\nConfiguration Management Mastery: Operational expertise using SaltStack and/or Ansible to manage system state, deploy identity agents, and maintain zero configuration drift.\n\nPKI & SSH Certificate Infrastructure: Practical experience implementing SSH CAs, short-lived host/user certificates, and automated internal TLS issuance.\n\nModern Identity Architecture: Strong understanding of identity protocols (OIDC, OAuth2, WebAuthn/FIDO2, POSIX mapping) and experience building or migrating identity sources of truth.\n\nSecurity & Systems Mindset: The ability to translate high-level security policies into precise system configurations, script automation, and actionable infrastructure code.\n\nNice-to-HavesDirect production experience deploying, operating, or migrating to Kanidm, OpenBao, or step-ca.\n\nExperience migrating environments away from legacy Active Directory / Windows domain architectures to Linux-native identity stacks.\n\nExperience writing custom SSSD plugins, PAM modules, or high-velocity Python/Rust tooling for system administration.\n\nWhy VerdaCash + equity compensation along with various fringe benefits (e.g., healthcare, lunch, wellbeing, etc.).\n\nProfitable operations with rapid, sustained growth.\n\n31 nationalities, with 6 different ones on the management team.\n\nAn opportunity to make a clear impact and work alongside world-class engineers, researchers, and partners across the global AI ecosystem.\n\nPracticalitiesWork mode: Remote (EU)\n\nEmployment type: Full-time, permanent\n\nStart date: As soon as possible\n\nWhat's nextWe’re building fast and this role needs the right person behind it. There’s no artificial deadline, but when we find who we’re looking for, we move.\nIf this sounds like your next move, apply now.\nPlease submit your application through our Careers page. We don’t accept applications sent by email nor through agencies.","description_format":"text","description_chars":4447,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"Germany","iso":"DE","kind":"region"},{"name":"France","iso":"FR","kind":"region"},{"name":"Austria","iso":"AT","kind":"region"},{"name":"Belgium","iso":"BE","kind":"region"},{"name":"Bulgaria","iso":"BG","kind":"region"},{"name":"Croatia","iso":"HR","kind":"region"},{"name":"Cyprus","iso":"CY","kind":"region"},{"name":"Czech Republic","iso":"CZ","kind":"region"},{"name":"Denmark","iso":"DK","kind":"region"},{"name":"Finland","iso":"FI","kind":"region"},{"name":"Hungary","iso":"HU","kind":"region"},{"name":"Ireland","iso":"IE","kind":"region"},{"name":"Italy","iso":"IT","kind":"region"},{"name":"Netherlands","iso":"NL","kind":"region"},{"name":"Poland","iso":"PL","kind":"region"},{"name":"Romania","iso":"RO","kind":"region"},{"name":"Spain","iso":"ES","kind":"region"},{"name":"Sweden","iso":"SE","kind":"region"},{"name":"Estonia","iso":"EE","kind":"region"},{"name":"Greece","iso":"GR","kind":"region"},{"name":"Latvia","iso":"LV","kind":"region"},{"name":"Lithuania","iso":"LT","kind":"region"},{"name":"Luxembourg","iso":"LU","kind":"region"},{"name":"Malta","iso":"MT","kind":"region"},{"name":"Portugal","iso":"PT","kind":"region"},{"name":"Slovakia","iso":"SK","kind":"region"},{"name":"Slovenia","iso":"SI","kind":"region"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Platforms (IaaS & PaaS)","AI Compute & Inference"],"lifecycle":[{"event":"open","at":"2026-10-11T22:24:51Z"}],"visa":[],"liveness":{"score":21,"band":"cold","label":"Long shot","p_open":0.6,"p_active":0.624,"p_room":0.55,"age_days":42,"expected_fill_days":40,"reasons":["seen:42","win:tail"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/verda-linux-systems-engineer-identity-pki-security-idm","json_url":"https://alion.io/job/verda-linux-systems-engineer-identity-pki-security-idm.json","meta":{"generated_at":"2026-10-14T10:26:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12183,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1932675},"rest":"https://alion.io/mcp/rest/get_company?id=1932675"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fverda-linux-systems-engineer-identity-pki-security-idm"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fverda-linux-systems-engineer-identity-pki-security-idm"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fverda-linux-systems-engineer-identity-pki-security-idm"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/verda-linux-systems-engineer-identity-pki-security-idm\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fverda-linux-systems-engineer-identity-pki-security-idm"}]}