Azure DevOps & Security Engineer: CI/CD & Cloud

Greenheck Group; New York (NY); On-site; USD 117,000 - 145,000; Full time

Benefits offered by this job

Health & Family Support

Financial Security

Learning & Development

Rewards & Recognition

Wellbeing & Mental Health

Work-Life Balance

Fun Perks

Job summary

Greenheck Group seeks an experienced DevOps/Release Engineer in New York to design, build, and maintain CI/CD pipelines in Azure DevOps, enforce Dev→Test→Prod gates, and implement automated validation across SAP, Kafka, and Ignition interfaces. You will collaborate across teams to ensure secure, scalable deployments and infrastructure-as-code practices, with a focus on reducing lead times.

You will also manage cloud security, post-deployment monitoring, and documentation, contributing to the

Qualifications

• 4-Year / Bachelor’s Degree in Computer Science, Information Technology, Computer Engineering, or equivalent years of directly relevant work experience required.
• 4–6 years of hands-on DevOps or release engineering experience required, with demonstrated ownership of CI/CD pipelines in a production environment.
• Proven expertise with Azure DevOps (ADO), including YAML pipeline authoring, release pipelines, environment management, and test plan integration required.
• Experience managing environment promotion workflows (Dev → Test → Production) with approval gates, quality checks, and rollback capabilities required.
• Proficiency in scripting languages (C#, PowerShell or Python) for deployment automation, environment configuration, and pre/post-deployment validation required.
• Working knowledge of Windows and Linux Server environments.
• Experience with version control systems and branching strategies that support multiple concurrent development streams required.
• Familiarity with enterprise application integration patterns; experience working with or automating deployments that interact with ERP systems (e.g., SAP), messaging platforms (e.g., Kafka), or industrial data systems (e.g., Ignition/SQL) preferred.
• Experience with ERP, MES enterprise platforms preferred.
• OpenShift / Redhat experience preferred.
• Experience with infrastructure-as-code tools (Terraform, Ansible, or Azure Resource Manager templates) for environment provisioning preferred.
• Experience with containerization (Docker, Kubernetes) for supporting application services adjacent to the ERP / MES platform preferred.

Responsibilities

• Design, build, and maintain CI/CD pipelines in Azure DevOps (ADO) to automate packaging, validation, and deployment of enterprise platform configurations and customizations while ensuring security is integrated throughout the development lifecycle.
• Own and operate the environment promotion workflow (Dev → Test → Production), enforcing quality gates and release controls at each stage to protect operations stability.
• Develop and maintain automated test and validation frameworks for source code packages prior to deployment, including integration checks against SAP, DataHub (Ignition/SQL), Kafka, and Bartender interfaces.
• Collaborate with application developers and systems analysts to establish branching strategies, pull request workflows, and versioning conventions that support parallel build cycles across multiple workstreams.
• Manage infrastructure-as-code and configuration management for enterprise platforms environments, ensuring environment parity and reproducibility across Dev, Test, and Production tiers.
• Partner with the Architecture team to define and uphold deployment standards, cutover runbooks, and rollback procedures for project go-lives and platform upgrades.
• Support post-deployment monitoring and incident response for the enterprise platforms, diagnosing pipeline failures, deployment anomalies, and environment drift across plant instances.
• Maintain deployment documentation, release notes, and ADO pipeline definitions in alignment with the team's established Way of Working standards.
• Contribute to the ongoing build-out of the team's DevOps maturity, identifying opportunities to reduce manual effort, increase deployment reliability, and shorten lead times from development to production.
• Collaborate with cross-functional teams (development, operations, and security) to design and deploy secure cloud infrastructure and applications on Microsoft Azure.
• Leverage Wiz to continuously monitor, identify, and remediate vulnerabilities across cloud environments, containers, and applications.
• Integrate security tools and practices into CI/CD pipelines, including automated security scans, vulnerability management, and compliance checks to reduce risks.
• Ensure that infrastructure, applications, and data comply with industry standards and security best practices (e.g., GDPR, SOC 2).
• Implement and maintain cloud security controls, including secure access management and the protection of sensitive data.
• Perform regular security audits, conduct threat assessments, and lead incident response efforts to identify and mitigate security risks proactively.

Skills

CI/CD pipelines

Azure DevOps

Scripting (PowerShell/Python/C#)

Windows & Linux

Version control

Education

Bachelor’s Degree in CS/IT/Engineering

Tools

Azure DevOps (ADO)

Terraform

Ansible

Docker

Kubernetes

OpenShift

SAP

Job description

Greenheck Group seeks an experienced DevOps/Release Engineer in New York to design, build, and maintain CI/CD pipelines in Azure DevOps, enforce Dev→Test→Prod gates, and implement automated validation across SAP, Kafka, and Ignition interfaces. You will collaborate across teams to ensure secure, scalable deployments and infrastructure-as-code practices, with a focus on reducing lead times.

You will also manage cloud security, post-deployment monitoring, and documentation, contributing to the