Azure DevOps & Security Engineer — CI/CD & Cloud Security

Greenheck Group; Connecticut; On-site; USD 117,000 - 145,000; Full time

Benefits offered by this job

Health & Family Support

Financial Security

Learning & Development

Rewards & Recognition

Wellbeing & Mental Health

Work-Life Balance

Fun Perks

Job summary

Greenheck Group is seeking a skilled DevOps engineer to design, build, and maintain CI/CD pipelines in Azure DevOps, automate packaging and deployment, and enforce strict environment promotion controls across Dev, Test, and Production. You will collaborate with developers and security to ensure automated checks and secure deployments.

You will also develop automated test frameworks, manage IaC and configurations, and work with SAP, Kafka, Ignition/SQL interfaces.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, or equivalent years of directly relevant work experience required.
• 4–6 years of hands-on DevOps or release engineering experience required, with demonstrated ownership of CI/CD pipelines in a production environment.
• Proven expertise with Azure DevOps (ADO), including YAML pipeline authoring, release pipelines, environment management, and test plan integration required.
• Experience managing environment promotion workflows (Dev → Test → Production) with approval gates, quality checks, and rollback capabilities required.
• Proficiency in scripting languages (C#, PowerShell or Python) for deployment automation, environment configuration, and pre/post-deployment validation required.
• Working knowledge of Windows and Linux Server environments.
• Experience with version control systems and branching strategies that support multiple concurrent development streams required.
• Familiarity with enterprise application integration patterns; experience working with or automating deployments that interact with ERP systems (e.g., SAP), messaging platforms (e.g., Kafka), or industrial data systems (e.g., Ignition/SQL) preferred.
• Experience with ERP, MES enterprise platforms preferred.
• OpenShift / Redhat experience preferred.
• Experience with infrastructure-as-code tools (Terraform, Ansible, or Azure Resource Manager templates) for environment provisioning preferred.
• Experience with containerization (Docker, Kubernetes) for supporting application services adjacent to the ERP / MES platform preferred.

Responsibilities

• Design, build, and maintain CI/CD pipelines in Azure DevOps (ADO) to automate packaging, validation, and deployment of enterprise platform configurations and customizations while ensuring security is integrated throughout the development lifecycle.
• Own and operate the environment promotion workflow (Dev → Test → Production), enforcing quality gates and release controls at each stage to protect operations stability.
• Develop and maintain automated test and validation frameworks for source code packages prior to deployment, including integration checks against SAP, DataHub (Ignition/SQL), Kafka, and Bartender interfaces.
• Collaborate with application developers and systems analysts to establish branching strategies, pull request workflows, and versioning conventions that support parallel build cycles across multiple workstreams.
• Manage infrastructure-as-code and configuration management for enterprise platforms environments, ensuring environment parity and reproducibility across Dev, Test, and Production tiers.
• Partner with the Architecture team to define and uphold deployment standards, cutover runbooks, and rollback procedures for project go-lives and platform upgrades.
• Support post-deployment monitoring and incident response for the enterprise platforms, diagnosing pipeline failures, deployment anomalies, and environment drift across plant instances.
• Maintain deployment documentation, release notes, and ADO pipeline definitions in alignment with the team's established Way of Working standards.
• Contribute to the ongoing build-out of the team's DevOps maturity, identifying opportunities to reduce manual effort, increase deployment reliability, and shorten lead times from development to production.
• Collaborate with cross-functional teams (development, operations, and security) to design and deploy secure cloud infrastructure and applications on Microsoft Azure.
• Leverage Wiz to continuously monitor, identify, and remediate vulnerabilities across cloud environments, containers, and applications.
• Integrate security tools and practices into CI/CD pipelines, including automated security scans, vulnerability management, and compliance checks to reduce risks.
• Ensure that infrastructure, applications, and data comply with industry standards and security best practices (e.g., GDPR, SOC 2).
• Implement and maintain cloud security controls, including secure access management and the protection of sensitive data.
• Perform regular security audits, conduct threat assessments, and lead incident response efforts to identify and mitigate security risks proactively.

Skills

Bachelor’s degree in CS/IT/CE

DevOps / release engineering 4–6 yrs

Azure DevOps (ADO)

Release workflow management

Scripting: C#, PowerShell, Python

Windows/Linux server knowledge

Version control systems

ERP / SAP / Kafka / Ignition interf.

ERP / MES platforms familiarity

OpenShift / Red Hat

Terraform / Ansible / ARM templates

Docker / Kubernetes containerization

Education

Bachelor’s Degree in Computer Science, Information Technology, Computer Engineering, or equivalent

Tools

Azure DevOps

Terraform

Ansible

Azure Resource Manager templates

Docker

Kubernetes

OpenShift

SAP

Ignition/SQL

Kafka

Job description

Greenheck Group is seeking a skilled DevOps engineer to design, build, and maintain CI/CD pipelines in Azure DevOps, automate packaging and deployment, and enforce strict environment promotion controls across Dev, Test, and Production. You will collaborate with developers and security to ensure automated checks and secure deployments.

You will also develop automated test frameworks, manage IaC and configurations, and work with SAP, Kafka, Ignition/SQL interfaces.