{"id":1488515,"url":"https://alion.io/job/origami-risk-llc-engineering-systems-engineer-azure-devops-administration-governance","title":"Engineering Systems Engineer - Azure DevOps Administration & Governance","company":{"id":7314,"name":"Origami Risk","domain":"origamirisk.com","url":"https://alion.io/company/origami-risk-llc","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"middle","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":100000,"max":122000,"currency":"USD","period":"year","gross":null,"usd_annual":122000},"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude Code","optional":false},{"name":"Cursor","optional":false},{"name":"Flyway","optional":false},{"name":"Git","optional":false},{"name":"GitHub","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"NIST 800-53","optional":false},{"name":"PowerShell","optional":false},{"name":"Rest API","optional":false},{"name":"SOC 2","optional":false},{"name":"Java","optional":true},{"name":"Platform Engineering","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-09-30T00:05:15Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-15T20:49:18Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"Overview\nThe Engineering Systems Engineer, Azure DevOps is the hands-on technical owner of Azure DevOps across the Engineering organization - the project and organization structure, boards, work item process, and access model that every engineer depends on every day, including the integration points that connect Azure DevOps to our GitHub-hosted repos (our source code lives in GitHub, not Azure Repos). Pipeline authoring and CI/CD ownership sit with the engineering teams that build them; this role owns everything else about how Azure DevOps is organized, governed, and accessed. This individual contributor owns Azure DevOps administration, governance, and continuous improvement end-to-end, and is the organization's go-to expert when Azure DevOps issues need to be diagnosed and resolved with authority.\nThis engineer is a proactive platform operator who identifies configuration drift and fragmented workflows before they become embedded patterns, closes governance gaps before they accumulate into technical debt, and automates manual administration work before it creates toil. When a team asks for a workaround, this person diagnoses the actual problem behind the request rather than bolting on a quick fix that adds to the fragmentation.\nBeyond Azure DevOps, this role also supports the broader Engineering Systems platform portfolio - including LaunchDarkly feature flag operations, Flyway database migration standards, AI-assisted development tools like Cursor and Claude Code, and other tools the team takes on as needed - working alongside teammates who own those platforms and building the working knowledge needed to contribute to cross-platform initiatives. Azure DevOps ownership is the primary responsibility in this role; the rest of the portfolio is secondary and grows with tenure, and the specific list of “other tools” is expected to change over time.\nThis engineer leverages AI throughout their own workflow - using it to accelerate Azure DevOps platform analysis, generate automation scripts, produce enablement documentation, and surface insights from platform data that would take hours to find manually.\nStarting base pay for this role is between $100,000 and $122,000. The actual base pay is dependent upon many factors, such as transferable skills, work experience, business needs, training, location, and market demands. The base pay range is subject to change and may be modified in the future. This role will be eligible for a bonus as well as competitive medical, dental, and vision benefits, wellness reimbursement, life insurance, and a 401(k) with company match. We offer vacation and sick leave benefits (under a flexible time off policy in most states).\nResponsibilities\nAzure DevOps Administration & Governance (45%)\nOwns day-to-day administration of Azure DevOps across the Engineering organization - managingorganizations, projects, teams, boards, area paths, iteration cadences, and access controls with theconsistency, precision, and configuration hygiene that a multi-team Engineering organization depends on.Pipeline authoring and CI/CD configuration are owned by the engineering teams themselves, not this role.\nTakes command of ADO governance and standardization - establishing and enforcing project structurestandards, naming conventions, board configurations, and workflow approaches that prevent thefragmentation that comes from ad hoc, admin-by-admin configuration choices.\nReviews and manages workflow configuration requests from Engineering teams - diagnosing the actualbusiness problem behind each request, identifying root causes, and proposing better solutions rather thanband-aid fixes like unnecessary fields or workaround processes.\nOwns the administrative side of the Azure DevOps ↔ GitHub integration - repository links, GitHubApps/OAuth connections, and work item linking - that connect Azure DevOps Boards to our GitHub-hosted repos, since our source code lives in GitHub rather than Azure Repos. Configuring pipeline-specificservice connections and triggers is owned by the teams that build those pipelines.