This is a remote position. Latin America | Europe | US We are seeking a seasoned Engineering Manager who remains a technologist at heart. This is a "player-coach" role designed for a senior back-end engineer who has successfully transitioned into leadership without losing their technical edge. You should be someone who makes sound, high-stakes decisions quickly, acts as technical authority and understands that great software is built by people who truly care about the product’s mission. Key Responsibilities - Lead & Mentor: Manage a high-performing squad of engineers, fostering a culture of technical excellence and professional growth. - Architect & Execute: Leverage your deep Python expertise to guide architectural decisions and provide hands-on technical leadership on complex back-end challenges. - Product Ownership: Work closely with stakeholders to understand the "why" behind the "what," ensuring engineering efforts align with the broader business vision. What You Bring - Python Mastery: An extensive background in senior-level Python back-end engineering. You should still feel at home in a codebase and be hands-on. - Proven Leadership: Experience managing direct reports or mentoring engineering teams. - Senior Engineering Judgment: The ability to make fast, reliable decisions based on experience and technical maturity. Bonus Points For: - The Tech Stack: Hands-on experience with Django or FastAPI. - Ops Fluency: A background in Infrastructure and DevOps (AWS, CI/CD, K8s).

We are knowmad mood! Somos una compañía líder en transformación digital, en constante evolución y a la vanguardia de la tecnología. Nacimos para provocar un cambio real a través de la innovación y el desarrollo sostenible, con la misión de aportar valor a los clientes e impulsar nuestro talento. Formado por más de 3.000 personas creativas, digitales e innovadoras conectadas a un propósito y capaces de generar conexiones con personas de todo el mundo. Un equipo responsable, flexible y con alta capacidad de adaptación a las necesidades de nuestros clientes y del mercado, a la vez que proporciona valor, visión, creatividad, expertise, profesionalidad y pasión por la tecnología en cada proyecto. Los valores que marcan nuestro rumbo y nos guían hacia la excelencia son la colaboración, la innovación, el compromiso, la diversión y la confianza. ¿Qué es lo que valoramos? Experiencia de al menos 4 años como programador: - Java: 1 año idealmente, sino haber tenido experiencia previa real en algún proyecto - PL1: Deseado - Cobol: 3 años ¿Cuáles serían tus funciones? - Desarrollo, mantenimiento y optimización de aplicaciones en PL1 y COBOL. - Participación en el análisis funcional y técnico de nuevas necesidades. - Resolución de incidencias y mejoras en sistemas críticos. - Colaboración con equipos multidisciplinares. - Documentación técnica de los desarrollos realizados. Y con nosotros podrás disfrutar de: ✅Contrato Indefinido ✅ 100% REMOTO ✅Formación interna y acceso a certificaciones ♻Consulta nuestro calendario aquí: https://www.knowmadmood.com/es/talento/formacion ✅Plan de retribución flexible (seguro médico, transporte, tickets guardería, tickets restaurante) ✅Embajador de nuestra marca, a través de nuestro plan amigo ¡Recomienda a tus amigos y llévate un extra! ✅¡Eventos, meetups, techdays, charlas...y mucho más! ✅ 26 días de descanso (22 días vacaciones, 2 días de libre disposición y 24 y 31 diciembre festivos por defecto) ✅ Horario: 8.30 a 18h ( flexible) L-J y V 8 a 15h e Intensiva de Verano Julio y Agosto de 8 a 15h Para estar al corriente de nuestras novedades síguenos aquí -> knowmad mood En knowmad mood nos comprometemos con la igualdad de oportunidades y el respeto a la diversidad. Aplicamos nuestro Plan de Igualdad y el principio de no discriminación en todos nuestros procesos de selección.

