Bentley Systems tech-stack profile
This is the real thing — an actual reconosint profile rendered by the same engine paying customers use: vendor signals, evidence-tier provenance, confidence weighting, validation gaps, and call-ready context in one document. Only the practitioner identities are anonymized.
Bentley Systems
Public-signal map of Bentley Systems's enterprise technology stack — assembled for the rep walking into a first call. Every claim below is anchored to a third-party source with a published date and a confidence weighting. Where the signal is thin, the report says so.
Networking
DNS · CDN · load balancing · firewall · VPN- Aruba wireless (IAP), Aruba switches, Aruba Central, and Aruba ClearPass are confirmed as the campus/branch access layer by three independent current practitioners (Skyler Lindqvist, Rowan Vandermeer, Sage Demir).
- Silver Peak / HPE Aruba EdgeConnect SD-WAN is confirmed as the WAN edge platform by three independent practitioners, with explicit global WAN and cloud/on-premises scope.
- F5 BIG-IP (LTM) and F5 BIG-IQ are confirmed as the ADC/load balancing platform by the network team manager (Skyler Lindqvist). Extreme Networks, Cisco, and Juniper are also named by the same practitioner as active infrastructure.
- Cloudflare is the edge CDN/proxy (confirmed via IP attribution and CF-Ray HTTP headers); Azure DNS is the authoritative nameserver for bentley.com (confirmed via NS record).
- SolarWinds Orion is confirmed in active NOC use by a current NOC engineer (Morgan Adeyemi). Stacked-practitioner and DNS/IP evidence types dominate; no OEM case study corroboration is available.
Evidence
| Vendor | Product | Deployment scope | Conf. | Source | Date |
|---|---|---|---|---|---|
HHPE Aruba Networking | Aruba ClearPass | Network Access Control / policy management; attested by three independent current practitioners | Practitioner-Attestedstacked-practitioner-attestationSkyler Lindqvist + Rowan Vandermeer – Bentley Systems (LinkedIn) | 2026-05-19 | |
HHPE Aruba Networking | Silver Peak / Aruba EdgeConnect SD-WAN | Global SD-WAN covering cloud and on-premises appliances; responsible for global network connectivity for all offices | Practitioner-Attestedstacked-practitioner-attestationSkyler Lindqvist + Rowan Vandermeer + Sage Demir – Bentley Systems (LinkedIn) | 2026-05-19 | |
HHPE Aruba Networking | Aruba Wireless (IAP) / Aruba Central | Campus and branch wireless access layer; Aruba Central cloud management for switches and APs | Practitioner-Attestedstacked-practitioner-attestationSage Demir + Rowan Vandermeer – Bentley Systems (LinkedIn) | 2026-05-19 | |
FF5 | F5 BIG-IP / BIG-IQ | ADC / load balancing platform; BIG-IQ management plane; attested by network team manager | Practitioner-Attestedpractitioner-attestationSkyler Lindqvist – Manager, Network Team at Bentley Systems (LinkedIn) | 2026-05-19 | |
EExtreme Networks | Extreme Networks Switching | Enterprise switching infrastructure; listed alongside campus/branch networking responsibilities by network manager | Practitioner-Attestedpractitioner-attestationSkyler Lindqvist – Manager, Network Team at Bentley Systems (LinkedIn) | 2026-05-19 | |
CCisco | Cisco Systems (routing/switching) | Enterprise network infrastructure; listed by network manager alongside other active platforms | Practitioner-Attestedpractitioner-attestationSkyler Lindqvist – Manager, Network Team at Bentley Systems (LinkedIn) | 2026-05-19 | |
JJuniper Networks | Juniper Networks (routing/switching) | Enterprise network infrastructure; listed by network manager alongside other active platforms | Practitioner-Attestedpractitioner-attestationSkyler Lindqvist – Manager, Network Team at Bentley Systems (LinkedIn) | 2026-05-19 | |
SSolarWinds | SolarWinds Orion | Network monitoring and operations; in use by NOC engineering team | Practitioner-Attestedpractitioner-attestationMorgan Adeyemi – NOC Engineer at Bentley Systems (LinkedIn) | 2026-05-19 | |
CCloudflare | Cloudflare CDN / Edge Proxy | Edge CDN and proxy for bentley.com; confirmed via IP attribution and HTTP headers | Network-ObservedIP ATTRIBUTIONVerified network fact (ip attribution)Verified Network Facts – IP Attribution & HTTP Headers | 2026-05-19 | |
MMicrosoft | Azure DNS | Authoritative DNS for bentley.com apex domain | Verified by DNSDNS NSVerified network fact (dns ns)Verified Network Facts – NS Provider | 2026-05-19 |
Evidence methodology
- The company's own authoritative DNS records (TXT, MX, NS, DMARC, SPF) explicitly name this vendor. These records are vendor-signed and cannot be faked without controlling the domain.
- Observed passively in live HTTP response headers, CSP directives, CNAME chains, or IP-to-ASN attribution at the time of collection.
