Senior DevOps Engineer (hybrid)

Posted 2 Hours Ago
Hiring Remotely in York, PA, USA
Remote or Hybrid
120K-155K Annually
Senior level
Other • Security
The Role
Owns DevOps and platform engineering for cloud, hybrid, plant, and edge environments. Responsibilities include Azure infrastructure as code, Azure DevOps CI/CD, release governance, Kubernetes and container operations, networking, identity, observability, security, incident response, and reliability. The role also builds MLOps capabilities for Azure Machine Learning and Azure OpenAI, including model deployment, evaluation gates, inference infrastructure, monitoring, and AI cost management. The engineer will improve developer self-service, establish platform standards, and mentor team members.
Summary Generated by Built In

About Johnson Controls 

Johnson Controls, a global leader in thermal management, mission-critical building systems, energy efficiency, and decarbonization, helps customers use energy more productively, reduce carbon emissions, and operate with the precision and resilience required in rapidly expanding industries such as data centers, healthcare, pharmaceuticals, advanced manufacturing, and higher education.  

For more than 140 years, Johnson Controls has delivered performance where it really matters. Backed by advanced technology, lifecycle services and an industry-leading field organization, we elevate customer performance, turn goals into real-world results and help move society forward.  

Visit johnsoncontrols.com for more information and follow @Johnsoncontrols on social platforms.  

What you will do

Johnson Controls' software touches revenue and production directly. The sales configurator is how orders get quoted, the engineering BOM release is how they get built, and the shop floor systems are how units move down the line. If a deployment goes wrong at the wrong hour, a plant stops. On top of that, we are standing up AI capabilities — document extraction from customer specifications, BOM anomaly detection, labor estimation, assistive tools for sales and application engineers — which brings a new set of infrastructure, cost, and governance problems. 

As a Senior DevOps Engineer, you will maintain the platform underneath all of it. Pipelines, environments, infrastructure as code, observability, security posture, and the deployment paths that reach both cloud services and servers sitting inside segmented plant networks. You will also help build the AI platform: the training and inference infrastructure, the evaluation gates in CI, the endpoint and quota management, and the cost controls that keep AI spend visible before it becomes a finance conversation. 

Join our team in York, Pennsylvania, where you'll have the opportunity to make an immediate impact. Candidates should be located within commuting distance of the facility or be open to relocating, with relocation assistance available. For the right candidate, we are also open to considering a fully remote work arrangement.

How you will do it  

CI/CD and release engineering 

  • Azure DevOps as a platform — organization and project structure, YAML pipelines, repositories and branch policies, artifact feeds, service connections, environments, and self-hosted agent pools including agents inside plant and DMZ networks. 

  • Build deployment paths for the systems we actually run. Microservices are the easy case; you will also need controlled, repeatable release processes for integration artifacts, API layers, and configuration for COTS platforms ([CPQ], [PLM], [ERP], [MES]) that do not deploy like modern applications. 

  • Design approval gates, change records, and audit evidence appropriate to systems that control what gets manufactured and shipped, without turning every deployment into a two-week ceremony. 

  • Plan and execute deployments around production reality — maintenance windows, shift schedules, quarter-end order volume, and the fact that the factory does not stop for a release. 

Azure platform 

  • Manage infrastructure as code across all environments. Manual portal changes are a defect, not a workflow. 

  • Manage the estate: Functions, Azure SQL and storage, Service Bus and Event Hubs, API Management, and the data platform 

  • Networking and identity — VNets, private endpoints, hub-and-spoke topology, [ExpressRoute / site-to-site VPN] connectivity to plants, Entra ID, managed identities, Key Vault, and RBAC. 

  • Manage hybrid and edge footprint, including [Azure Arc] for on-premise servers and [IoT Edge / IoT Hub] where shop floor systems require local resilience and cannot depend on WAN availability. 

  • Own environment strategy and lifecycle: dev, test, UAT, and production; environment refresh and provisioning; and test data management including masking of customer, pricing, and design data. 

Build the AI platform 

  • Stand up and operate [Azure Machine Learning / Azure AI Foundry] — workspaces, compute and GPU capacity, model registry, and managed inference endpoints. 