\nManages Azure DevOps user provisioning, permission models, and access reviews - ensuring access isscoped to least-privilege principles, regularly audited, promptly revoked when no longer needed, anddocumented to support compliance evidence requirements.\nMonitors Azure DevOps platform health, usage patterns, adoption metrics, and configuration drift -proactively identifying workflow anomalies, over-provisioned permissions, and opportunities tostandardize before those gaps create friction or risk.\nServes as the primary escalation point for Azure DevOps configuration issues - diagnosing platform-levelincidents, working with Microsoft support when required, and resolving disruptions with the urgency that aplatform used by every engineer in the organization demands.\nLeverages AI tools to accelerate platform analysis and administration work - including AI-assistedworkflow and governance configuration audits, AI-generated access audit summaries, and LLM-assistedplatform documentation that keeps governance records current and discoverable.\nAutomation & Scripting (15%)\nContinuously identifies and eliminates manual administration toil across Azure DevOps - buildingPowerShell scripts, REST API automations, and workflow integrations that replace repetitive manual stepswith reliable, auditable automated processes.\nDevelops and maintains monitoring and alerting for Azure DevOps platform health - including permissionanomalies, configuration drift detection, and provisioning issues - so that platform degradation isdetected and resolved proactively rather than reactively.\nAutomates access review processes, provisioning workflows, and compliance documentation generation- using scripting and AI tooling to maintain audit-ready governance records without proportional manualoverhead.\nBuilds automation to enforce ADO standards - naming-convention checkers, board/process-templatevalidation scripts, and configuration-compliance automations that prevent non-standard workflows frombeing deployed without a deliberate override.\nCross-Platform Support - Other Engineering Systems Tooling (15%)\nAdministers and supports LaunchDarkly, Flyway, and Cursor/AI tooling operations - assisting withprovisioning, access controls, configuration governance, and platform health monitoring alongside theteammate(s) who own each platform.\nMaintains unified provisioning standards, least-privilege access principles, and audit-ready access recordsacross Azure DevOps, LaunchDarkly, Flyway, and AI tooling, so governance discipline doesn't stop at theADO boundary.\nMonitors integration health across administered systems - SDK evaluation errors, migration failures, andtooling provisioning issues - before they impact Engineering operations.\nBuilds cross-platform fluency over time, with the expectation of taking on deeper ownership of a secondEngineering Systems platform domain - LaunchDarkly, Flyway, GitHub, or another tool the team adds tothe portfolio - as the role matures. The specific set of “other tools” is not fixed and will shift as the team'sresponsibilities evolve.\nEngineering Standards Administration (15%)\nServes as the operational executor of the Engineering standards program - maintaining, publishing,formatting, and distributing standards documentation for coding conventions, branching strategies, pullrequest practices, code review requirements, and tooling usage as directed by the Engineering SystemsManager.\nOwns the standards repository - ensuring documentation is accurately organized, consistently formatted,discoverable through the Engineering knowledge base, and immediately updated when standards areratified or revised.\nMonitors Engineering standards adherence across teams - identifying non-compliance patterns in codereviews, board and workflow configurations, branch naming, and tooling usage, and bringing specific, data-backed observations to the Engineering Systems Manager and relevant Engineering Managers for follow-through.\nSupports standards retrospectives led by the Engineering Systems Manager - collecting adherence data,synthesizing engineering team feedback, and preparing materials that make retrospective sessionsproductive rather than anecdotal.\nEnablement & Documentation (10%)\nBuilds and maintains internal enablement resources - ADO configuration guides, workflow standardsreferences, governance how-tos, and onboarding materials - that empower Engineering teams to workwithin established standards correctly and independently, reducing the volume of repetitive supportrequests.\nMaintains accurate, current platform configuration documentation and standards repositories - ensuringgovernance requirements, workflow patterns, and access policies are clearly documented and accessibleto the Engineering organization.