Responsibilities Job Summary The Principal Cloud Development Operations Engineer (SDLC & CI/CD Controls) defines and leads DeepHealth’s enterprise DevSecOps strategy, serving as the organizational authority on pipeline security and secure software delivery. The role drives the design, governance, and continuous improvement of automated security controls across all CI/CD pipelines and developer workflows—ensuring security is built in from design through production while enabling delivery that is fast, measurable, and audit-ready at scale. Essential Duties and Responsibilities - Define and own the enterprise DevSecOps toolchain strategy; architect standardized pipeline security frameworks—covering SAST, SCA, secrets scanning, IaC scanning, and container scanning—adopted across all engineering teams. - Establish and govern enterprise release security standards and gating policies across the software delivery organization; lead exception governance and risk acceptance frameworks at the program level. - Drive organization-wide adoption of secure development standards; influence engineering leadership on secure-by-default practices and set measurable risk reduction goals tied to business objectives. CI/CD Pipeline Hardening & Automation - Architect and lead the development of enterprise-grade automation frameworks for pipeline security checks, artifact integrity, pipeline hygiene, and audit evidence generation; define reusable standards adopted across the engineering organization. - Define and enforce secrets management standards and credential exposure reduction strategies across the entire build and deployment ecosystem; partner with platform leadership to drive enterprise-wide adoption. - Establish tooling performance standards and quality criteria for security controls across all pipelines; lead continuous improvement of the security toolchain to optimize the balance between risk coverage and developer velocity. Vulnerability Management Workflow (Engineering-Usable) - Define and own the enterprise vulnerability risk management framework; lead cross-functional prioritization of findings with product, engineering, and compliance stakeholders, driving systemic remediation strategies. - Establish and own vulnerability SLA standards and exception governance policies; provide executive-level reporting on risk posture, aging trends, and program-wide effectiveness to senior leadership. Security Standards, Threat Modeling & Enablement - Lead and advance DeepHealth’s threat modeling methodology; define organizational standards for security risk assessment and translate complex threat landscapes into strategic engineering priorities. - Establish and lead the organization’s security champions program; define the DevSecOps maturity roadmap and drive measurable, sustained improvement in security culture across all engineering teams. PLEASE NOTE: This is not an exhaustive list of all duties, responsibilities and requirements of the position described above. Other functions may be assigned, and management retains the right to add or change duties at any time. Minimum Qualifications, Education and Experience - Bachelor’s degree in engineering or related field or equivalent experience required. - 12+ years in DevOps, platform engineering, application security, or software engineering with hands-on CI/CD responsibility required. - Demonstrated record of designing and leading enterprise DevSecOps programs, including toolchain strategy, pipeline security architecture, and cross-organizational adoption at scale. - Exceptional communication and influence skills; demonstrated ability to drive strategic alignment on DevSecOps programs across engineering, product, and executive stakeholders. Technical Skill Set (Required) CI/CD & Engineering Systems (Hands-On) - Deep expertise in CI/CD platforms (GitHub Actions, GitLab CI/CD, Jenkins, Azure DevOps); able to architect multi-platform pipeline strategies and evaluate emerging tooling at an organizational level. - Expertise in designing and governing enterprise-scale pipeline policy frameworks, release controls, and branch protection standards; defines organizational standards adopted across teams. Scripting / Automation - Advanced proficiency in Python, Bash, PowerShell, or equivalent; designs automation architectures and reusable frameworks adopted across the engineering organization. - Expert-level API integration capability; architects toolchain integrations and metrics platforms to support program-wide reporting and continuous compliance evidence generation. Application Security Fundamentals - Expert knowledge of application security risks, attack vectors, and secure development patterns; contributes to and influences internal security standards and industry frameworks (OWASP, NIST, CIS). IaC / Container Awareness - Deep expertise in IaC and container security architecture (Terraform, CloudFormation, Bicep; Docker, Kubernetes); defines organizational standards for supply chain integrity, image scanning, and runtime security controls. Preferred Qualifications - Demonstrated program leadership in regulated environments (PHI/PII); authored or significantly contributed to enterprise HIPAA, SOC2, or ISO 27001 compliance programs with direct audit and evidence ownership. - Expert-level knowledge across the DevSecOps/AppSec toolchain (Semgrep, SonarQube, Snyk, Trivy, Prisma/Defender); experience leading enterprise-scale tooling evaluation, selection, and onboarding programs. - Advanced security certifications strongly preferred (CISSP, CSSLP, AWS Security Specialty, or equivalent); thought