Role Description We are seeking a highly skilled and hands-on Azure DevOps Administrator to manage, secure, and optimize our Azure DevOps environment. The ideal candidate will have deep expertise in Azure DevOps administration, security, integrations, extension management, and repository governance, with a strong focus on operational excellence and compliance. Key Responsibilities - Azure DevOps Administration - Onboard new applications and teams into Azure DevOps. - Define, configure, and manage Process Templates. - Perform tenant-level (Level 1) and project-level (Level 2) administration. - Manage security groups, repositories, project settings, and team structures. - Enforce least-privilege access principles for all contributors. - Security & Access Management - Administer user onboarding/offboarding and Azure DevOps license management. - Configure and manage permissions, repo access, and pipeline controls. - Administer resources, resource groups, and team-level configurations. - Proactively monitor and prevent privilege escalation. - Integrations & Service Connections - Create and manage Service Connections for Azure, GitHub, Fortify on Demand, and other CI/CD tools. - Troubleshoot authentication, permissions, and pipeline execution issues. - Integrate external security tools and ensure proper project-level configuration. - Extension Management - Evaluate, install, and govern Azure DevOps Marketplace Extensions. - Assess extension permission scopes and identify high-risk or over-privileged extensions. - Ensure secure handling of credentials and secrets. - Communicate extension-related changes to stakeholders to avoid pipeline disruptions. - Branch Policies & Repository Governance - Enforce branch protection rules, PR requirements, and code review workflows. - Implement repository governance aligned with compliance and security standards. - Apply GitHub Advanced Security features within Azure DevOps environments. - GitHub Advanced Security for Azure DevOps - Manage Secret Scanning Alerts, Code Scanning Alerts, and Dependency Vulnerability Alerts. - Ensure remediation and rotation procedures for exposed secrets. - Triage and manage static analysis findings and dependency vulnerabilities. - CI/CD Pipeline Administration - Maintain a strong understanding of pipeline structure, execution flow, and administration (no coding required). - Troubleshoot pipeline issues related to permissions, service connections, repo policies, and extensions. - Ensure stable and compliant CI/CD operations across teams. - Scripting & API Integration - Develop and maintain PowerShell scripts for automation and administration tasks. - Utilize REST APIs (Azure DevOps, GitHub, etc.) for advanced integrations and reporting. - GitHub User Management - Manage user onboarding and user management processes in GitHub. Qualifications - Proven hands-on experience as an Azure DevOps Administrator. - Deep understanding of Azure DevOps permission models and security best practices. - Experience with Service Connections, integrations, and troubleshooting. - Strong knowledge of extension management and governance. - Expertise in branch policies, repository governance, and compliance. - Experience with GitHub Advanced Security features and alert management. - Proficiency in PowerShell scripting and REST API consumption. - Experience with user management in both Azure DevOps and GitHub. - Excellent communication and stakeholder management skills. Preferred Qualifications - Azure DevOps Administrator certification (AZ-400 or equivalent). - Experience in regulated or enterprise environments. - Familiarity with compliance frameworks (e.g., SOC2, ISO 27001).

• Design and build reusable platform solutions • Spearhead the evolution of our Packer-driven VM image pipelines • Lead application migrations into GCP • Expand our GitOps practices by managing ArgoCD implementations • Partner with SRE and engineering teams to translate their infrastructure needs • Architect solutions that eliminate technical debt • Mentor and pair-program with junior team members

