{"id":1974776,"url":"https://alion.io/job/credit-union-of-texas-sr-devops-engineer","title":"Sr DevOps Engineer","company":{"id":1934083,"name":"Credit Union of Texas","domain":"cutx.org","url":"https://alion.io/company/cutx","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"UltiPro","truth_index":{"grade":"A","score":90,"open_postings":5,"ghost_share":0,"stale_share":0.2,"repost_share":0,"time_to_fill_p50_days":223,"computed_at":"2026-10-29T05:49:05Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Allen, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":95000,"max_usd":180000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1808},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Azure","optional":false},{"name":"Azure AKS","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bicep","optional":false},{"name":"CI/CD","optional":false},{"name":"Configuration Management","optional":false},{"name":"Copilot","optional":false},{"name":"Cypress","optional":false},{"name":"Datadog","optional":false},{"name":"Docker","optional":false},{"name":"ESLint","optional":false},{"name":"Git","optional":false},{"name":"Gitflow","optional":false},{"name":"GitHub","optional":false},{"name":"Gitleaks","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"Invicti","optional":false},{"name":"Jest","optional":false},{"name":"JFrog Artifactory","optional":false},{"name":"JFrog Xray","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Node JS","optional":false},{"name":"npm","optional":false},{"name":"Playwright","optional":false},{"name":"PowerShell","optional":false},{"name":"Prettier","optional":false},{"name":"Snyk","optional":false},{"name":"SonarQube","optional":false},{"name":"Terraform","optional":false},{"name":"Trunk-Based Development","optional":false},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-10-06T20:08:56Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-29T07:49:48Z","board_verified":true,"closed_at":null,"days_open":22,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":22},"description":"Position Summary\nThe Senior DevOps Engineer supports Credit Union of Texas's vision to be the trusted financial partner for our members and our community by building and owning the end-to-end software development lifecycle (SDLC) on Azure DevOps. The role modernizes and standardizes the SDLC for existing applications, implements CI/CD and multi-environment (Dev, UAT, Prod) strategies, and makes the Node.js application code changes needed to support them. The role establishes secure secrets management, artifact management, static and dynamic application security testing (SAST with JFrog and DAST with Invicti), code quality and test coverage gates (SonarQube), Infrastructure as Code, automated testing, and observability practices (Datadog APM and Logs) that make releases repeatable, traceable, and audit-ready. Once the foundation is in place, the Senior DevOps Engineer contributes to Node.js development and onboards new applications onto the standardized SDLC. The role uses CUTX-approved AI tools under defined governance, with mandatory human review of any AI-assisted code or configuration before it reaches production.\nKey Responsibilities\nCI/CD, Source Control & Release Management\nDesign and implement CI/CD pipelines (YAML) in Azure DevOps for existing and new applications.\nManage Azure Repos, including branching strategy, branch policies, pull request workflows, and code review gates.\nDesign and implement multi-environment strategies (Dev, UAT, Prod) with automated promotion, including the infrastructure and application changes required to support them.\nSet up release strategies such as approvals, environment promotion, and rollback.\nImplement feature flags using Azure App Configuration to reduce release risk.\nSecurity, Secrets & Code Quality\nImplement and standardize secrets management using Azure Key Vault and Managed Identity across applications, including the Node.js code changes needed to load secrets and configuration securely at runtime.\nEstablish secure secret lifecycle practices, including rotation and access controls.\nImplement static application security testing (SAST) using JFrog Advanced Security, with critical and high findings blocking merges and releases.\nIntegrate SonarQube for code quality and unit test coverage analysis (coverage thresholds, bugs, code smells, duplication, and maintainability), with quality gates enforced on every pull request and pipeline run.\nIntegrate Invicti for dynamic application security testing (DAST) against deployed applications in Dev and UAT, with critical and high findings blocking promotion to Production.\nCoordinate triage and remediation of SAST, DAST, dependency, and secret scanning findings with development teams and Information Security, and track them to closure in Azure Boards.\nImplement dependency, vulnerability, and secret scanning (such as JFrog Xray, Snyk, GitHub Advanced Security for Azure DevOps, or Gitleaks) with results enforced in pipelines.\nEnforce code consistency standards with ESLint and Prettier in pull request checks.\nInfrastructure, Artifacts & Containers\nImplement Infrastructure as Code (Terraform, Bicep, or ARM) for repeatable environment provisioning.