DevOps & Security Engineer
About the Role
Ready to join a global leader in air movement and ventilation? At Greenheck Group, joining our team means more than just starting a job—it’s joining an award-winning culture prioritizing your growth and development. Our unwavering commitment to supporting our team members both personally and professionally has earned us national recognition time and time again. As an innovative, environmentally responsible manufacturer of commercial HVAC systems, Greenheck Group designs and manufactures industry-leading air movement and ventilation solutions through our family of trusted brands. Our products are found in commercial, institutional, and industrial facilities worldwide, from schools and hospitals to factories and stadiums. Since 1947, we’ve proudly invested in our people and our communities, fostering innovation, leadership, and opportunity at every level. We are more than products; we are a team of inspired people doing extraordinary things.
Responsibilities
- Design, build, and maintain CI/CD pipelines in Azure DevOps (ADO) to automate packaging, validation, and deployment of enterprise platform configurations and customizations while ensuring security is integrated throughout the development lifecycle.
- Own and operate the environment promotion workflow (Dev → Test → Production), enforcing quality gates and release controls at each stage to protect operations stability.
- Develop and maintain automated test and validation frameworks for source code packages prior to deployment, including integration checks against SAP, DataHub (Ignition/SQL), Kafka, and Bartender interfaces.
- Collaborate with application developers and systems analysts to establish branching strategies, pull request workflows, and versioning conventions that support parallel build cycles across multiple workstreams.
- Manage infrastructure-as-code and configuration management for enterprise platforms environments, ensuring environment parity and reproducibility across Dev, Test, and Production tiers.
- Partner with the Architecture team to define and uphold deployment standards, cutover runbooks, and rollback procedures for project go-lives and platform upgrades.
- Support post-deployment monitoring and incident response for the enterprise platforms, diagnosing pipeline failures, deployment anomalies, and environment drift across plant instances.
- Maintain deployment documentation, release notes, and ADO pipeline definitions in alignment with the team's established Way of Working standards.
- Contribute to the ongoing build-out of the team's DevOps maturity, identifying opportunities to reduce manual effort, increase deployment reliability, and shorten lead times from development to production.
- Collaborate with cross-functional teams (development, operations, and security) to design and deploy secure cloud infrastructure and applications on Microsoft Azure.
- Leverage Wiz to continuously monitor, identify, and remediate vulnerabilities across cloud environments, containers, and applications.
- Integrate security tools and practices into CI/CD pipelines, including automated security scans, vulnerability management, and compliance checks to reduce risks.
- Ensure that infrastructure, applications, and data comply with industry standards and security best practices (e.g., GDPR, SOC 2).
- Implement and maintain cloud security controls, including secure access management and the protection of sensitive data.
- Perform regular security audits, conduct threat assessments, and lead incident response efforts to identify and mitigate security risks proactively.
Qualifications
- 4-Year / Bachelor’s Degree in Computer Science, Information Technology, Computer Engineering, or equivalent years of directly relevant work experience required.
- 4–6 years of hands-on DevOps or release engineering experience required, with demonstrated ownership of CI/CD pipelines in a production environment.
- Proven expertise with Azure DevOps (ADO), including YAML pipeline authoring, release pipelines, environment management, and test plan integration required.
- Experience managing environment promotion workflows (Dev → Test → Production) with approval gates, quality checks, and rollback capabilities required.
- Proficiency in scripting languages (C#, PowerShell, or Python) for deployment automation, environment configuration, and pre/post-deployment validation required.
- Working knowledge of Windows and Linux Server environments.
- Experience with version control systems and branching strategies that support multiple concurrent development streams required.
- Familiarity with enterprise application integration patterns; experience working with or automating deployments that interact with ERP systems (e.g., SAP), messaging platforms (e.g., Kafka), or industrial data systems (e.g., Ignition/SQL) preferred.
- Experience with ERP, MES, SCADA, or other manufacturing or operations technology platforms is a plus; candidates with general DevOps experience and a demonstrated ability to ramp on domain-specific platforms will be considered.
- OpenShift / Redhat experience preferred.
- Experience with infrastructure-as-code tools (Terraform, Ansible, or Azure Resource Manager templates) for environment provisioning preferred.
- Experience with containerization (Docker, Kubernetes) for supporting application services adjacent to the ERP / MES platform preferred.
Pay
The starting base pay range for this position is $117,249-$144,837 and may vary based on factors such as job-related knowledge, skills, experience, and performance.
Benefits
Greenheck Group takes pride in providing competitive pay along with a comprehensive benefits package as part of our total rewards program. With best-in-class benefits, you can be the best you, and together, we can be the best in the industry. Visit our Perks & Benefits page for more information on these offerings:
- Health & Family Support
- Financial Security
- Learning & Development
- Rewards & Recognition
- Wellbeing & Mental Health
- Work-Life Balance
- Fun Perks
Physical Requirements
Work is performed in an office environment and requires the ability to operate standard office equipment, such as a computer and phone. Sedentary work. Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull, or otherwise move objects. Repetitive motion. Substantial motions of the wrists, hands, and/or fingers. The person is required to have close visual acuity to perform an activity such as: preparing and analyzing data and figures; transcribing; viewing a computer terminal; extensive reading. Occasional mobility required to attend in-person meetings and complete various office tasks.