Azure DevOps & Security Engineer – Build Secure CI/CD

Greenheck Group; Iowa (LA); On-site; USD 117,000 - 145,000; Full time

Benefits offered by this job

Health & Family Support

Financial Security

Learning & Development

Rewards & Recognition

Wellbeing & Mental Health

Work-Life Balance

Fun Perks

Job summary

Greenheck Group, a global leader in air movement and ventilation, seeks a DevOps/Release Engineer to design, build, and maintain CI/CD pipelines in Azure DevOps, automate packaging and deployment, and enforce security throughout the lifecycle.

You will manage environment promotion from Dev to Production, develop automated tests, collaborate across teams, and implement IaC with Terraform, Ansible, and ARM templates to ensure parity across environments.

Qualifications

• 4-Year / Bachelor’s Degree in Computer Science, Information Technology, Computer Engineering, or equivalent years of directly relevant work experience required.
• 4–6 years of hands‑on DevOps or release engineering experience required, with demonstrated ownership of CI/CD pipelines in a production environment.
• Proven expertise with Azure DevOps (ADO), including YAML pipeline authoring, release pipelines, environment management, and test plan integration required.
• Experience managing environment promotion workflows (Dev → Test → Production) with approval gates, quality checks, and rollback capabilities required.
• Proficiency in scripting languages (C#, PowerShell or Python) for deployment automation, environment configuration, and pre/post‑deployment validation required.
• Working knowledge of Windows and Linux Server environments.
• Experience with version control systems and branching strategies that support multiple concurrent development streams required.
• Familiarity with enterprise application integration patterns; experience working with or automating deployments that interact with ERP systems (e.g., SAP), messaging platforms (e.g., Kafka), or industrial data systems (e.g., Ignition/SQL) preferred.
• Experience with ERP, MES enterprise platforms preferred.
• OpenShift / Redhat experience preferred.
• Experience with infrastructure-as-code tools (Terraform, Ansible, or Azure Resource Manager templates) for environment provisioning preferred.
• Experience with containerization (Docker, Kubernetes) for supporting application services adjacent to the ERP / MES platform preferred.

Responsibilities

• Design, build, and maintain CI/CD pipelines in Azure DevOps (ADO) to automate packaging, validation, and deployment of enterprise platform configurations and customizations while ensuring security is integrated throughout the development lifecycle.
• Own and operate the environment promotion workflow (Dev → Test → Production), enforcing quality gates and release controls at each stage to protect operations stability.
• Develop and maintain automated test and validation frameworks for source code packages prior to deployment, including integration checks against SAP, DataHub (Ignition/SQL), Kafka, and Bartender interfaces.
• Collaborate with application developers and systems analysts to establish branching strategies, pull request workflows, and versioning conventions that support parallel build cycles across multiple workstreams.
• Manage infrastructure-as-code and configuration management for enterprise platforms environments, ensuring environment parity and reproducibility across Dev, Test, and Production tiers.
• Partner with the Architecture team to define and uphold deployment standards, cutover runbooks, and rollback procedures for project go-lives and platform upgrades.
• Support post-deployment monitoring and incident response for the enterprise platforms, diagnosing pipeline failures, deployment anomalies, and environment drift across plant instances.
• Maintain deployment documentation, release notes, and ADO pipeline definitions in alignment with the team's established Way of Working standards.
• Contribute to the ongoing build-out of the team's DevOps maturity, identifying opportunities to reduce manual effort, increase deployment reliability, and shorten lead times from development to production.
• Collaborate with cross-functional teams (development, operations, and security) to design and deploy secure cloud infrastructure and applications on Microsoft Azure.
• Leverage Wiz to continuously monitor, identify, and remediate vulnerabilities across cloud environments, containers, and applications.
• Integrate security tools and practices into CI/CD pipelines, including automated security scans, vulnerability management, and compliance checks to reduce risks.
• Ensure that infrastructure, applications, and data comply with industry standards and security best practices (e.g., GDPR, SOC 2).
• Implement and maintain cloud security controls, including secure access management and the protection of sensitive data.
• Perform regular security audits, conduct threat assessments, and lead incident response efforts to identify and mitigate security risks proactively.

Skills

CI/CD pipelines

Azure DevOps

Release management

C#/PowerShell/Python

Windows Server

Linux Server

Version control

ERP integrations

Kubernetes

Docker

OpenShift

Terraform

Ansible

Azure Resource Manager

Education

Bachelor’s Degree in CS/IT/CE or equivalent

Tools

OpenShift/Redhat

Terraform

Ansible

Azure RM templates

Docker

Kubernetes

SAP

Ignition/SQL

Kafka

Job description

Greenheck Group, a global leader in air movement and ventilation, seeks a DevOps/Release Engineer to design, build, and maintain CI/CD pipelines in Azure DevOps, automate packaging and deployment, and enforce security throughout the lifecycle.

You will manage environment promotion from Dev to Production, develop automated tests, collaborate across teams, and implement IaC with Terraform, Ansible, and ARM templates to ensure parity across environments.