\nCoordinates the onboarding standards experience for new Engineers - maintaining environment setupguides, tooling provisioning checklists, and standards orientation materials that are current, complete, andeffective enough to be executed without handholding.\nTracks platform health, adoption metrics, support request trends, and standards compliance acrossadministered systems - maintaining the operational data the Engineering Systems Manager needs toreport accurately to the Director of Engineering Systems and to make informed investment decisions.\nAccess Management, Security & Compliance\nMaintains access control governance across all administered platforms - executing provisioning and de-provisioning requests promptly, enforcing least-privilege access principles, and maintaining accurateaccess records that support audit evidence requirements.\nConducts and documents regular access reviews across Azure DevOps, LaunchDarkly, Flyway, and Cursor- identifying over-provisioned accounts, stale access grants, and access policy violations, and resolvingthem in partnership with the Engineering Systems Manager and Security team.\nSupports SOC 2, ISO/IEC 27001, and NIST 800-53 audit readiness by maintaining accurate, currentplatform configuration records, access inventories, and change histories - treating audit evidence as anongoing operational discipline rather than a pre-audit scramble.\nResponds to security-related configuration hardening requests with urgency and precision, partnering withthe Security team on access-related incidents and policy enforcement actions.\nQualifications\nBachelor's Degree in Computer Science, Information Systems, Business Analysis, or a related field\nEngineering Systems Engineer, Azure DevOps - Required Qualifications:\n2-4 years of hands-on Azure DevOps administration experience - including project configuration, access controlgovernance, and multi-team organizational structures - with Azure DevOps as a primary, hands-onresponsibility, not just usage as an end user.\nDeep hands-on experience administering Azure DevOps - including project/org configuration, access controland permission models, and board/area path structure - at a depth sufficient to independently resolve platformconfiguration issues and act as an internal escalation point.\nStrong scripting and automation skills - proficiency with PowerShell and/or REST APIs, and the ability to writereliable, maintainable automation scripts that other engineers can understand and modify.\nWorking knowledge of Git branching strategies, and familiarity with how Azure DevOps Boards and accesscontrols connect to GitHub-hosted repositories - repository links, GitHub Apps/OAuth connections, branchpolicies, and status checks. Our source code lives in GitHub, not Azure Repos, so comfort bridging the two isimportant. Hands-on pipeline/YAML authoring is not required - pipelines are owned by the engineering teamsthemselves.\nDemonstrated ability to diagnose the root cause behind a workflow request rather than implementing a band-aidfix - comfort proposing a better solution instead of the workaround that was asked for.\nExperience managing access controls an...","description_format":"text","description_chars":17742,"description_truncated":true,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Education assistance","Flexible time off","Life insurance","Parental leave","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[{"name":"United Kingdom","iso":"GB"}],"relocation_offered":false,"industries":["Financial Services","Health Care","InsurTech"],"lifecycle":[{"event":"open","at":"2026-09-30T00:05:15Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1 · green card filings: 1","filings_12m":1,"filings_prev_12m":3,"green_card_filings_12m":1,"median_offered_wage_usd":160000,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.422,"p_room":0.35,"age_days":15,"expected_fill_days":6,"reasons":["conf:0","velocity","win:tail"],"computed_at":"2026-10-15T05:46:00Z"},"pay":{"stated_usd_annual":122000,"is_top_pay":false},"html_url":"https://alion.io/job/origami-risk-llc-engineering-systems-engineer-azure-devops-administration-governance","json_url":"https://alion.io/job/origami-risk-llc-engineering-systems-engineer-azure-devops-administration-governance.json","meta":{"generated_at":"2026-10-15T22:13:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":33734,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7314},"rest":"https://alion.io/mcp/rest/get_company?id=7314"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Forigami-risk-llc-engineering-systems-engineer-azure-devops-administration-governance"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Forigami-risk-llc-engineering-systems-engineer-azure-devops-administration-governance"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Forigami-risk-llc-engineering-systems-engineer-azure-devops-administration-governance"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/origami-risk-llc-engineering-systems-engineer-azure-devops-administration-governance\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Forigami-risk-llc-engineering-systems-engineer-azure-devops-administration-governance"}]}