  • Manage Azure OpenAI and model provider access: provisioning, quota and throughput planning, private networking, content filtering configuration, and key and identity management. 

  • Extend CI/CD to AI workloads — versioning for models, prompts, and datasets; automated evaluation as a pipeline gate so a regression blocks a release the same way a failing unit test does; and reliable rollback. 

  • Build observability for AI in production: latency, error and abstention rates, token consumption, drift signals, and per-feature cost attribution. 

  • Deploy inference where it needs to run, including on-premise or edge at plants where latency, connectivity, or data policy rules out a cloud round trip. 

  • Own AI cost management. Make spend attributable and forecastable, and raise the trade-offs early rather than at invoice time. 

Reliability and security 

  • Build monitoring and alerting that reflects business impact rather than resource metrics — a stalled BOM release matters more than CPU utilization. Own SLOs, dashboards, and incident response for production systems. 

  • Drive incident management and blameless postmortems, and convert findings into platform changes. 

  • Own security posture in the pipeline and the estate: secrets management, vulnerability and dependency scanning, container image hygiene, SBOM generation, and patch management coordination — including OT environments where patching windows are constrained. 

  • Partner with IT, OT, and information security on segmentation, access control, and compliance requirements for plant-connected systems. 

Improve how the team ships 

  • Reduce friction and toil deliberately. Self-service environments, golden pipeline templates, and good documentation are deliverables, not side effects. 

  • Mentor engineers on deployment, observability, and operational ownership of what they build. 

 

What you will do

Required 

  • 5+ years in DevOps, platform, SRE, or cloud infrastructure engineering. 

  • Hands-on Azure experience across compute, networking, identity, data services, and monitoring. 

  • Azure DevOps expertise — YAML pipelines, self-hosted agents, environments and approvals, artifact management, and repository governance. Equivalent depth in GitHub Actions or GitLab CI with demonstrated ability to pick up Azure DevOps is acceptable. 

  • Containerization and orchestration in production (Docker and Kubernetes). 

  • Scripting and automation in Python and PowerShell or Bash. 

  • Experience deploying into hybrid environments, not cloud-only. Firewalled targets, private connectivity, and on-premise servers should be familiar territory. 

  • Demonstrated ownership of production systems — on-call, incident response, and measurable reliability improvement. 

Preferred 

  • MLOps experience: Azure Machine Learning, model registries and inference endpoints, GPU capacity management, or LLMOps including prompt and evaluation versioning and token cost management. 

  • Experience supporting enterprise business systems — ERP, PLM, CPQ, MES, or integration middleware — and realistic expectations about what CI/CD looks like for commercial platforms. 

  • Manufacturing or industrial environment experience, including OT network segmentation and plant cybersecurity practices. 

  • Data platform operations: [Data Factory / Fabric], warehouse or lakehouse infrastructure, orchestration and pipeline reliability. 

  • FinOps practice — cloud cost visibility, allocation, and optimization. 

  • Azure certifications (AZ-400, AZ-104/305, or AI-102) and Kubernetes certifications (CKA). 

  • Experience being an early platform hire and establishing standards rather than inheriting them. 

  • Production infrastructure-as-code experience with [Terraform / Bicep], including managing multiple environments and state responsibly. 

HIRING SALARY RANGE: $120,000 - 155,000 (Salary to be determined by the education, experience, knowledge, skills, and abilities of the applicant, internal equity, and alignment with market data.) This role offers a competitive Bonus plan that will take into account individual, group, and corporate performance. This position includes a competitive benefits package. The posted salary range reflects the target compensation for this role. However, we recognize that exceptional candidates may bring unique skills and experiences that exceed the typical profile. If you believe your background warrants consideration beyond the stated range, we encourage you to apply. To support an efficient and fair hiring process, we may use technology assisted tools, including artificial intelligence (AI), to help identify and evaluate candidates. All hiring decisions are ultimately made by human reviewers. For details, please visit the About Us tab on the Johnson Controls Careers site at https://jobs.johnsoncontrols.com/about-us

#LI-HYBRID

#LI-REMOTE

Johnson Controls International plc. is an equal employment opportunity and affirmative action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, protected veteran status, genetic information, sexual orientation, gender identity, status as a qualified individual with a disability or any other characteristic protected by law. To view more information about your equal opportunity and non-discrimination rights as a candidate, visit EEO is the Law. If you are an individual with a disability and you require an accommodation during the application process, please visit here.

