DevOps & Security Engineer

Greenheck Group; Tennessee; On-site; USD 117,000 - 145,000; Full time

Benefits offered by this job

Health & Family Support

Financial Security

Learning & Development

Rewards & Recognition

Wellbeing & Mental Health

Work-Life Balance

Fun Perks

Job summary

Greenheck Group is seeking an experienced DevOps Engineer to design, build, and maintain CI/CD pipelines in Azure DevOps, automating packaging, validation, and deployment of enterprise configurations with integrated security. You will manage Dev→Test→Prod promotion workflows and collaborate with developers and security teams to ensure robust, scalable deployments.

You will also develop automated test frameworks, support cross-stream build cycles, and maintain IaC and config management across

Qualifications

• Bachelor's degree in computer science, IT, or engineering, or equivalent work experience.
• 4–6 years of hands‑on DevOps in production environments.
• Proven expertise with Azure DevOps, YAML pipelines, release pipelines, and environment management.
• Experience managing environment promotion workflows with approval gates and rollback capabilities.
• Proficiency in C#, PowerShell or Python for deployment automation.
• Working knowledge of Windows and Linux Server environments.
• Experience with version control systems and branching strategies for multiple streams.
• Familiarity with ERP/MES/SCADA interfaces; SAP, Kafka, Ignition/SQL integration is a plus.
• OpenShift/Red Hat experience preferred.
• Experience with IaC tools (Terraform, Ansible, ARM templates).
• Containerization with Docker and Kubernetes is preferred.

Responsibilities

• Design, build, and maintain CI/CD pipelines in Azure DevOps to automate packaging, validation, and deployment with security built in.
• Own environment promotion workflow (Dev→Test→Prod) with quality gates and release controls.
• Develop and maintain automated test/validation frameworks for packages, including SAP, DataHub, Kafka, and Bartender interfaces.
• Collaborate on branching strategies, PR workflows, and versioning for parallel build cycles.
• Manage infrastructure-as-code and configuration for enterprise platforms across Dev, Test, Prod.
• Define deployment standards, cutover runbooks, and rollback procedures with Architecture team.
• Support post-deployment monitoring and incident response for pipelines and environments.
• Maintain deployment docs, release notes, and ADO pipeline definitions per Way of Working.
• Contribute to DevOps maturity by reducing manual effort and shortening lead times.
• Collaborate with cross-functional teams to design and deploy secure cloud infrastructure on Azure.
• Utilize Wiz to monitor and remediate vulnerabilities across cloud, containers, and apps.
• Integrate security into CI/CD with automated scans, vulnerability checks, and compliance.

Skills

C#

PowerShell

Python

Windows Server

Linux Server

CI/CD

Security-focused

Education

Bachelor’s degree in Computer Science / IT / Engineering or equivalent

Tools

Azure DevOps

YAML

OpenShift

Terraform

Ansible

Azure Resource Manager

Docker

Kubernetes

SAP

Ignition/SQL

Kafka

Job description

Ready to join a global leader in air movement and ventilation? At Greenheck Group, joining our team means more than just starting a job, it’s joining an award-winning culture prioritizing your growth and development. Our unwavering commitment in supporting our team members both personally and professionally has earned us national recognition time and time again. As an innovative, environmentally responsible manufacturer of commercial HVAC systems, Greenheck Group designs and manufactures industry-leading air movement and ventilation solutions through our family of trusted brands. Our products are found in commercial, institutional, and industrial facilities worldwide, from schools and hospitals to factories and stadiums. Since 1947, we’ve proudly invested in our people and our communities, fostering innovation, leadership, and opportunity at every level. We are more than products, we are a team of inspired people doing extraordinary things.