- A current or recent employee named this vendor in their LinkedIn work-history snippet — first-person disclosure, strongest non-deterministic signal.
Top prospecting targets
- Skyler LindqvistManager, Network Team · Bentley Systems
Network Engineer at Bentley Systems (duration unknown). Stated responsibilities: Aruba Networks, Aruba ClearPass, F5 BigIP, F5 BigIQ, Extreme Networks, Palo Alto Networks, Cisco Systems, Juniper Networks, Silverpeak SD-WAN, Blue Coat Systems, Microsoft Azure, Enterprise Network Architecture/Design
- Rowan VandermeerSenior Network Administrator · Bentley Systems
Senior Network Administrator at Bentley Systems (duration unknown). Stated responsibilities: Seequent was acquired by Bentley Systems - Provide support with network team - Responsible for global network connectivity for all offices in the Bentley Systems network - Use of Aruba Central, Aruba Clearpass, Silverpeak, Palo Alto Networks, various switch management - Provide troubleshooting to colleagues with…
- Sage DemirNetwork Administrator · Bentley Systems
Network Administrator at Bentley Systems (duration unknown). Stated responsibilities: Deploying and managing Palo Alto Firewalls ( Cloud & On Prem ) . Deploying and managing Aruba IAP and Switches. Deploying and managing Silver Peak SDWAN ( Cloud & On Prem )
- Morgan AdeyemiNetwork Operations Center Engineer · Bentley Systems · 4 yrs 7 mos
Network Operations Center Engineer at Bentley Systems (4 yrs 7 mos). Listed skills: Solarwinds, Technical Specialists, Orion, Problem Management, Incident Management, Network Engineering, IT Operations, Document Management
Validation gaps — what we could not confirm
0 detectable · 1 blind spot
- Blind spot — No vendor case study or third-party press reference corroborates the Aruba/Silver Peak/F5 deployment — all primary evidence is practitioner LinkedIn profiles. (not publicly trackable — absence of evidence is typical for this category)Ask: “How are branch sites connected today — MPLS, SD-WAN, or hybrid?”
- Extreme Networks, Cisco, and Juniper are single-practitioner attestations; relative architectural roles (campus primary, DC fabric, branch) cannot be determined.
- Data center networking fabric (spine-leaf, EVPN/VXLAN vendor) and IPAM platform remain unvalidated.
Detectability reflects typical public-disclosure patterns, not live monitoring of this company.
Eight more domains below — or run this on your own target.
Run your own profileSecurity
IDP · EDR · WAF · vulnerability management- IBM QRadar and Microsoft Sentinel are both confirmed in active SOC use by a current SOC analyst (Sage C.) who lists both as current-role skills alongside ServiceNow for incident management.
- Microsoft Entra ID is the primary identity platform (vendor tutorial explicitly names bentley.com for automatic user provisioning); residual ADFS hostname (adfs.bentley.com) detected via CT log indicates a managed-with-ADFS-residue migration state.
- Ping Identity is named in an active Senior IAM Engineer job posting as a required deep-hands-on skill, indicating current or planned enterprise IAM use; confidence is job-posting tier only.
- A current Information Security Engineer's LinkedIn headline (Emerson Castellanos) explicitly lists CrowdStrike, Wiz, Zscaler, CASB, DLP, and Microsoft Defender 365 alongside QRadar as current-role tools. QA note: Emerson Castellanos's snippet provides only an 8-month tenure note without a detailed experience description — headline-only tool mentions are treated as indicative but are below practitioner-attestation threshold for specific tool claims. These signals are preserved in rejected_signals pending a richer experience snippet.
- EDR/XDR, email security, PAM, and NGFW/SSE remain unconfirmed in the validated evidence set; significant security stack gaps persist.
Evidence
| Vendor | Product | Deployment scope | Conf. | Source | Date |
|---|---|---|---|---|---|
IIBM | QRadar SIEM | Active SOC operations; listed by current SOC analyst as current-role tool | Practitioner-Attestedpractitioner-attestationSage C. – LinkedIn (SOC Analyst, Bentley Systems) | 2026-05-19 | |
MMicrosoft | Microsoft Sentinel (Azure Sentinel) | Active SOC operations; listed by current SOC analyst alongside QRadar as current-role tool | Practitioner-Attestedpractitioner-attestationSage C. – LinkedIn (SOC Analyst, Bentley Systems) | 2026-05-19 | |
SServiceNow | ServiceNow (ITSM / incident management) | SOC incident response workflow tooling; listed as current-role skill by SOC analyst | Practitioner-Attestedpractitioner-attestationSage C. – LinkedIn (SOC Analyst, Bentley Systems) | 2026-05-19 | |
MMicrosoft | Entra ID (Azure Active Directory) | Enterprise-wide user provisioning and identity management; Microsoft Learn tutorial explicitly names bentley.com | vendor_case_studyConfigure Bentley – Automatic User Provisioning – Microsoft Learn | 2026-02-24 | |
MMicrosoft | ADFS (Active Directory Federation Services) | Residual ADFS deployment alongside Entra ID; adfs.bentley.com confirmed via CT log; managed_with_adfs_residue migration state | CT-WitnessedCT LOG SUBDOMAINVerified network fact (ct log subdomain)CT-log subdomain pattern / M365 metadata | 2026-05-19 | |
PPing Identity | Ping Identity Platform | Enterprise IAM; Senior IAM Engineer role explicitly requires deep hands-on experience with Ping Identity platform | job_postingSenior IAM Engineer – Bentley Systems (jobs.bentley.com) | 2026-05-19 |
Evidence methodology
- A TLS certificate for a vendor-branded subdomain appeared in public Certificate Transparency logs. The subdomain may be historical or internal.