Skills Required

  • 5+ years of experience in DevOps, platform, SRE, or cloud infrastructure engineering
  • Hands-on Azure experience across compute, networking, identity, data services, and monitoring
  • Azure DevOps expertise with YAML pipelines, self-hosted agents, environments and approvals, artifact management, and repository governance
  • Equivalent depth in GitHub Actions or GitLab CI, with demonstrated ability to learn Azure DevOps
  • Production containerization and orchestration experience with Docker and Kubernetes
  • Scripting and automation experience in Python and PowerShell or Bash
  • Experience deploying into hybrid environments, including firewalled targets, private connectivity, and on-premise servers
  • Ownership of production systems, including on-call responsibilities, incident response, and measurable reliability improvements
  • MLOps experience with Azure Machine Learning, model registries, inference endpoints, GPU capacity management, or LLMOps
  • Experience supporting ERP, PLM, CPQ, MES, or integration middleware systems
  • Manufacturing or industrial environment experience, including OT network segmentation and plant cybersecurity
  • Data platform operations experience with Data Factory, Fabric, warehouse, or lakehouse infrastructure
  • FinOps experience with cloud cost visibility, allocation, and optimization
  • Azure certifications such as AZ-400, AZ-104, AZ-305, or AI-102
  • Kubernetes certification such as CKA
  • Experience as an early platform hire establishing engineering standards
  • Production infrastructure-as-code experience with Terraform or Bicep, including multi-environment and state management

Johnson Controls Compensation & Benefits Highlights

The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Johnson Controls and has not been reviewed or approved by Johnson Controls.

  • Retirement Support Retirement support is positioned as a meaningful part of the package through employer 401(k) matching, repeatedly framed as a strong pillar of the overall rewards mix. The matching contribution is described with specific match levels in multiple places, reinforcing perceived value for long-term saving.
  • Leave & Time Off Breadth Time off is presented as comparatively robust, with multiple paid holiday categories, vacation time, and sick time described as generous or “amazing” in places. Paid time off breadth appears to be a consistent contributor to total rewards attractiveness beyond base pay.
  • Flexible Benefits Benefits are described as broad and customizable, spanning standard medical/dental/vision plus optional add-ons like pet insurance, identity protection, and legal support. Tuition reimbursement is repeatedly highlighted as a high-value option supporting professional development.

Johnson Controls Insights

Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: Chennai
100,000 Employees
Year Founded: 1885

What We Do

At Johnson Controls, we transform the environments where people live, work, learn and play. From optimizing building performance to improving safety and enhancing comfort, we drive the outcomes that matter most. Dedicated to protecting the environment, we deliver our promise in industries such as healthcare, education, data centers and manufacturing. With a global team of 100,000 experts in more than 150 countries and over 130 years of innovation, we are the power behind our customers’ mission. Our leading portfolio of building technology and solutions includes some of the most trusted names in the industry, such as Tyco®, York®, Metasys®, Ruskin®, Titus®, Frick®, Penn®, Sabroe®, Simplex®, Ansul® and Grinnell®.

Similar Jobs

Vannevar Logo Vannevar

Devops Engineer

Artificial Intelligence • Machine Learning • Software • Defense
Remote
USA
225 Employees

Avive Solutions Logo Avive Solutions

Senior Devops Engineer

Hardware • Healthtech • Internet of Things • Social Impact • Software • Manufacturing
Remote
USA
125 Employees

Espresso Systems Logo Espresso Systems

Devops Engineer

Blockchain • Software
Remote
USA
32 Employees

Similar Companies Hiring

Milestone Systems Thumbnail
Artificial Intelligence • Security • Software • Analytics • Big Data Analytics
Lake Oswego, OR
1500 Employees
Rosendin Thumbnail
Other • Manufacturing
San Jose, CA
6219 Employees
OmniCable Thumbnail
Other
Houston, Texas
815 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account