\nSet up and manage JFrog Artifactory for package and artifact management, including npm and Docker registries.\nContainerize applications with Docker where appropriate, and support a future move to Azure Kubernetes Service (AKS).\nTesting, Monitoring & Observability\nBuild automated testing into pipelines, including unit tests (Jest) and end-to-end tests (Playwright or Cypress).\nSet up monitoring and observability with Datadog APM and Datadog Log Management across all environments, alongside Azure Monitor and Application Insights for Azure platform metrics.\nInstrument Node.js applications with the Datadog APM tracer and structured logging, correlate traces with logs, and build dashboards, monitors, and alerts for service health, performance, and release impact.\nNode.js Development & Application Onboarding\nMake code changes in Node.js applications to support DevOps practices such as configuration management, health checks, logging, and automated tests.\nContribute to Node.js feature development and bug fixes as DevOps priorities allow.\nOnboard new applications onto the standardized SDLC process.\nGovernance, Documentation & Collaboration\nSet up Azure Boards for work tracking, with work items linked to commits, pull requests, and releases for end-to-end traceability and audit readiness.\nDocument pipelines, environments, runbooks, and processes in the Azure DevOps Wiki, and train team members on them.\nCoordinate with Application Development, IT Operations, Information Security, and Compliance to align SDLC standards with enterprise priorities and control requirements.\nPerformance Outcomes & KPIs\n\nOutcome\n\nPrimary KPI\n\nReporting Cadence\n\nTarget / Direction\n\nApplications run on a standardized, automated SDLC.\n\nSDLC Adoption Rate - percent of in-scope applications deployed through standardized Azure DevOps YAML pipelines with automated environment promotion.\n\nQuarterly\n\n▲ 100% of in-scope applications [Timeline - confirm with Hiring Manager]\n\nReleases are reliable and low-risk.\n\nChange Failure Rate - percent of production deployments that require rollback, hotfix, or incident remediation.\n\nMonthly\n\n▼ ≤ 15%\n\nIssues are recovered from quickly.\n\nMean Time to Restore (MTTR) - average time to restore service after a failed production change.\n\nMonthly\n\n▼ [Target - confirm with Hiring Manager]\n\nSecrets and credentials are managed securely.\n\nSecrets Management Compliance - percent of in-scope applications loading secrets from Azure Key Vault via Managed Identity, with zero secrets in source control.\n\nQuarterly\n\n▲ 100%\n\nCode meets quality and security standards before release.\n\nSecurity Gate Enforcement - percent of production releases that passed JFrog SAST and Xray dependency scans, Invicti DAST scans, SonarQube code quality and test coverage gates, and secret scans with no unresolved critical or high findings.\n\nMonthly\n\n▲ 100%\n\nCode changes are covered by automated tests.\n\nTest Coverage - percent of in-scope applications meeting the SonarQube unit test coverage threshold on new code.\n\nMonthly\n\n▲ ≥ 80% coverage on new code [confirm threshold with Hiring Manager]\n\nProduction applications are fully observable.\n\nObservability Coverage - percent of production applications instrumented with Datadog APM and centralized Datadog logs, with active monitors and alerts.\n\nQuarterly\n\n▲ 100%\n\nChanges are traceable and audit-ready.\n\nChange Traceability Rate - percent of production releases linked to Azure Boards work items, pull requests, and approvals.\n\nQuarterly\n\n▲ 100%\n\nAI-assisted code and configuration are reviewed before use.\n\nHuman Review Rate on AI-Assisted Changes - percent of AI-assisted code, pipeline, or IaC changes that went through documented pull request review before merge.\n\nMonthly\n\n▲ 100%\n\nQualifications\nEducation\nBachelor's degree in Computer Science, Software Engineering, Information Systems, or a related field, or equivalent practical experience. [Confirm with Hiring Manager - not specified in source posting]\nExperience\nFive (5) or more years of experience in DevOps, with a strong background in software development.\nStrong hands-on experience with Azure DevOps (Repos, Pipelines, YAML, Releases, Environments).\nSolid Node.js development experience, enough to independently read, modify, and ship production code.\nHands-on experience refactoring application code to use a secrets manager (Azure Key Vault preferred) with Managed Identity.\nExperience with the JFrog Platform (Artifactory, Xray, and Advanced Security SAST) in CI/CD workflows.\nExperience with SonarQube for code quality and test coverage quality gates in CI/CD workflows.\nExperience with dynamic application security testing (DAST) integrated into CI/CD pipelines; Invicti preferred.\nExperience building automated testing into CI/CD pipelines, including unit testing (Jest) and end-to-end testing (Playwright or Cypress).\nExperience with application security scanning tools for dependencies, vulnerabilities, and secrets (such as JFrog Xray, Snyk, GitHub Advanced Security for Azure DevOps, or Gitleaks).\nExperience with Datadog APM and Log Management, including tracer instrumentation, log pipelines, dashboards, and monitors; experience with Azure Monitor and Application Insights.