- A current or recent employee named this vendor in their LinkedIn work-history snippet — first-person disclosure, strongest non-deterministic signal.
Top prospecting targets
- Sage PetrovCloud Security Engineer | DevSecOps & Compliance-as-Code | AWS & Azure | IAM, Threat Modeling, Automated Controls · Bentley Systems · 1 yr 6 mos
Platform Security Engineer at Bentley Systems (1 yr 6 mos). Stated responsibilities: • Spearhead the end-to-end design and implementation of SOX-aligned identity and access control architectures for financial and HR platforms which involves translating regulatory requirements into enforceable technical controls embedded directly into platform workflows.
- Sage CallowayCybersecurity Incident Reponder with a Focus on Protection🥷| Vulnerability Management, and Cyber Threat Intelligence | Guardian of Data Integrity | Cool Mom 👩| Life Long Learner · Bentley Systems · 1 yr 9 mos
Information Security Operations Center (SOC) at Bentley Systems (1 yr 9 mos). Listed skills: Incident Response, ServiceNow, IBM QRadar, Azure Sentinel, Google Cloud Platform (GCP), Amazon Web Services (AWS)
- Rowan NakagawaApplication Security Analyst II | OWASP MTL Co-Leader · Bentley Systems · 2 yrs 5 mos
Application Security Analyst II at Bentley Systems (2 yrs 5 mos). Listed skills: Programming, Application Security Architecture, Application Security, Security Research
- Casey MarchettiApplication Security Analyst · Bentley Systems
Principal Application Security Analyst at Bentley Systems (duration unknown). Stated responsibilities: AI Automation for AppSec Fuzzing Binary Exploitation Web Application Testing
Validation gaps — what we could not confirm
1 detectable · 1 blind spot
- Blind spot — EDR/XDR platform — Emerson Castellanos's headline lists CrowdStrike and Microsoft Defender 365 but experience snippet is too thin to accept; remains unvalidated. (not publicly trackable — absence of evidence is typical for this category)Ask: “Which endpoint detection platform does your SOC standardize on, and when does that contract renew?”
- Partial coverage — Zscaler, CASB, DLP — mentioned in Emerson Castellanos's headline only; same threshold failure as above. (partial coverage — we detect this category when present, but not all vendors leave public signals)
- Partial coverage — PAM platform (CyberArk, BeyondTrust) — zero confirmed signals despite active SOX IAM compliance work. (partial coverage — we detect this category when present, but not all vendors leave public signals)
- No signal found — Email security vendor (Proofpoint, Mimecast) — no evidence found. (usually visible via DNS/MX/IP records — absence is informative, worth confirming)
Detectability reflects typical public-disclosure patterns, not live monitoring of this company.
Cloud / Platform
IaaS · PaaS · containers · managed databases- Microsoft Azure is Bentley's primary and dominant cloud platform — confirmed by a Microsoft Transform case study (400,000+ users monthly), Azure DNS/AKS/App Service CNAME network facts, and five independent current practitioner attestations.
- Azure Kubernetes Service (AKS) is confirmed for ProjectWise Cloud workloads via both a CNAME resolving to prod-connectsharedwinaks-eus.eastus.cloudapp.azure.com and a current SRE II practitioner's explicit current-role description.
- Azure SQL is confirmed in production SRE-managed workloads by two independent practitioners. Azure DevOps and Azure App Service are each confirmed by practitioner and network-fact evidence respectively.
- Cloudflare edge/CDN confirmed by IP attribution. MongoDB Atlas indicated by DNS TXT verification record (scope unknown). WP Engine hosts the public website per HTTP header.
- Microsoft case study predates 36 months (2019); adjusted confidence applied. Practitioner and network-fact evidence are current (2026-05-19) and fully corroborate the Azure platform claim independently.
