Senior DevSecOps & Network Infrastructure Engineer

Hands-on enterprise firewall experience, ideally FortiGate/FortiOS: policy design, NAT and VIPs, IPsec and SSL VPN, routing, HA pairs, and the judgment to change a live rule set safely. Deep Palo Alto or Cisco ASA/Firepower experience plus a genuine willingness to go deep on Fortinet also works.

Strong networking fundamentals: TCP/IP, VLANs and segmentation, routing, DNS, TLS, HTTP/S, and load balancing. You can read a packet capture and a certificate chain and say what is actually happening.

Production VMware vSphere experience: clusters and hosts, datastores, resource contention, snapshots and templates, and patching without an outage.

Docker in production: image builds and hardening, registries, compose-based or orchestrated deployment, container networking, and troubleshooting the container that will not stay up.

Practical DevSecOps: CI/CD pipelines with security gates, vulnerability management and CVE remediation at fleet scale, secrets management, and image scanning.

Solid DevOps fundamentals: Git, CI/CD pipelines, Ansible (or similar configuration management), Terraform/OpenTofu (or similar IaC), and Docker.

Comfortable scripting in Bash. Python is not required, but you should have a working understanding of programming fundamentals and be able to read, modify, and write straightforward code.

Strong troubleshooting instincts and the temperament to lead under pressure.

Real day-to-day experience using AI-augmented engineering tools (Claude, Cursor, Copilot, MCP servers, agentic workflows), not just demos.

Firewall and network security operations at the edge of a production e-commerce platform: rule hygiene, attack-surface reduction, and closing external pen-test findings.

Experience with a centralized secrets manager (HashiCorp Vault, OpenBao, or comparable) and internal PKI or certificate automation.

Experience with Datadog, Grafana, or comparable observability platforms.

Security certifications such as Fortinet NSE 4 or higher, Security+, CISSP, or OSCP, or equivalent demonstrated depth.

Exposure to compliance frameworks that touch retail (PCI DSS, SOC 2) and the evidence work that comes with them.

MySQL operational experience: replication, performance tuning, backups, and recovery.

Load balancer experience (Kemp/LoadMaster, F5, HAProxy, NGINX), including SSL offload and WAF policy.

Multi-datacenter, disaster-recovery, or failover-testing experience.

Retail, e-commerce, or POS-adjacent operational experience.