Role Description As a Python Platform / Backend Engineer at Gainwell, you can contribute your skills as we harness the power of technology to help our clients improve the health and well-being of the members they serve — a community’s most vulnerable. This role is strictly involved in the development of the product and does not involve access to Protected Health Information (PHI) & Personally Identifiable Information (PII) or any secured/confidential client data. - Design, build, and maintain Python-based backend services and APIs for deployment automation and platform workflows. - Contribute to AWS-based platform automation and infrastructure support using services such as EC2, Lambda, S3, IAM, CloudWatch, ECS/Fargate, API Gateway, and related tooling. - Build automation around deployment flows, execution planning, state tracking, configuration-driven workflows, and repository operations. - Work with Infrastructure as Code using Terraform for provisioning, environment updates, and repeatable platform workflows. - Support CI/CD pipelines, GitHub/Git-based automation, pull request workflows, and release/deployment processes. - Develop REST APIs and orchestration services using FastAPI or similar Python frameworks. - Integrate GenAI capabilities where relevant, including LLM APIs, prompt-based workflows, prompt engineering, and automation use cases. - Collaborate with DevOps engineers and platform stakeholders to improve reliability, scalability, and operational efficiency. - Improve logging, observability, error handling, testing, and supportability across backend services. - Participate in code reviews, design discussions, troubleshooting, and continuous improvement of the platform. Qualifications - 3+ years of professional experience in software engineering with strong Python development skills. - Working knowledge of DevOps practices including CI/CD, deployment automation, environment management, and monitoring. - Experience with AWS cloud services and general cloud-native application development concepts. - Hands-on experience building backend applications, services, or APIs using FastAPI, Flask, Django, or similar frameworks. - Good understanding of software design, modular architecture, and backend engineering best practices. - Hands-on exposure to Infrastructure as Code, preferably Terraform. - Familiarity with Git, GitHub, pull request workflows, and repository automation. - Experience writing automated tests using pytest or similar frameworks. - Exposure to Generative AI concepts, LLM-based applications, or AI-assisted workflow development. - Familiarity with prompt engineering concepts and experience designing or refining prompts for application workflows. - Strong debugging, problem-solving, and communication skills. Preferred Qualifications - Experience building internal platforms, developer tools, automation products, or control-plane style backend systems. - Hands-on experience integrating GenAI services or LLM APIs such as OpenAI, Azure OpenAI, AWS Bedrock, or similar platforms. - Experience with prompt engineering, structured output generation, evaluation workflows, or agentic/automation use cases. - Prior GenAI application development experience, including integrating LLMs into backend products or workflow automation. - Experience with Docker, ECS/Fargate, or containerized workloads. - Familiarity with Pydantic, schema validation, JSON-based configuration, and contract-driven API development. - Experience with PostgreSQL, SQLite, DynamoDB, or similar persistence layers. - Familiarity with observability and operational tooling such as CloudWatch, logs, metrics, tracing, and alerting. - Exposure to healthcare, regulated environments, or enterprise platform engineering. What you should expect in this role - A developer-first DevOps engineer who can build solid backend systems and also operate effectively in cloud and automation-heavy environments. - Someone comfortable moving between application logic, platform services, and infrastructure-connected workflows. - An engineer with interest in GenAI and prompt-based automation, even if GenAI has not been the primary focus of every past role. - A practical problem solver who can convert manual processes into scalable and maintainable platform capabilities. - Remote environment.

Engineer/Senior Engineer, Firewall Location: TerraForm Power Remote Operation Center, Albany NY Employment Type: Full-time Travel: Ability to travel to remote sites (10–20%) About Us TerraForm Power (“TERP”), a platform company of Brookfield, attracts high-performing individuals who are driven to make an impact in a fast-paced and collaborative environment. We offer unparalleled opportunities to lead and manage one of the largest renewable energy businesses with decades of history, while contributing to the global need for sustainable energy. The company is committed to employee development, encouraging curiosity, ownership, and continuous learning. You’ll be empowered to take initiative, contribute ideas, and grow your career within a supportive and ambitious organization. This position will be based in remote. Job Summary This is an Operational Technology (OT) role embedded in the TerraForm Power Remote Operations Centre, responsible for designing, implementing, and maintaining secure network perimeters for wind, solar, and battery storage operations with a focus on NERC CIP compliant architecture. The Firewall Engineer will work in close partnership with the TERP Cybersecurity Manager, Compliance and Operations Centre staff to ensure robust, compliant, and resilient OT network security across all sites and control centers. Responsibilities Architecture, Design & Implementation - Design and implement OT network security controls, such as perimeter firewalls, internal segmentation, site‑to‑site and remote‑access VPNs, and WAFs. - Build secure network solutions that align with system architecture for wind, solar, and BESS facilities, EMS/SCADA, and the system control centers. - Define network security zones and conduits for OT, corporate IT, and cloud environments; enforce least privilege and micro‑segmentation. - Engineer solutions using Cisco (ASA/Firepower/FTD) and Check Point (CCSA/CCSE) platforms; integrate with management consoles and policy orchestration tools. - Implement secure remote access for operators, vendors, and field technicians using MFA, bastion/Jump hosts, and role‑based access. Operations, Monitoring & Incident Response - Administer firewall policies, objects, NAT, routing (OSPF/BGP), and HA/cluster configurations; manage rule lifecycle and clean‑up. - Maintain WAF protections (e.g., F5, Fortinet, Check Point, or cloud WAF) including