Evidence
| Vendor | Product | Deployment scope | Conf. | Source | Date |
|---|---|---|---|---|---|
MMicrosoft | Azure (Cloud Platform) | Primary cloud platform for SaaS products including CONNECT Edition, Bentley Infrastructure Cloud, ProjectWise, AssetWise; 400,000+ users monthly — note: 2019 case study, recency penalty applied; claim independently corroborated by current practitioner and network-fact evidence | vendor-case-studyBentley Systems embraces Microsoft's Cloud | Microsoft Transform | 2019-01-01 | |
MMicrosoft | Azure Kubernetes Service (AKS) | Container orchestration for ProjectWise Cloud workloads; East US region cluster confirmed via CNAME and SRE II practitioner current-role description | Practitioner-Attestedcname_vendor+practitioner-attestationSam Castellanos – SRE II at Bentley Systems (LinkedIn) + CNAME network facts | 2026-05-19 | |
MMicrosoft | Azure SQL | Production database for SRE-managed workloads; confirmed by two independent current practitioners | Practitioner-Attestedstacked-practitioner-attestationSam Castellanos + Reese Demir – SREs at Bentley Systems (LinkedIn) | 2026-05-19 | |
MMicrosoft | Azure DevOps | CI/CD and cloud engineering operations; confirmed by current Cloud Engineer II | Practitioner-Attestedpractitioner-attestationQuinn Adeyemi – Cloud Engineer II at Bentley Systems (LinkedIn) | 2026-05-19 | |
MMicrosoft | Azure App Service | Production access tokens validator service hosted on Azure App Service (East US) | Network-ObservedCNAME VENDORVerified network fact (cname vendor)CNAME chain – verified network facts | 2026-05-19 | |
MMicrosoft | Microsoft Entra ID | Primary identity platform (managed namespace); ADFS residue present indicating active cloud identity migration | Verified by DNSDNS TXT VERIFICATIONVerified network fact (dns txt verification)M365 metadata – verified network facts | 2026-05-19 | |
CCloudflare | Cloudflare (Edge / CDN) | Edge network and CDN for bentley.com and www.bentley.com | Network-ObservedIP ATTRIBUTIONVerified network fact (ip attribution)IP attribution + HTTP headers – verified network facts | 2026-05-19 | |
MMongoDB | MongoDB Atlas | Atlas deployment indicated by DNS TXT verification record; scope of internal use within Bentley platform stack not specified | Verified by DNSDNS TXT VERIFICATIONVerified network fact (dns txt verification)DNS TXT verification – verified network facts | 2026-05-19 | |
WWP Engine | WP Engine (Managed WordPress Hosting) | Hosting provider for bentley.com and www.bentley.com public website | Network-ObservedHTTP HEADERVerified network fact (http header)HTTP header – verified network facts | 2026-05-19 |
Evidence methodology
- The company's own authoritative DNS records (TXT, MX, NS, DMARC, SPF) explicitly name this vendor. These records are vendor-signed and cannot be faked without controlling the domain.
- Observed passively in live HTTP response headers, CSP directives, CNAME chains, or IP-to-ASN attribution at the time of collection.
- A current or recent employee named this vendor in their LinkedIn work-history snippet — first-person disclosure, strongest non-deterministic signal.
Top prospecting targets
- Sam CastellanosSite Reliability Engineer II | CKA Certified | Docker | Azure Administration | Projectwise l Grafana · Bentley Systems
Site Reliability Engineer II at Bentley Systems (duration unknown). Stated responsibilities: Building, Managing, Project wise Cloud Deployments on Kubernetes and Azure. Optimising performance on K8 cluster on Azure infrastructure. Managing deployment Upgrades using CMDB automation. Maintaining monitoring Azure SQL resources Designing Grafana Dashboard and alerts for Systems Health, Performance and SLO.
- Reese DemirSite Reliability Engineer | MS Azure Admin | Cloud Administrator | ITIL | Process Improvement | IT Support Operations | Support Team Lead | Technical Support | Project Management | · Bentley Systems · 5 mos
Associate Site Reliability Engineer at Bentley Systems (5 mos). Stated responsibilities: SRE / Cloud Engineer with hands-on experience managing the full lifecycle of enterprise environments, including onboarding, architecture design, and production support. Skilled in building scalable, high-performance systems and executing upgrades and customized deployments across Production, QA, UAT, and Development… Listed skills: Grafana, GitHub, Azure SQL, Microsoft Azure, Cloud Computing, Server…
- Quinn AdeyemiDevOps / Cloud Engineer | 10+ Years in Cloud & Infrastructure | AWS · Azure · GCP | Terraform · CI/CD · Bentley Systems · 3 mos
Cloud Engineer II at Bentley Systems (3 mos). Listed skills: Azure DevOps, Microsoft Azure
- Harper NakagawaCloud Engineer| IAM| Azure Solutions Architect certified| Azure AI Certified| kubernetes |Platforms Engineer| Big Data| Site Reliability Engineer| DevOps| AWS| M365| GCP| Property Manager| Talent ID Scout| · Bentley Systems
Platform Engineer (cloud) at Bentley Systems (duration unknown). Stated responsibilities: - Managed CI/CD deployments, enhancing deployment efficiency by 40%. - Optimized Azure costs by implementing resource management strategies, resulting in annual savings - Member of a platforms and DevOps team responsible for system configuration, implementation, and support of DataConnect application suite, a SaaS…
Validation gaps — what we could not confirm
1 detectable · 0 blind spots
- No signal found — AWS and GCP appear in practitioner credentials but cannot be confirmed as production deployments; multi-cloud strategy vs. individual certifications cannot be determined. (usually visible via DNS/MX/IP records — absence is informative, worth confirming)
- MongoDB Atlas deployment scope unknown — DNS TXT verification confirms domain ownership registration but does not reveal workloads or teams.
