Senior DevSecOps & On-Prem Network Engineer

KWI; Melville (NY); Híbrido; USD 165 000 - 175 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Full Medical, Dental and Vision

Annual bonus eligible

Free gym in the building

Generous PTO policy

Tuition Reimbursement

401(K) with company match

Employee Referral Program

Resumo da oferta

KWI is seeking a senior systems engineer to design, secure, and run our on-prem infrastructure powering a unified commerce platform for luxury brands. You will manage VMware vSphere, Linux VMs, and Docker workloads across datacenters, while embedding security into CI/CD pipelines and IaC templates.

You will own the network edge, secrets management, incident response, and observability, with a hybrid work model and opportunities to influence architecture at scale.

Qualificações

• 5+ years operating production Linux/UNIX (RHEL, CentOS/Rocky, Debian/Ubuntu) in on-prem or hybrid at scale.
• Hands-on enterprise firewall experience (FortiGate/FortiOS; NAT, VIPs, IPsec/SSL VPN)
• Strong networking fundamentals (TCP/IP, VLANs, DNS, TLS, HTTP/S, load balancing)
• Production VMware vSphere experience (clusters, hosts, datastores, patches)
• Docker in production: images, registries, deployment, networking, troubleshooting
• DevSecOps: CI/CD with security gates, vulnerability management at fleet scale
• Git, CI/CD pipelines, Ansible/Terraform/OpenTofu, Docker
• Bash scripting; basic Python, programming fundamentals

Responsabilidades

• Design, harden, and operate our on-prem footprint (VMware vSphere, Linux VMs, Docker workloads) across multiple datacenters.
• Own the network edge: FortiGate policy design, NAT/VIPs, IPsec VPNs, segmentation, IPS/UTM, change control.
• Build security into the delivery pipeline: container image scanning, SAST, secrets detection, IaC policy checks.
• Containerize and template services with Docker and IaC for repeatable deployments.
• Manage secrets and PKI: centralized secrets, internal CA, automated certificate rotation.
• Own incidents end-to-end: triage, root-cause analysis, post-incident documentation.

Descrição da oferta de emprego

KWI is seeking a senior systems engineer to design, secure, and run our on-prem infrastructure powering a unified commerce platform for luxury brands. You will manage VMware vSphere, Linux VMs, and Docker workloads across datacenters, while embedding security into CI/CD pipelines and IaC templates.

You will own the network edge, secrets management, incident response, and observability, with a hybrid work model and opportunities to influence architecture at scale.