Senior DevSecOps & Network Infrastructure Engineer

Location: Melville, NY; hybrid schedule with in-office work on Monday, Tuesday, and Thursday and remote work on Wednesday and Friday

Salary: $165,000–$175,000 per year

Company

hirify.global builds a unified commerce platform with merchandising, mobile POS, inventory management, clienteling, and ecommerce capabilities for specialty and luxury retailers.

What you will do

• Design, harden, and operate on-premise VMware, Linux, Docker, and multi-datacenter infrastructure serving retail clients 24x7.
• Own FortiGate network-edge operations, including firewall policies, NAT, VPN, routing, segmentation, IPS, UTM profiles, and controlled changes.
• Build DevSecOps controls into CI/CD pipelines, including image and dependency scanning, SAST, secrets detection, IaC policy checks, signed artifacts, and vulnerability remediation.
• Manage centralized secrets, internal PKI, certificate issuance and rotation, Docker services, and infrastructure-as-code deployments.
• Lead incident response, root-cause analysis, observability improvements, audit support, penetration-test remediation, and security hardening.
• Use AI-augmented engineering tools, create runbooks and design documentation, and mentor team members.

Requirements

• 5+ years of production Linux/UNIX experience in on-premise or hybrid environments at meaningful scale.
• Enterprise firewall experience with FortiGate/FortiOS or comparable Palo Alto or Cisco platforms, including policy design, NAT, VPN, routing, and high availability.
• Strong networking knowledge covering TCP/IP, VLANs, segmentation, routing, DNS, TLS, HTTP/S, load balancing, packet captures, and certificate chains.
• Production experience with VMware vSphere, Docker, Git, CI/CD, Ansible or similar configuration management, and Terraform/OpenTofu or similar IaC.
• Practical DevSecOps experience with security gates, vulnerability and CVE remediation, secrets management, image scanning, and Bash scripting.
• Strong troubleshooting skills and the ability to lead incidents under pressure.

Nice to have

• Fortinet NSE 4+, Security+, CISSP, OSCP, or equivalent security expertise.
• PCI DSS or SOC 2 compliance experience, including evidence collection and remediation.
• MySQL operations, load balancers, multi-datacenter disaster recovery, or failover-testing experience.
• Retail, ecommerce, or POS operations experience.

Culture & Benefits

• Hybrid work model with defined in-office and remote days.
• Medical, dental, and vision coverage.
• Annual bonus eligibility and a 401(k) with a 50% company match up to 6% of employee contributions.
• Generous paid time off, year-round Summer Fridays, tuition reimbursement, and one volunteer day per year.
• On-site gym, café discount, and team events.

Hiring process

• Application review followed by hiring decision.