- No IaC platform (Terraform, Bicep) confirmed for the Cloud/Platform domain via current-role practitioner snippet; ARM template reference was job-posting only.
Detectability reflects typical public-disclosure patterns, not live monitoring of this company.
Observability
metrics · logs · traces · APM- Grafana is the only confirmed observability tool — two current SRE practitioners (Sam Castellanos, Reese Demir) explicitly name Grafana dashboards and SLO alerting in their current-role descriptions.
- No APM, log management, distributed tracing, or on-call/incident management platforms were confirmed; the observability stack is considered partially evidenced and materially incomplete.
Evidence
| Vendor | Product | Deployment scope | Conf. | Source | Date |
|---|---|---|---|---|---|
GGrafana Labs | Grafana | System health, performance, and SLO dashboards and alerting across Kubernetes clusters and Azure SQL resources; attested by two independent current SRE practitioners | Practitioner-Attestedstacked-practitioner-attestationSam Castellanos + Reese Demir – SREs at Bentley Systems (LinkedIn) | 2026-05-19 |
Evidence methodology
- A current or recent employee named this vendor in their LinkedIn work-history snippet — first-person disclosure, strongest non-deterministic signal.
Top prospecting targets
- Reese DemirSite Reliability Engineer | MS Azure Admin | Cloud Administrator | ITIL | Process Improvement | IT Support Operations | Support Team Lead | Technical Support | Project Management | · Bentley Systems · 5 mos
Associate Site Reliability Engineer at Bentley Systems (5 mos). Stated responsibilities: SRE / Cloud Engineer with hands-on experience managing the full lifecycle of enterprise environments, including onboarding, architecture design, and production support. Skilled in building scalable, high-performance systems and executing upgrades and customized deployments across Production, QA, UAT, and Development… Listed skills: Grafana, GitHub, Azure SQL, Microsoft Azure, Cloud Computing, Server…
- Sam CastellanosSite Reliability Engineer II | CKA Certified | Docker | Azure Administration | Projectwise l Grafana · Bentley Systems
Site Reliability Engineer II at Bentley Systems (duration unknown). Stated responsibilities: Building, Managing, Project wise Cloud Deployments on Kubernetes and Azure. Optimising performance on K8 cluster on Azure infrastructure. Managing deployment Upgrades using CMDB automation. Maintaining monitoring Azure SQL resources Designing Grafana Dashboard and alerts for Systems Health, Performance and SLO.
- Sage VidalDirector of SRE Operations @ Bentley Systems | ProjectWise, Cross-functional Team Leadership · 2 yrs 1 mo
Director of SRE Operations at Bentley Systems (2 yrs 1 mo). Stated responsibilities: Own the reliability, scalability, and operational model of Bentley’s flagship enterprise platform, a deeply integrated system embedded in critical customer workflows. Re-architected the platform from a legacy, service-heavy model into an orchestrated, cloud-native system capable of continuous delivery and safe… Listed skills: Management, Agile Methodologies, DevOps, Cross-functional Team Leadership
- Ellis DemirDevOps / SRE · Bentley Systems · 1 yr 7 mos
Site Reliability Engineer at Bentley Systems (1 yr 7 mos). Stated responsibilities: Managing, implementing, and improving automation (CI/CD infrastructure) and tooling through Azure DevOps, scripting, and custom development. Automating Azure cloud deployments, resource provisioning, and infrastructure tasks. Using Ansible for automation and maintenance of infrastructure tasks.
Validation gaps — what we could not confirm
- Partial coverage — APM tooling (Datadog, New Relic, Dynatrace) unconfirmed despite cloud-native SaaS scale. (partial coverage — we detect this category when present, but not all vendors leave public signals)
- Partial coverage — Log management and distributed tracing (Elastic/ELK, OpenTelemetry) entirely unconfirmed. (partial coverage — we detect this category when present, but not all vendors leave public signals)
- On-call and alerting toolchain (PagerDuty, Opsgenie) unknown from public sources.
Detectability reflects typical public-disclosure patterns, not live monitoring of this company.
Endpoint / MDM
device management · EDR · BYOD- Microsoft Intune and Jamf Pro are confirmed as the dual-MDM endpoint management stack by the Manager of Endpoint Management (Emerson Tanaka) in a current-role LinkedIn attestation — highest evidence tier.
- SysTrack (Lakeside Software) is confirmed as the endpoint analytics backend by the same practitioner in the same current-role description.