\nExperience with feature flags (Azure App Configuration or similar).\nExperience with Docker and containerized application deployment.\nExperience with Azure Boards or similar work tracking tools, including linking work items to code and releases.\nProven experience introducing CI/CD and environment standardization to existing applications.\nKubernetes (AKS) experience preferred.\nExperience with container image scanning and broader DevSecOps practices preferred.\nPrior experience in financial services or another regulated industry preferred.\nLicenses, Registrations, and Certifications\nNo specific license or registration required for this role.\nMicrosoft Azure certifications (AZ-400 DevOps Engineer Expert, AZ-104 Azure Administrator) preferred.\nKnowledge & Skills\nWorking knowledge of Azure services such as App Service, Functions, AKS, virtual machines, and networking.\nExperience with Infrastructure as Code (Terraform or Bicep preferred).\nGit expertise, including branching strategies such as GitFlow or trunk-based development.\nScripting skills in PowerShell and/or Bash.\nExperience enforcing code quality standards with ESLint and Prettier.\nStrong documentation habits, including runbooks and process documentation.\nAbility to explain technical standards clearly and train team members on new processes.\nDrive to learn and adopt new technologies, techniques, and CUTX-approved AI tools.\nCore Competencies\n\nCompetency\n\nProficiency Level\n\nWhy This Matters in This Role\n\nAI Literacy\n\nIntermediate\n\nThe role uses AI-assisted code and configuration tools (Tier 2) and must recognize when AI output is wrong or insecure, apply required controls, and ensure human review before changes are merged.\n\nTechnical Excellence\n\nAdvanced\n\nThe role owns the design of pipelines, environments, and release processes that every CUTX application team will depend on.\n\nRisk Awareness\n\nAdvanced\n\nPipeline, secrets, or access-control weaknesses can expose member data or disrupt services; the role must identify, remediate, and escalate security and change risk.\n\nOperational Discipline\n\nAdvanced\n\nPipelines, infrastructure, and documentation must be repeatable, version-controlled, and audit-ready to meet change management and examination expectations.\n\nCommunication\n\nIntermediate\n\nThe role must document standards clearly, train teams, and explain trade-offs to technical and non-technical partners.\n\nCollaboration\n\nIntermediate\n\nStandardizing the SDLC requires working across development, operations, security, and compliance teams to drive adoption.\n\nCompliance Orientation\n\nIntermediate\n\nSDLC controls must support GLBA data protection, NCUA information security requirements, and TRAIGA-aligned AI governance.\n\nAI & Technology Expectations\nAI-Augmented Workflows\nThe following workflows are AI-augmented in this role. The Senior DevOps Engineer is expected to work fluently within these workflows, exercise sound judgment over AI outputs, and follow all applicable controls.\nAI-assisted code generation and refactoring for Node.js applications.\nAI-assisted authoring of pipeline YAML, Infrastructure as Code templates, and scripts.\nAI-assisted triage and remediation of SAST (JFrog), DAST (Invicti), dependency (JFrog Xray), code quality (SonarQube), and secret scan findings.\nAI-assisted log, trace, alert, and incident analysis using Datadog APM, Datadog Logs, and Azure Monitor data.\nAI-assisted drafting of runbooks, wiki documentation, and training materials.\nAI Tier and Human-in-the-Loop Responsibility\nThis role operates in AI Tier 2 for its principal AI-augmented workflows (see Appendix A). The Senior...","description_format":"text","description_chars":18406,"description_truncated":true,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Credit Unions & Cooperative Banks","Leasing, Auto & Equipment Finance"],"lifecycle":[{"event":"open","at":"2026-10-06T20:56:58Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":2,"green_card_filings_12m":0,"median_offered_wage_usd":147500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":22,"expected_fill_days":223,"reasons":["conf:2","win:early"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/credit-union-of-texas-sr-devops-engineer","json_url":"https://alion.io/job/credit-union-of-texas-sr-devops-engineer.json","meta":{"generated_at":"2026-10-29T09:22:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14241,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1934083},"rest":"https://alion.io/mcp/rest/get_company?id=1934083"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcredit-union-of-texas-sr-devops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcredit-union-of-texas-sr-devops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcredit-union-of-texas-sr-devops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/credit-union-of-texas-sr-devops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcredit-union-of-texas-sr-devops-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1974776}},{"tool":"search_jobs","arguments":{"company":"cutx.org","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1974776},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}