DevOps & Security Engineer

Greenheck Group is an innovative manufacturer of commercial HVAC systems and air movement and ventilation solutions. The DevOps & Security Engineer will design and maintain Azure DevOps CI/CD pipelines, manage environment promotion and infrastructure automation, and integrate security practices across cloud infrastructure, applications, and deployment workflows.

Responsibilities:

• Design, build, and maintain CI/CD pipelines in Azure DevOps (ADO) to automate packaging, validation, and deployment of enterprise platform configurations and customizations while ensuring security is integrated throughout the development lifecycle
• Own and operate the environment promotion workflow (Dev → Test → Production), enforcing quality gates and release controls at each stage to protect operations stability
• Develop and maintain automated test and validation frameworks for source code packages prior to deployment, including integration checks against SAP, DataHub (Ignition/SQL), Kafka, and Bartender interfaces
• Collaborate with application developers and systems analysts to establish branching strategies, pull request workflows, and versioning conventions that support parallel build cycles across multiple workstreams
• Manage infrastructure-as-code and configuration management for enterprise platforms environments, ensuring environment parity and reproducibility across Dev, Test, and Production tiers
• Partner with the Architecture team to define and uphold deployment standards, cutover runbooks, and rollback procedures for project go-lives and platform upgrades
• Support post-deployment monitoring and incident response for the enterprise platforms, diagnosing pipeline failures, deployment anomalies, and environment drift across plant instances
• Maintain deployment documentation, release notes, and ADO pipeline definitions in alignment with the team's established Way of Working standards
• Contribute to the ongoing build-out of the team's DevOps maturity, identifying opportunities to reduce manual effort, increase deployment reliability, and shorten lead times from development to production
• Collaborate with cross-functional teams (development, operations, and security) to design and deploy secure cloud infrastructure and applications on Microsoft Azure
• Leverage Wiz to continuously monitor, identify, and remediate vulnerabilities across cloud environments, containers, and applications
• Integrate security tools and practices into CI/CD pipelines, including automated security scans, vulnerability management, and compliance checks to reduce risks
• Ensure that infrastructure, applications, and data comply with industry standards and security best practices (e.g., GDPR, SOC 2)
• Implement and maintain cloud security controls, including secure access management and the protection of sensitive data
• Perform regular security audits, conduct threat assessments, and lead incident response efforts to identify and mitigate security risks proactively

Requirements:

• 4-Year / Bachelor's Degree in Computer Science, Information Technology, Computer Engineering, or equivalent years of directly relevant work experience required
• 4–6 years of hands-on DevOps or release engineering experience required, with demonstrated ownership of CI/CD pipelines in a production environment
• Proven expertise with Azure DevOps (ADO), including YAML pipeline authoring, release pipelines, environment management, and test plan integration required
• Experience managing environment promotion workflows (Dev → Test → Production) with approval gates, quality checks, and rollback capabilities required
• Proficiency in scripting languages (C#, PowerShell or Python) for deployment automation, environment configuration, and pre/post-deployment validation required
• Working knowledge of Windows and Linux Server environments
• Experience with version control systems and branching strategies that support multiple concurrent development streams required
• Experience with ERP, MES, SCADA, or other manufacturing or operations technology platforms is a plus; candidates with general DevOps experience and a demonstrated ability to ramp on domain-specific platforms will be considered
• Work is performed in an office environment and requires the ability to operate standard office equipment, such as a computer and phone
• Sedentary work
• Exerting up to 10 pounds of force occasionally and/or negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects
• Repetitive motion
• Substantial motions of the wrists, hands, and/or fingers
• The person is required to have close visual acuity to perform an activity such as: preparing and analyzing data, and figures; transcribing; viewing a computer terminal; extensive reading
• Occasional mobility required to attend in-person meetings and complete various office tasks
• Familiarity with enterprise application integration patterns; experience working with or automating deployments that interact with ERP systems (e.g., SAP), messaging platforms (e.g., Kafka), or industrial data systems (e.g., Ignition/SQL) preferred
• Experience with ERP, MES enterprise platforms preferred
• OpenShift / Redhat experience preferred
• Experience with infrastructure-as-code tools (Terraform, Ansible, or Azure Resource Manager templates) for environment provisioning preferred
• Experience with containerization (Docker, Kubernetes) for supporting application services adjacent to the ERP / MES platform preferred