- Apple Business Manager / APNs enrollment is indicated by an apple-domain-verification DNS TXT record, consistent with Jamf Pro MDM deployment for macOS/iOS.
- Windows Autopilot and SCCM are indicated by current job postings (August 2024); confidence is job-posting tier and these postings are at 21 months' age (minor recency penalty applied).
Evidence
| Vendor | Product | Deployment scope | Conf. | Source | Date |
|---|---|---|---|---|---|
MMicrosoft | Intune (Microsoft Endpoint Manager) | Windows device policy enforcement, compliance, and MAM; confirmed by Endpoint Management team manager in current-role description | Practitioner-Attestedpractitioner-attestationEmerson Tanaka – LinkedIn (current role, Bentley Systems) | 2026-05-19 | |
JJamf | Jamf Pro | Apple device deployment and management across Bentley Systems fleet | Practitioner-Attestedpractitioner-attestationEmerson Tanaka – LinkedIn (current role, Bentley Systems) | 2026-05-19 | |
LLakeside Software | SysTrack | Endpoint management backend analytics; confirmed by Endpoint Management team manager | Practitioner-Attestedpractitioner-attestationEmerson Tanaka – LinkedIn (current role, Bentley Systems) | 2026-05-19 | |
AApple | Apple Business Manager / APNs | Apple device enrollment via APNs for MDM; consistent with active Jamf Pro deployment | Verified by DNSDNS TXT VERIFICATIONVerified network fact (dns txt verification)DNS TXT verification – bentley.com | 2026-05-19 | |
MMicrosoft | Windows Autopilot | Modern zero-touch Windows device provisioning; named in Configuration Management Specialist posting (Aug 2024, ~21 months old — minor recency penalty applied) | job_postingBentley Systems – Configuration Management Specialist (jobs.bentley.com) | 2024-08-14 | |
MMicrosoft | SCCM / Configuration Manager | Collections, update deployment, OSD, software deployment, baselining; named in Configuration Management Specialist posting (Aug 2024, ~21 months — minor recency penalty applied) | job_postingBentley Systems – Configuration Management Specialist (jobs.bentley.com) | 2024-08-14 |
Evidence methodology
- The company's own authoritative DNS records (TXT, MX, NS, DMARC, SPF) explicitly name this vendor. These records are vendor-signed and cannot be faked without controlling the domain.
- A current or recent employee named this vendor in their LinkedIn work-history snippet — first-person disclosure, strongest non-deterministic signal.
Top prospecting targets
- Emerson TanakaManager, Endpoint Management Bentley Systems & Co-Owner GT productions · 1 yr 10 mos
Manager, Endpoint Management at Bentley Systems (1 yr 10 mos). Stated responsibilities: Leading a team to maintain, improve and innovate on the EM systems. Intune, JAMF and Systrack backend are a few of the responsibilities.
- Skyler VidalCertified Endpoint Administrator · Bentley Systems
Endpoint Management Specialist II at Bentley Systems (duration unknown).
Validation gaps — what we could not confirm
- Partial coverage — SCCM deployment scope unclear — may be legacy co-management alongside Intune rather than primary channel; no practitioner snippet explicitly scopes SCCM as current production. (partial coverage — we detect this category when present, but not all vendors leave public signals)
- Partial coverage — Mobile device management scope (iOS/Android vs. macOS/Windows only) not explicitly defined. (partial coverage — we detect this category when present, but not all vendors leave public signals)
- SysTrack rollout breadth (number of endpoints, specific analytics use cases) unconfirmed beyond single practitioner mention.
Detectability reflects typical public-disclosure patterns, not live monitoring of this company.
Collaboration
chat · email · calendar · docs- Microsoft 365 is confirmed as the enterprise collaboration platform — a dedicated Microsoft 365 Coordinator role at Bentley Systems is confirmed by a current practitioner (Quinn Vandermeer), and a Technical Specialist (Skyler Okafor) manages Exchange, SharePoint, Teams, and OneDrive environments.
- No evidence of Google Workspace internal deployment was found; Bentley-Google partnerships relate to geospatial product integrations only.
Evidence
| Vendor | Product | Deployment scope | Conf. | Source | Date |
|---|---|---|---|---|---|
MMicrosoft | Microsoft 365 | Enterprise-wide collaboration platform; dedicated Microsoft 365 Coordinator role confirms active administration | Practitioner-Attestedpractitioner-attestationQuinn Vandermeer – Microsoft 365 Coordinator, Bentley Systems (LinkedIn) | 2026-05-19 | |
MMicrosoft | Microsoft 365 (Exchange, SharePoint, Teams, OneDrive) | M365 suite components managed by internal Technical Specialist at Bentley Systems; scope of individual workloads not independently confirmed | Practitioner-Attestedserp-snippetSkyler Okafor – Technical Specialist, Bentley Systems (LinkedIn SERP snippet) | 2026-05-19 |
Evidence methodology
- A current or recent employee named this vendor in their LinkedIn work-history snippet — first-person disclosure, strongest non-deterministic signal.
