DevOps Engineer

• Develop, maintain, and optimize infrastructure-as-code for repeatable and secure cloud deployments
• Build, maintain, and refactor CI/CD pipelines to accelerate feature delivery, minimize risk, and reduce technical debt
• Configure and manage observability tools, dashboards, and proactive alerting
• Respond to production issues, perform root cause analysis, and contribute to incident postmortems
• Collaborate with development teams to align infrastructure design with application requirements
• Document technical designs, runbooks, and standard operating procedures
• Participate in sprint planning and advocate for automation opportunities
• Design, provision, and maintain core cloud network topologies
• Troubleshoot connectivity across multi-environment setups
• Enhance secrets management and access controls, and audit IAM roles and policies for least-privilege access
• Improve visibility into cloud resource utilization and cost

• Integrate security controls into the software development lifecycle
• Establish practical secure development standards with engineering teams
• Help developers identify and remediate application security vulnerabilities
• Provide technical guidance on secure coding practices and common vulnerability classes
• Support security reviews for applications, services, APIs, and major architectural changes
• Design and implement automated security testing within CI/CD pipelines
• Implement SAST, SCA, secret scanning, container image scanning, IaC scanning, and dependency vulnerability detection
• Develop security gates for build and deployment pipelines
• Correlate and de-duplicate vulnerability signals across Dependabot, Vanta, and Tenable
• Evaluate applications and APIs for security weaknesses
• Establish secure API authentication and authorization patterns
• Support threat modeling and remediation of application security findings
• Review Terraform, CloudFormation, Kubernetes manifests, and infrastructure definitions for security risks
• Develop automated controls, secure infrastructure patterns, guardrails, and security automation
• Support container image security, workload configuration, secrets management, and runtime security
• Support the planned migration from Heroku to Render.com
• Design synthetic or de-identified data seeding for DAST in staging without exposing PHI
• Participate in architecture and design reviews
• Work with Cloud Security, Security Operations, and engineering teams to improve security visibility and resolve findings
• Track security findings, remediation times, vulnerability trends, security coverage, and secure-development adoption
• Replace manual reviews with automated preventative controls

DevSecOps Engineer

• Lead software commissioning of Kommand and peripheral hardware systems at customer sites
• Own end-to-end installation of pick-to-light systems, including wiring, physical installation, configuration, and functional testing
• Own end-to-end installation of overhead illuminator systems
• Conduct IQ and UAT, prepare formal test documentation, and obtain customer sign-off
• Troubleshoot live, in-production Kommand and system-level issues on site
• Deliver new Kommand installations, including application pre-configuration, database scripting, and pre-deployment testing
• Deliver Kommand version upgrades, including SSDT schema comparisons, version control, local pre-install testing, and customer coordination
• Execute production upgrades after standard business hours
• Perform DEV, QA, and Sandbox environment work during standard business hours
• Validate, diagnose, and remediate reported defects; route confirmed fixes to QA before merge and deployment
• Participate in the on-call rotation covering Kommand, AutoStore, and T-sort escalations
• Provide post-go-live support, including system migrations, ERP/WMS integration testing, and multi-site rollout support
• Gather project Kommand configurations and system parameters
• Translate BRDs and customer discussions into settings spreadsheets, network spreadsheets, and system parameters
• Educate clients on host interface use and support testing
• Configure customer-specific sandbox and production environments
• Assist with training on new features

Software Deployment Engineer

• Design, deploy, and operate Azure infrastructure using IaC with Bicep/Terraform
• Build and maintain Azure Pipelines for provisioning VMs, Key Vault, networking, and platform services
• Enforce GitOps-based configuration baselines across environments
• Create and maintain golden-image pipelines using Packer
• Ensure security compliance through CMKs, encryption, approved baselines, and AD/Entra ID IAM integration
• Operate secure enterprise environments aligned with DoD security standards
• Use vulnerability management tools such as Nessus Security Center
• Configure virtual machines and platform resources to send telemetry and logs to Azure Log Analytics
• Perform enterprise-scale patching and update management using WSUS or equivalent solutions
• Participate in change management and review boards
• Tailor infrastructure parameter templates to customer workload and hardware requirements
• Deploy Azure infrastructure through established CI/CD pipelines
• Document customer configurations and operational details in Confluence
• Coordinate with onsite and remote teams to validate configurations and handoff readiness
• Provide Tier 1 operational support, including automated desktop and software installations using DSC and Packer
• Develop and maintain Bicep/Terraform automation solutions
• Support secure container image movement and lifecycle management using Skopeo, Crane, and Podman
• Architect, develop, automate, deploy, and manage AKS-based applications

DevOps Engineer – Tech 3

• Design, deploy, and operate Azure infrastructure using IaC with Bicep/Terraform
• Build and maintain Azure Pipelines for automated provisioning of VMs, Key Vault, networking, and platform services
• Enforce GitOps-based configuration baselines
• Create and maintain Packer golden-image pipelines
• Ensure security compliance, including CMKs, encryption, and approved baselines
• Integrate IAM via AD/Entra ID, federation, and SSO tools such as Keycloak
• Operate secure enterprise environments in alignment with DoD security standards
• Use vulnerability management tools such as Nessus Security Center
• Configure virtual machines and platform resources to send telemetry and logs to Azure Log Analytics
• Perform enterprise-scale patching and update management using WSUS or equivalent solutions
• Participate in change management and review boards
• Tailor infrastructure parameter templates to customer workload and hardware requirements
• Deploy Azure infrastructure through established CI/CD pipelines
• Document customer configurations and operational details in Confluence
• Coordinate with onsite and remote teams to validate configurations and ensure handoff readiness
• Provide Tier 1 operational support, including automated baseline desktop and software installations
• Develop automation solutions using Bicep and/or Terraform
• Support secure container image movement and lifecycle management with Skopeo, Crane, and Podman
• Architect, develop, automate, deploy, and manage AKS-based applications