Description Our Engineering and Emerging Technologies (EET) team works side by side with customers to articulate a vision for success, and then make it happen. We know success doesn't happen by accident. It takes the right team of people, working together on the right solutions for the customer. We are looking for a Senior DevOps Engineer who will be a key driver to make this happen. In this position, you will be part of the team building best in class enterprise data analytics platform. Learn and grow using Azure Infrastructure, DevSecOps, Databricks, SAFe, incremental delivery philosophy with highly supportive peers constantly sharing subject matter expertise. We’re looking for an engineer that loves working the latest technologies and embraces a growth mindset. Responsibilities: - Implement best in class cloud-based solutions in Azure using infrastructure as code (Terraform) - Deploy, setup, and run infrastructure configurations for various Azure services - Manage and optimize Databricks clusters, ensuring high availability, performance, and security - Architect and implement scalable, reliable, and secure platform solutions - Manage Kubernetes clusters including deployment pipelines, tuning, and troubleshooting - Write Python based APIs and design relational data models - Engage with technical stakeholders including but not limited to application development, networking, infrastructure, information security, risk, enterprise identity and access management, and security operations - Enable and optimize the automation of application and infrastructure environments - Be part of a team where you collaborate to build cloud infrastructure, with an understanding of Kubernetes, Containers and serverless functions - Develop, maintain and improve continuous integration/continuous delivery (CI/CD) pipelines for delivering features, fixes and system updates in development, integration and production environments. - Set up, integrate, and maintain a scalable, stable set of CI/CD tools to support development, testing, and security scanning. - Implement application metrics collection and log aggregation to provide continuous monitoring capabilities, track all aspects of the system, infrastructure, performance, application errors and roll up metrics. - Analyze functional and non-functional business requirements, translate them into technical operational requirements, and propose CI/CD pipelines with tools and plugins. - Making a big impact as part of a small team that’s pushing boundaries What you must bring: - 3+ years of experience with Kubernetes and containers - 3+ years of experience with Python API development and relational database modeling - 3+ years of experience in setting up CI/CD Pipelines with integration with open-source plugins. - Proficiency in Databricks administration, including cluster management, performance tuning, and security - 3+ years of experience in DevOps/Agile/Scrum environments and development, sAFE Framework a plus. - 3+ years of experience with monitoring tools like Application Insights, Prometheus, or Datadog - 3+ years of experience with open technologies and related Infrastructure as Code (IaC) tools, JIRA, including Docker, Kubernetes, GitHub, Git and others. - 3+ years of strong hands-on experience with configuration management, cloud orchestration and automation tools with Azure environments. - 3+ years’ experience with provisioning and managing infrastructure as well as applications in Azure cloud environments. - 2+ years of experience with identifying and implementing automation for Continuous Integration/Continuous Deployment. - 2+ years’ experience writing infrastructure as code using Terraform - Candidate must be U.S. Citizen - Candidate must be able to obtain and maintain a Public Trust - Candidate must reside in the US, be authorized to work in the US, and work must be performed in the US Preferred Qualifications - Bachelor’s degree in Computer Science, Information Systems, Engineering or other related scientific or technical discipline Working at ICF ICF is a global advisory and technology services provider, but we’re not your typical consultants. We combine unmatched expertise with cutting-edge technology to help clients solve their most complex challenges, navigate change, and shape the future. We can only solve the world's toughest challenges by building a workplace that allows everyone to thrive. We are an equal opportunity employer. Together, our employees are empowered to share their expertise and collaborate with others to achieve personal and professional goals. For more information, please read our EEO policy. We will consider for employment qualified applicants with arrest and conviction records. Reasonable Accommodations are available, including, but not limited to, for disabled veterans, individuals with disabilities, and individuals with sincerely held religious beliefs, in all phases of the application and employment process. To request an accommodation, please email Candidateaccommodation@icf.com and we will be happy to assist. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.  Read more about workplace discrimination rights or our benefit offerings which are included in the Transparency in (Benefits) Coverage Act. Candidate AI Usage Policy At ICF, we are committed to ensuring a fair interview process for all candidates based on their own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) tools to generate or assist with responses during interviews (whether in-person or virtual) is not permitted. This policy is in place to maintain the integrity and authenticity of the interview process.  However, we understand that some candidates may require accommodation that involves the use of AI. If such an accommodation is needed, candidates are instructed to contact us in advance at candidateaccommodation@icf.com. We are dedicated to providing the necessary support to ensure that all candidates have an equal opportunity to succeed.   Pay Range - There are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, geographic location, education and certifications as well as contract provisions regarding labor categories that are specific to the position. The pay range for this position based on full-time employment is: $108,476.00 - $184,409.00 Nationwide Remote Office (US99)

• System reliability and availability: Architect, design, and implement strategies to ensure the high availability, reliability, and fault tolerance of our infrastructure and applications. • Incident management: Lead incident response efforts, identify root causes, and implement preventative measures to minimize future incidents. • Performance optimization: Identify performance bottlenecks, conduct performance analysis, and optimize system and application performance. • Automation and tooling: Drive automation initiatives, develop and maintain tools, scripts, and frameworks to streamline deployment, monitoring, and troubleshooting processes. • Generate regular reports on system reliability, uptime, and performance metrics to provide insights and visibility to stakeholders. • Collaborate with cross-functional teams to define key performance indicators (KPIs) and develop reporting frameworks to track and monitor system health and operational efficiency. • Prepare executive-level reports summarizing incidents, their resolutions, and recommendations for improvements. • Present findings, trends, and recommendations to management and stakeholders, providing actionable insights to drive decision-making processes.