DevSecOps & Systems Engineer

Name of the Company: SpaceTS

www.space-ts.com

Role: DevSecOps & Systems Engineer

Key Responsibilities & Requirements

1. Version Control & CI/CD Pipeline (Gitea).

VCS Administration, Security & Access, CI/CD Integration: Deploy, harden, and manage

self-hosted Gitea on physical Linux servers

2. Identity, Access Control & Management.

Integrate Google Workspace Identity (SSO/SAML) for all local devices, VPN, VCS, and

internal apps.

Access Governance. Enforce strict Zero Trust principles, Least Privilege access, and

mandatory Hardware/App-based MFA for all end points.

3. Edge Security & Physical Firewall Operations.

Firewall Management (FortiGate / Sophos) Deploy, configure, and maintain high-

throughput firewalls, establish strict VLAN segmentation, IPS, setup and manage secure

tunnels to remote physical DR site.

4. Zero-Trust VPN Gateway.

Deploy and operate NetBird / equivalent for secure remote access, Integration with

Google Workspace Identity for endpoints.

5. On-Premises NAS, Backup & Physical DR Execution.

Primary NAS Setup, Backup Strategy & DR. Implement automated, encrypted

sync/replication between primary NAS and remote physical DR server

6. Office IT & Systems Administration (Associated Tasks).

Local Network Infrastructure Management, Endpoint & Device Management using

lightweight MDM / Google Endpoint Management.

Security & Compliance. Ensure physical/digital log retention for regulatory compliance.

Qualifications & Technical Skillset

BE / B Tech in CS / IT/ equivalent with 4 to 6 years in IT Infrastructure + DevSecOps / SysAdmin

roles, ideally with hands-on hardware/lab management experience. Deep networking

fundamentals with an info security mindset and gateway / firewall management exposure.

Preferred Tool stack exposure to Gitea, NetBird, TrueNAS / Synology OS, Docker / Podman,

Shell / Python Scripting, Ansible for automation.

Work Location: In person