Top prospecting targets
- Rowan PetrovLocalization Operations Manager · Bentley Systems · 19 yrs
Marketing Localization and Project Services Teams at Bentley Systems (19 yrs). Stated responsibilities: Localization Operations Manager | Global Digital Marketing & Localization Strategy • Lead end-to-end localization for Bentley.com, e-store, and marketing assets in 11 languages • Manage budgets, purchase orders, invoices, and vendor quotes approval • Implement and maintain Smartling TMS and AI tools for process…
- Quinn VandermeerIT Specialist | Cybersecurity Certified (CC) | Expert in MSCA, MCTS, MCP, Network+, A+, Driving IT Excellence · Bentley Systems · 1 yr 11 mos
Microsoft 365 Coordinator at Bentley Systems (1 yr 11 mos).
Validation gaps — what we could not confirm
2 detectable · 0 blind spots
- No signal found — Exchange Online vs. on-premises Exchange not explicitly confirmed; M365 Coordinator role is consistent with Exchange Online but not directly stated. (usually visible via DNS/MX/IP records — absence is informative, worth confirming)
- Partial coverage — SharePoint and Teams deployment scope (tenant-wide vs. limited workloads) not confirmed by case study or company disclosure. (partial coverage — we detect this category when present, but not all vendors leave public signals)
- No signal found — On-premises vs. fully cloud M365 configuration unknown. (usually visible via DNS/MX/IP records — absence is informative, worth confirming)
Detectability reflects typical public-disclosure patterns, not live monitoring of this company.
Backup / DR
backups · DR · object storage- No vendor case studies, practitioner attestations, job postings, or SEC disclosures naming specific backup or disaster recovery platforms were identified for Bentley Systems.
- Searches covering Rubrik, Cohesity, Veeam, Commvault, Druva, Zerto, and NetBackup returned no results attributable to Bentley Systems.
Top prospecting targets
Validation gaps — what we could not confirm
0 detectable · 3 blind spots
- Blind spot — No practitioner profiles surfaced naming specific backup or DR tools. (not publicly trackable — absence of evidence is typical for this category)Ask: “Which backup platform protects your core workloads, and has ransomware recovery been tested?”
- Blind spot — No vendor case studies from any major backup vendor name Bentley Systems as a customer. (not publicly trackable — absence of evidence is typical for this category)Ask: “Which backup platform protects your core workloads, and has ransomware recovery been tested?”
- Blind spot — No backup/DR-specific job postings with technology specifics were found. (not publicly trackable — absence of evidence is typical for this category)Ask: “Which backup platform protects your core workloads, and has ransomware recovery been tested?”
Detectability reflects typical public-disclosure patterns, not live monitoring of this company.
Data Center
colocation · physical infrastructure- No validated evidence of specific data center infrastructure vendors (hypervisors, storage, HCI, colocation) deployed internally at Bentley Systems was found.
- Bentley's public profile is dominated by its software product portfolio; internal DC stack disclosures are absent from public sources searched.
Top prospecting targets
- Devon NakagawaCloud Infrastructure Architect / Pilot · Bentley Systems · 4 yrs 2 mos
Cloud Infrastructure Architect at Bentley Systems (4 yrs 2 mos). Listed skills: Identity and Access Management (IAM), Technology Roadmapping, Asset Management, Technical Understanding, IT Management, Scripting, Organization Skills, Problem Analysis
- Casey KowalczykCloud Infrastructure Architect · Bentley Systems
Cloud Infrastructure Architect at Bentley Systems (duration unknown).
Validation gaps — what we could not confirm
- No case studies, vendor references, or engineering blog posts naming Bentley Systems as a customer of any DC infrastructure vendor.
- No DC-specific job postings with technology specifics surfaced.
- SEC 10-K filings not retrieved; direct EDGAR review may surface additional signals.
Detectability reflects typical public-disclosure patterns, not live monitoring of this company.
Infrastructure Ops
CI/CD · IaC · runbook automation- A Senior Systems Engineer (Sam Villanueva, 7+ years at Bentley) explicitly confirms Azure and AWS cloud infrastructure provisioning in a current-role description; a Platform Engineer (Avery Villanueva) confirms CI/CD deployment automation and a platforms/DevOps team operating the DataConnect SaaS suite.
- Terraform is required in multiple active job postings (DevOps Engineer, Junior AWS Cloud Engineer); Azure DevOps Pipelines and GitHub Actions are cited as CI/CD tooling in current SRE and DevOps postings.
- PowerShell/Bash scripting is explicitly required across multiple current SRE and DevOps Engineer postings. No practitioner current-role snippet names a specific IaC tool; IaC evidence remains at job-posting confidence tier.
- Jordan Thackeray (Infrastructure Engineer, 4+ years) is confirmed using SysTrack Lakeside for enterprise endpoint optimization — this corroborates the Endpoint/MDM domain finding and is out of IaC scope but confirms infrastructure automation program breadth.