leadership through published work, conference presentations, or open-source contributions is a strong differentiator. Quality Standards - Communicates, cooperates, and consistently functions professionally and harmoniously with all levels of supervision, co-workers, visitors, and vendors. - Demonstrates initiative, personal awareness, professionalism and integrity, and exercises confidentiality in all areas of performance. - Follows all local, regional and country laws concerning employment. - Follows all DeepHealth policies and procedures. - Follows data privacy, compliance, safety and confidentiality standards at all times. - Practices universal safety precautions. - Promotes good public relations on the phone and in person. - Adapts and is willing to learn new tasks, methods, and systems. - Reports to work regularly as scheduled; consistently punctual with respect to working hours, meal and rest breaks, and maintains satisfactory personal attendance in accordance with DeepHealth guidelines. - Completes job responsibilities in a quality and timely manner. Physical Demands This position often requires sitting, standing, walking, bending, twisting, reaching with hands and arms, using hands and fingers, handling, or feeling, speaking, listening, and high-level cognitive thinking. Also, must be able to lift up to 10 pounds occasionally. Travel This position requires domestic / international travel up to 10%. Working Environment Remote Salary: $200,000 - $230,000

• Design, deploy, and manage secure, scalable AWS environments using Terraform and Infrastructure as Code (IaC) best practices. • Architect highly available, multi-tenant cloud systems with a focus on resilience, disaster recovery, and performance optimization. • Manage and optimize container orchestration using Amazon EKS/Kubernetes for reliable application deployment and scaling. • Implement and govern multi-account AWS environments with AWS Control Tower, automating provisioning, compliance, and security policies. • Build, maintain, and evolve robust CI/CD pipelines for automated testing, building, and deployment. • Lead network security initiatives, including firewall configuration, Intrusion Detection and Prevention (IDS/IPS), and strict IAM policy enforcement. • Own and manage SOC 2 compliance and other relevant regulatory frameworks, including audits and documentation. • Mentor and lead a diverse, distributed DevOps team; foster collaboration and continuous improvement. • Serve as the key liaison between development, security, and operations teams to align priorities and ensure smooth delivery.

Role Description We are looking for a highly skilled Senior DevOps Engineer to lead the design, implementation, and maintenance of the Build Infrastructure. This role is essential to ensuring and building secure, scalable, and automated environments for application development and deployment across on-premises infrastructures. The ideal candidate will have deep expertise in Terraform, Ansible, Groovy, Kubernetes, OpenShift, CI/CD automation/Jenkins, and VM and containers orchestration, with strong communication skills and fluency in English. You will collaborate closely with engineering teams to enhance automation workflows, improve deployment reliability, and foster a DevOps culture focused on scalability, observability, and operational excellence. Responsibilities and Duties - Build Infrastructure Ownership – Design and maintain scalable build systems supporting CI/CD pipelines and automated deployments; - Infrastructure as Code (IaC) – Automate provisioning and configuration using Terraform, Ansible, and related tools; - CI/CD Pipeline Development – Create and manage pipelines using Jenkins, Groovy, and ArgoCD to support continuous integration and delivery; - Containerization & Orchestration – Deploy and manage applications using Docker, Kubernetes, and OpenShift; - Monitoring & Observability – Implement monitoring and alerting solutions to ensure system health and performance; - Security & Compliance – Apply best practices for infrastructure security, access control, and auditability; - Collaboration & Support – Work closely with development and operations teams to troubleshoot issues and optimize workflows; - Documentation & Standards – Maintain clear documentation and enforce infrastructure standards across environments. Qualifications - Proven experience in DevOps or Infrastructure Engineering roles; - Strong proficiency in Terraform, Ansible, and Groovy scripting; - Hands-on experience with CI/CD tools such as Jenkins; - Deep understanding of Kubernetes, OpenShift, and container orchestration; - Experience with VMs, containers, and hybrid cloud environments; - Proficiency in Python for scripting and automation; - Solid knowledge of networking, security policies, and access management; - Strong problem-solving skills in distributed systems and production environments. Requirements - Experience with Morpheus and ArgoCD. Company Description Encora is the preferred digital engineering and modernization partner of some of the world’s leading enterprises and digital native companies. With over 9,000 experts in 47+ offices and innovation labs worldwide, Encora’s technology practices include Product Engineering & Development, Cloud Services, Quality Engineering, DevSecOps, Data & Analytics, Digital Experience, Cybersecurity, and AI & LLM Engineering. At Encora, we hire professionals based solely on their skills and qualifications, and do not discriminate based on age, disability, religion, gender, sexual orientation, socioeconomic status, or nationality.