What You'll Be Doing

• Design, build, and maintain CI/CD pipelines in Azure DevOps (ADO) to automate packaging, validation, and deployment of enterprise platform configurations and customizations while ensuring security is integrated throughout the development lifecycle.
• Own and operate the environment promotion workflow (Dev → Test → Production), enforcing quality gates and release controls at each stage to protect operations stability.
• Develop and maintain automated test and validation frameworks for source code packages prior to deployment, including integration checks against SAP, DataHub (Ignition/SQL), Kafka, and Bartender interfaces.
• Collaborate with application developers and systems analysts to establish branching strategies, pull request workflows, and versioning conventions that support parallel build cycles across multiple workstreams.
• Manage infrastructure-as-code and configuration management for enterprise platforms environments, ensuring environment parity and reproducibility across Dev, Test, and Production tiers.
• Partner with the Architecture team to define and uphold deployment standards, cutover runbooks, and rollback procedures for project go-lives and platform upgrades.
• Support post-deployment monitoring and incident response for the enterprise platforms, diagnosing pipeline failures, deployment anomalies, and environment drift across plant instances.
• Maintain deployment documentation, release notes, and ADO pipeline definitions in alignment with the team's established Way of Working standards.
• Contribute to the ongoing build-out of the team's DevOps maturity, identifying opportunities to reduce manual effort, increase deployment reliability, and shorten lead times from development to production.
• Collaborate with cross-functional teams (development, operations, and security) to design and deploy secure cloud infrastructure and applications on Microsoft Azure.
• Leverage Wiz to continuously monitor, identify, and remediate vulnerabilities across cloud environments, containers, and applications.
• Integrate security tools and practices into CI/CD pipelines, including automated security scans, vulnerability management, and compliance checks to reduce risks.
• Ensure that infrastructure, applications, and data comply with industry standards and security best practices (e.g., GDPR, SOC 2).
• Implement and maintain cloud security controls, including secure access management and the protection of sensitive data.
• Perform regular security audits, conduct threat assessments, and lead incident response efforts to identify and mitigate security risks proactively.

What You Should Have

• 4-Year / Bachelor’s Degree in Computer Science, Information Technology, Computer Engineering, or equivalent years of directly relevant work experience required.
• 4–6 years of hands‑on DevOps or release engineering experience required, with demonstrated ownership of CI/CD pipelines in a production environment.
• Proven expertise with Azure DevOps (ADO), including YAML pipeline authoring, release pipelines, environment management, and test plan integration required.
• Experience managing environment promotion workflows (Dev → Test → Production) with approval gates, quality checks, and rollback capabilities required.
• Proficiency in scripting languages (C#, PowerShell or Python) for deployment automation, environment configuration, and pre/post‑deployment validation required.
• Working knowledge of Windows and Linux Server environments.
• Experience with version control systems and branching strategies that support multiple concurrent development streams required.
• Familiarity with enterprise application integration patterns; experience working with or automating deployments that interact with ERP systems (e.g., SAP), messaging platforms (e.g., Kafka), or industrial data systems (e.g., Ignition/SQL) preferred.
• Experience with ERP, MES, SCADA, or other manufacturing or operations technology platforms is a plus; candidates with general DevOps experience and a demonstrated ability to ramp on domain‑specific platforms will be considered.
• Experience with ERP, MES enterprise platforms preferred.
• OpenShift / Redhat experience preferred.
• Experience with infrastructure-as-code tools (Terraform, Ansible, or Azure Resource Manager templates) for environment provisioning preferred.
• Experience with containerization (Docker, Kubernetes) for supporting application services adjacent to the ERP / MES platform preferred.

Compensation & Benefits

Greenheck Group takes pride in providing competitive pay along with a comprehensive benefits package as part of our total rewards program. The starting base pay range for this position is $117,249-$144,837 and may vary based on factors such as job‑related knowledge, skills, experience, and performance. With best‑in‑class benefits, you can be the best you, and together, we can be the best in the industry. Visit our Perks & Benefits page for more information on these offerings:

• Health & Family Support
• Financial Security
• Learning & Development
• Rewards & Recognition
• Wellbeing & Mental Health
• Work-Life Balance
• Fun Perks

SPECIAL NOTATION

The preceding statements are intended to describe the general nature and level of work being performed by people in this position. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills. The Employer retains the right to change or assign other duties to this position.

Physical Requirements

Work is performed in an office environment and requires the ability to operate standard office equipment, such as a computer and phone. Sedentary work. Exerting up to 10 pounds of force occasionally and/or negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects. Repetitive motion. Substantial motions of the wrists, hands, and/or fingers. The person is required to have close visual acuity to perform an activity such as: preparing and analyzing data, and figures; transcribing; viewing a computer terminal; extensive reading. Occasional mobility required to attend in‑person meetings and complete various office tasks.

EEO STATEMENT

We are an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.

ACCOMMODATIONS REQUEST

Greenheck Group complies with federal and state disability laws and makes reasonable accommodations for applicants and candidates with disabilities. To request an accommodation for the application or interview process, please email [e-mail] with your name, job title, posting number, and requested accommodation.

RECRUITING FRAUD ALERT

At Greenheck Group, your personal information and online safety are our top priorities. Our recruiters will only direct candidates to apply through our official career page at https://greenheckgroup.com/careers/. We will never request payments, financial account details, or sensitive information such as Social Security numbers. If you’re unsure about the legitimacy of a message, please contact [e-mail] for verification.

If you're looking for a place to grow while working with happy, enthusiastic, values‑based people, you'll enjoy your career with us!