rule tuning, bot mitigation, and API security. - Operate and improve monitoring and control tools (SIEM/SOAR, NetFlow, packet capture, IDS/IPS); build dashboards and alerts for NERC systems. - Conduct log analysis, threat hunting, and participate in incident triage and response; provide on‑call support for critical events. - Perform regular firewall health checks, performance tuning, firmware/OS upgrades, and vulnerability remediation. - Support occasional after‑hours maintenance windows on an as needed basis. Compliance & Change Management (NERC Focus) - Implement and maintain controls aligned to NERC CIP standards applicable to Low Impact sites and Medium Impact control centers (e.g., CIP‑003, CIP‑005, CIP‑007, CIP‑008, CIP‑009, CIP‑010, CIP‑011, CIP‑013). - Serve as the technical owner for firewall‑related CIP controls (for example CIP‑005, CIP‑007, CIP‑010), including configuration baselines, access controls, logging, and evidence collection. - Establish and enforce configuration baselines, access controls, evidence collection, and audit‑ready documentation. - Run structured change management programs for firewall and WAF policies, including risk assessment, testing, approvals, and post‑implementation review. - Support audits, self‑assessments, and impact ratings; assist with personnel risk assessment and vendor risk management where applicable. - Collaborate with OT, IT, Compliance, Engineering, and Plant Operations to ensure controls meet operational needs without compromising reliability. Collaborative Responsibilities - Work in close partnership with the TERP Cybersecurity Manager to align firewall, VPN, and WAF controls with OT/IT cybersecurity strategy, incident response protocols, and compliance requirements. - Participate in joint incident response, risk assessments, and continuous improvement initiatives with the Cybersecurity Manager and Operations Centre leadership. - Coordinate with Operations Centre, plant operators, and engineering teams to ensure security controls support operational reliability and compliance. Technology Evaluation & Continuous Improvement - Evaluate new firewall, WAF, VPN, and OT security technologies; lead POCs and make data‑driven recommendations. - Identify opportunities to enhance resilience (segmentation, Zero Trust, SD‑WAN security, secure cloud connectivity), and automate repeatable tasks (e.g., policy linting, backup/restore, compliance evidence collection). OT-Specific Duties - Manage vendor and contractor access for maintenance and commissioning, ensuring robust controls for temporary access and logging. - Design solutions that address site-specific challenges, including limited bandwidth, remote access constraints, and environmental factors. - Support operational resilience by coordinating change windows with grid operations and implementing failsafe configurations to avoid plant outages. Required Qualifications Engineer - 5+ years of hands‑on experience administering enterprise firewalls and VPNs (Cisco ASA/Firepower/FTD; Check Point). - Working knowledge of WAF technologies and web security (OWASP Top 10, TLS, mTLS, API security). - Strong command of TCP/IP, routing (OSPF/BGP), NAT, ACLs, IPS/IDS, and packet analysis. - Experience with SIEM/log management (e.g., Splunk, QRadar, LogRhythm), network monitoring (e.g., SolarWinds), and configuration management. - Familiarity with NERC CIP concepts and control implementations for Low and/or Medium Impact environments, or equivalent experience in other regulated OT/ICS environments (for example IEC 62443).. - Solid documentation skills and experience operating within formal change management processes. - Clear communicator able to translate complex security topics for plant operations, engineering, compliance, and leadership. - Strong prioritization and execution in high‑availability environments; calm under pressure during incidents. - Collaborative and customer‑focused; builds trusted relationships with site personnel and external partners. Senior Engineer - All above, plus; - 10+ years in network security with deep expertise in Cisco and Check Point ecosystems, including clustering/HA, threat defense, and advanced policy design. - Proven leadership of firewall/WAF architecture in OT/ICS or critical infrastructure (utilities, energy, industrial). - Demonstrated experience interpreting and implementing NERC CIP requirements in Medium Impact control centers, including evidence management and audit support. - Proficiency guiding incident response and problem management for high-availability environments; ability to mentor engineers and lead complex changes. - Track record of evaluating, selecting, and integrating new technologies; experience with automation (e.g., Ansible, Python) and policy compliance tooling. Education & Certifications - Bachelor’s degree in Computer Science, Electrical/Computer Engineering, Information Security, or related field; or equivalent experience. - Relevant certifications preferred: - Cisco: CCNP Security, CCIE (Security) (plus) - Check Point: CCSA/CCSE - Others, a plus Industry‑Specific (Renewable Energy & OT/ICS) Requirements - Experience with the secure transport of with SCADA/EMS, plant DCS/RTUs/PLCs, and OT protocols (OPC, DNP3, Modbus). - Understanding of interconnections between substations, collector systems, BESS EMS, and corporate networks; secure data flows to forecasting, trading, and asset performance platforms. - Knowledge of telecom links common in renewables (leased lines, microwave, LTE/private cellular) and secure backhaul to control centers. - Awareness of site conditions (limited bandwidth, remote access constraints, environmental factors) and designing resilient, maintainable solutions. - Vendor and contractor access management for maintenance, OEM support, and commissioning activities, with strong control over temporary access and logging. - Safety and reliability mindset: change windows coordinated with grid operations, rollback plans, and fail‑safe configurations to avoid plant outages. Compensation: $120,000-$140,000 USD, bonus eligible A note to Recruiting Agencies, TerraForm Power Human Resources team does not accept unsolicited resumes from third party recruiters, staffing firms, or related agencies. The Human Resources team coordinates all recruiting and hiring at our company. We do not accept resumes from third-party recruiters unless authorized by the Human Resources team and if a signed agreement is in place. Any unsolicited resumes will be considered property of TerraForm Power and we are not responsible for any related fees. All communication related to recruiting partnerships should ONLY be directed to the Human Resources team.