[Hiring] Senior DevSecOps Engineer @ScaleUp

Role Description

We are seeking a highly skilled and experienced DevSecOps Engineer (Traditional Infrastructure Focus) to support critical customer engagement. This role is ideal for an experienced professional who operates at the intersection of development, security, and traditional on-premise operations, bridging the gap between application security and legacy infrastructure.

The DevSecOps Engineer is expected to implement security practices and tools within CI/CD pipelines to ensure traditional applications and infrastructure configurations are scanned for vulnerabilities.

A primary focus will be the development and maintenance of automation scripts using:

• Perl
• Python
• Shell

They will operate and support physical network security infrastructure, managing:

• Firewall rules
• VPNs
• Routing security

Key responsibilities include:

• Troubleshooting complex network security incidents (DDoS mitigation)
• Managing security monitoring tools for on-premise hardware
• Maintaining centralized authentication (TACACS+, RADIUS)
• Performing physical server upgrades/patching

Qualifications

• 3 to 5 years of related work experience in DevSecOps, network security operations, or traditional infrastructure support.
• Bachelor's degree in engineering, computer science, information technology, or equivalent practical experience.
• Proficiency in Perl is essential for this role to maintain and enhance existing legacy operational tools and scripts.
• Strong hands-on operational experience with enterprise networking infrastructure, including routers, switches, hardware firewalls (e.g., Juniper SRX/MX, Cisco), and VPNs.
• Deep knowledge of Linux and Unix-based systems (e.g., RHEL, FreeBSD) operating in a bare-metal or traditional network support context.
• Experience building and maintaining CI/CD pipelines (Jenkins, GitLab CI) and integrating automated security testing into those workflows.
• Proficiency in additional scripting languages (Python, Bash) to automate modern on-premise workflows.
• Familiarity with configuration management and Infrastructure as Code tools like Ansible, Puppet, or Terraform applied to physical networks and traditional server environments.
• High level understanding of core routing, switching, and security protocols including BGP, OSPF, IS-IS, IPsec VPNs, and MACSec.

Requirements

• Relevant security certifications such as CISM, CISSP, or CEH.
• Experience with monitoring, telemetry, and alerting systems like Prometheus, Grafana, or ELK-based stacks.
• Familiarity with packet filtering and host-based firewall technologies (e.g., iptables, IPFW).
• Working knowledge of modern data formats (JSON, YAML, XML).