Job
- Level
- Senior
- Job Field
- IT, Network, DevOps
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Berlin
- Working Model
- Full Remote, Hybrid, Onsite
Job Summary
In this role, you configure FreeRADIUS servers, manage infrastructure, develop deployment scripts, and troubleshoot authentication issues while ensuring network integration for ISP partners.
Job Technologies
Your role in the team
- Share is a venture-backed internet infrastructure network building Africa's backbone. The company aggregates underutilized telecom infrastructure, fiber, subsea cables, and data centers, and provides ISPs with scalable access to bandwidth without traditional upfront costs.
- This role sits at the intersection of network engineering and systems engineering. You will own the infrastructure that makes internet access work for Share's partner ISPs.
- We are hiring a Systems Engineer to own Share's network-facing infrastructure: the FreeRADIUS proxy servers that authenticate ISP subscribers, the provisioning pipeline that pushes credentials and plan attributes to per-partner RADIUS servers, the BNG integration layer, and the deployment and monitoring of all systems infrastructure.
- This is a hands-on role. You will configure FreeRADIUS servers, write deployment scripts, troubleshoot authentication failures on production networks, and design the infrastructure that scales from 5 ISP partners to 50.
- You will be the person the team calls when a subscriber can't authenticate or when a new ISP's BNG doesn't behave as expected.
- Share operates a central RADIUS proxy that routes authentication requests to per-partner FreeRADIUS servers.
- You will own the configuration, deployment, monitoring, and scaling of this architecture.
- Each ISP partner gets a dedicated FreeRADIUS instance with a Hono API overlay for programmatic CRUD of subscriber credentials and plan attributes.
- You will manage these instances, their database backends, and their API endpoints.
- Work with the network team to define and validate the BNG-side configuration changes required for each ISP partner (RADIUS pointer, Share-specific subnet, source-based routing, pool configuration).
- You are the bridge between the software platform and the ISP's physical infrastructure.
- The software platform's Provisioning service pushes subscriber credentials and plan attributes to FreeRADIUS.
- You own the receiving end - ensuring the FreeRADIUS API, database, and RADIUS configuration are correct and performant.
- Server provisioning, deployment automation, monitoring, logging, and security for all systems infrastructure.
- Design and implement the CoA endpoint on per-partner FreeRADIUS servers for real-time plan changes and session disconnects without re-authentication.
This text has been machine translated. Show original
Our expectations of you
Qualifications
- Deep FreeRADIUS expertise. You can configure virtual servers, write unlang policies, set up proxy realms, configure SQL modules, and debug authentication failures from packet captures.
- Strong Linux systems administration. You manage production servers, write deployment scripts, configure firewalls, and troubleshoot networking issues at the OS level.
- Understanding of PPPoE authentication, DHCP, IP pool management, and how BNGs interact with RADIUS servers.
- Comfortable with scripting and light application development. You don't need to be a full-stack developer, but you should be able to write and maintain a Hono/Express API, work with SQL databases, and automate deployments.
- Docker and container orchestration for networking services.
- You use AI tools (Claude, ChatGPT, Copilot, or similar) for configuration generation, troubleshooting, documentation, and scripting.
- You are comfortable with AI-generated specifications and can validate them against real-world behavior.
- You see AI as a way to handle the breadth of systems knowledge required for this role (RADIUS, Linux, networking, databases, deployment, monitoring) without needing to hold it all in your head.
- You contribute to the team's AI workflows by writing clear, structured documentation that both humans and AI can work with.
Experience
- 5+ years of professional systems engineering or network engineering experience, with at least 2 years working directly with RADIUS (FreeRADIUS, Radiator, or NPS) in a production ISP or telecommunications environment.
- Experience deploying and managing infrastructure in production - not just dev environments.
- Experience in East African ISP or telecommunications infrastructure.
- Experience with FreeRADIUS proxy configurations (proxying between multiple RADIUS servers with failover logic).
- Experience with CoA (Change of Authorization) and Disconnect-Message implementation.
- Experience working alongside software engineering teams - you can read a NestJS service, understand an event-driven architecture diagram, and communicate technical constraints clearly to developers.
This text has been machine translated. Show original
What we offer
- A seat at the table while we build the technical backbone of Africa's next-generation internet - the decisions you make here will be visible in how entire ISP partners run their networks.
- Competitive salary and meaningful equity in a mission-driven, investor-backed company (US-incorporated; Kenya operating entity).
- Private health and wellness benefits - we'll walk through these during the process.
- A high-ownership environment with a steep but well-supported learning curve, and a team that writes things down.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Topics that you deal with on the job
Job Locations
This is your employer
share GmbH
The German consumer goods brand share operates under the principle of "1+1," meaning that for every product sold, an equivalent product or service is donated to help improve living conditions in developing countries. By shopping with share, you can help make a difference in the lives of people around the world.
Description
- Language
- English
- Company Type
- Established Company
- Working Model
- Full Remote, Hybrid, Onsite
- Industry
- Healthcare, Social Sector, Trade
Senior Systems Engineer
- Location
- Berlin
- Working Model
- Full Remote, Hybrid, Onsite
- Diversity
- Open for all genders
- English Only
- English only required