Evidence
| Vendor | Product | Deployment scope | Conf. | Source | Date |
|---|---|---|---|---|---|
MMicrosoft | Azure (cloud infrastructure provisioning) | Senior Systems Engineer builds and configures infrastructure resources in Azure (and AWS); Windows server administration; full environment lifecycle management | Practitioner-Attestedpractitioner-attestationSam Villanueva – Senior Systems Engineer at Bentley Systems (LinkedIn) | 2026-05-19 | |
HHashiCorp | Terraform | Cloud infrastructure provisioning; required in DevOps Engineer (Remote UK) and preferred in Junior AWS Cloud Engineer postings; no practitioner current-role snippet confirms deployment | Practitioner-Attestedstacked-job-postingBentley Systems DevOps Engineer & Junior AWS Cloud Engineer – LinkedIn job postings | 2024-01-01 | |
MMicrosoft | Azure DevOps Pipelines | Infrastructure CI/CD pipelines; explicitly required in SRE II and DevOps Engineer postings (YAML-based pipeline configuration) | stacked-job-postingBentley Systems SRE II & DevOps Engineer job postings – jobs.bentley.com | 2025-05-28 | |
GGitHub | GitHub Actions | Infrastructure CI/CD automation; cited alongside Azure DevOps as alternative platform in SRE and DevOps postings | job_postingBentley Systems SRE II job posting – jobs.bentley.com | 2025-05-28 |
Evidence methodology
- A current or recent employee named this vendor in their LinkedIn work-history snippet — first-person disclosure, strongest non-deterministic signal.
Top prospecting targets
- Devon KowalczykApplication Engineer | AI-Driven Educator | Grid Modernization Advocate · Bentley Systems · 9 mos
Application Engineer - Energy Grid at Bentley Systems (9 mos). Stated responsibilities: As an Application Engineer – Energy Grid at Bentley Systems, I work with utilities and energy companies to modernize grid operations and support the transition to a cleaner, more resilient energy future. Listed skills: Energy Grid Modernization, Grid Planning and Design, Transmission and Distribution System Design, Renewable Energy Integration, Asset Management, Technical Solution Design, Client Engagement,…
- Sage PetrovCloud Security Engineer | DevSecOps & Compliance-as-Code | AWS & Azure | IAM, Threat Modeling, Automated Controls · Bentley Systems · 1 yr 6 mos
Platform Security Engineer at Bentley Systems (1 yr 6 mos). Stated responsibilities: • Spearhead the end-to-end design and implementation of SOX-aligned identity and access control architectures for financial and HR platforms which involves translating regulatory requirements into enforceable technical controls embedded directly into platform workflows.
- Harper NakagawaCloud Engineer| IAM| Azure Solutions Architect certified| Azure AI Certified| kubernetes |Platforms Engineer| Big Data| Site Reliability Engineer| DevOps| AWS| M365| GCP| Property Manager| Talent ID Scout| · Bentley Systems
Platform Engineer (cloud) at Bentley Systems (duration unknown). Stated responsibilities: - Managed CI/CD deployments, enhancing deployment efficiency by 40%. - Optimized Azure costs by implementing resource management strategies, resulting in annual savings - Member of a platforms and DevOps team responsible for system configuration, implementation, and support of DataConnect application suite, a SaaS…
- Sam VillanuevaCloud Systems Engineer · Bentley Systems · 7 yrs 9 mos
Senior Systems Engineer at Bentley Systems (7 yrs 9 mos). Stated responsibilities: • Build and configure infrastructure resources in cloud platforms including Azure and AWS • Install and configure servers and operating system software • Windows server administration and support • Ensure system and network security is maintained • Perform troubleshooting of issues related to all aspects of…
Validation gaps — what we could not confirm
- Partial coverage — No first-person practitioner current-role snippet explicitly names Terraform, Ansible, or any specific IaC tool; IaC evidence rests entirely on job postings. (partial coverage — we detect this category when present, but not all vendors leave public signals)
- Partial coverage — Ansible referenced in an expired/unverifiable SERP snippet; remains a plausible but unvalidated signal. (partial coverage — we detect this category when present, but not all vendors leave public signals)
- AWS infrastructure provisioning is mentioned by Sam Villanueva alongside Azure but no independent AWS-specific evidence (CNAME, case study) corroborates production AWS deployment.
Detectability reflects typical public-disclosure patterns, not live monitoring of this company.
Refresh this profile?
We'll sweep public sources across DNS, job postings, engineering blogs, conference talks, and LinkedIn signals. Claims with changed or removed sources will be flagged. Refreshes run in the background and typically take 4–6 minutes.
What the report calls out when evidence is thin
- Detectable gaps are separated from blind spots, so reps know what a deeper pass could still confirm.
- Blind spots come with the discovery question to ask on the call instead of an inflated guess.
- Unsupported claims are omitted until a cited source backs them.