Build your best future with the Johnson Controls team As a global leader in smart, healthy and sustainable buildings, our mission is to reimagine the performance of buildings to serve people, places and the planet. Join a winning team that enables you to build your best future! Our teams are uniquely positioned to support a multitude of industries across the globe. You will have the opportunity to develop yourself through meaningful work projects and learning opportunities. We strive to provide our employees with an experience, focused on supporting their physical, financial, and emotional wellbeing. Become a member of the Johnson Controls family and thrive in an empowering company culture where your voice and ideas will be heard – your next great opportunity is just a few clicks away! What we offer: - Competitive salary - Paid vacation/holidays/sick time - Comprehensive benefits package - On the job/cross training opportunities - Encouraging and collaborative team environment - Dedication to safety through our Zero Harm policy What you will do: We are looking for a customer-oriented IT Developer-Operations Engineer to be part of the IT team to coordinate, develop and support active enterprise applications and legacy environments, identifying requirements to US locations as well as some localization requirements at the region level. This role overall will coordinate, develop, monitor, and stabilize the programming service requests and issues for the enterprise legacy applications in the US region. The IT Developer-Operations Engineer will own the end-to-end support process, which includes the integrations with other local applications (on a country level), manage the JCI incident management system of record, manage the escalation list of major incidents, track operational metrics and provide application health monitoring. How you will do it: - Manage day to day operations across data center, network, server, storage, database, and applications - Work with IT business leaders, IT BA, Delivery Team and local vendors to handle application-related incidents (failures and faults) and focus on bringing back the services to normal as quick as possible - Monitor an organization’s servers, networks, and computer systems for irregularities and performance issues - Assess system data, error logs, and user reports to determine areas for improvement, repair, or upgrade - Facilitate the incident resolution cadences between JCI IT teams, vendor partners and other parties as needed and Own co-ordination and update communications on incidents - Drive discussions ensuring providing clarifications, generating of specific reports which cannot be generated from front end upon business request - Manage requests and set appropriate support expectations with IT business leads - Provide root cause analysis documentation and present JCI per JCI 8D policies - Engage with Application Vendor for Support for product related issues - Analyze the past incidents and look for pattern of occurrence and conduct Root Cause Analysis - Publish comprehensive operational reports on a daily / weekly / monthly basis per JCI reporting needs - Direct the activities of IT both to directly support end users and to assist with IT department upgrades and directives Develop IT policies and procedures to ensure that enterprise applications operate effectively - Develop guides for business users and IT (e.g., FAQs, employee handbooks) - Provide direct user support by handling tech hut or service desk escalations, when needed - Partner with Cloud Architect to create Cloud Operations roadmap - Report to senior leadership on business, operational, and client satisfaction metrics with regards to IT Services - For all solutions with an identified decommission target, create path/plan to sunset, and ensure Operations teams provide/keep the lights on support - Hold service delivery teams accountable for carrying out required processes and providing great customer service - Ensure that processes are efficient and cost effective by reducing costs without affecting the overall customer experience (e.g., reduce paperwork from administrative tasks, remove unnecessary steps) - Manage and track business unit Service Level Agreements (SLAs); negotiate appropriate support - commitments, for existing products - Act independently to determine methods and procedures on new or special assignments. - May supervise the activities of others. What we look for: Required - Bachelor's degree in relevant field - Minimum of 5-10 years of IT experience, including support coordination - Working experience with Oracle and SQL technologies preferably knowledge in Lawson, Mapics and AS400 - Great and advanced English communications skills and stakeholder engagement skills - Ability to work both independently and within a team environment - Well organized, results driven and eager to handle difficult problems - Ability to facilitate communication between IT business leads and technical support teams to achieve actionable outcome and clarity on the solution and next steps. - Experience with system integrations and understand how to troubleshoot data discrepancies - Excellent problem-solving skills and ability to present analytics findings various business teams - Flexible and adaptable in regard to learning and understanding new technologies - Proven track record on working in a cross-cultural environment. NOTE: This is a virtual/remote position considering candidates who reside within Canada. Must work eastern or central time zone hours. HIRING SALARY RANGE: $99,000 - $132,000 USD (Salary to be determined by the education, experience, knowledge, skills, and abilities of the applicant, internal equity, location and alignment with market data.) The posted salary range reflects the target compensation for this role. However, we recognize that exceptional candidates may bring unique skills and experiences that exceed the typical profile. If you believe your background warrants consideration beyond the stated range, we encourage you to apply. To support an efficient and fair hiring process, we may use technology assisted tools, including artificial intelligence (AI), to help identify and evaluate candidates. All hiring decisions are ultimately made by human reviewers. This position includes a competitive benefits package. For details, please visit the About Us tab on the Johnson Controls Careers site at https://jobs.johnsoncontrols.com/about-us #LI-Remote Johnson Controls’ Canadian subsidiaries are committed to providing reasonable accommodation to applicants, candidates and employees with disabilities, in accordance with applicable human rights legislation, and in Ontario, in accordance with the Accessibility for Ontarians with Disabilities Act (“AODA”). When requested, accommodation will be provided throughout all stages of the recruitment and selection process. To request accommodation, please contact us. Any information you provide related to accommodation measures will be treated as confidential. A copy of Johnson Controls’ applicable AODA policies are available on our website at www.johnsoncontrols.com for your reference, and can be made available in accessible formats upon request.