Software Engineer – DevOps Automation

Total Number of Openings

1Participates in the entire software development lifecycle, with a primary focus on the design and development of new software solutions

The OT Automation & PCN Security Engineer will design, implement, and operate automation solutions for Process Control Network (PCN/OT) environments. This role partners with platform and product teams to harden OT servers, codify infrastructure changes, integrate CI/CD workflows with ITSM processes, and maintain secure access patterns across Windows, Linux, and vSphere estates. The engineer will also contribute high quality technical documentation (e.g., design specs, architecture views, and data flows) and coordinate with stakeholders to ensure operational readiness and compliance.

Responsibilities for this position may include but are not limited to

• Build and maintain CI/CD pipelines (Azure DevOps Server) that deploy and test automation for OT/PCN workloads.
• Develop and maintain Ansible playbooks/roles for Windows and Linux server configuration, patching, and application deployment in segmented networks.
• Integrate automation workflows with ServiceNow (requests/incidents/changes), including ticketing, approvals, and status updates.
• Implement vSphere infrastructure‑as‑code practices to standardize and accelerate VM lifecycle operations.
• Administer and harden OT/PCN servers, including access provisioning and least‑privilege controls aligned with security standards.
• Produce and maintain technical documentation (Detailed Design Specifications, high‑level architectures, data‑flow diagrams) and operational runbooks.
• Collaborate closely with product owners, tech leads, and vendor partners to plan, demo, and iterate on automation outcomes in regular team ceremonies.
• Troubleshoot automation pipeline failures and environment issues across networks, servers, and integrations, driving root‑cause analysis and corrective actions.
• Champion change management and configuration management best practices for safe operations in regulated OT environments.
• Contribute to continuous improvement of observability and operational readiness (dashboards, alerts, SLOs) for automated services.

Required Qualifications

• Hands‑on experience building CI/CD pipelines in Azure DevOps Server for infrastructure and configuration automation.
• Proficiency with Ansible for Windows and Linux automation (inventory strategy, playbook design, idempotent tasks, secrets handling).
• Working knowledge of ServiceNow and ITIL processes; able to connect automation tasks to ITSM workflows (requests/incidents/changes).
• Experience operating and securing OT/PCN environments (network segmentation concepts, jump hosts, access provisioning, server hardening).
• Exposure to VMware vSphere and infrastructure‑as‑code patterns for VM provisioning and operations.
• Strong scripting ability in PowerShell and/or Python for tooling, integrations, and automation glue.
• Demonstrated ability to create and maintain technical documentation (design specs, architecture diagrams, data flows, runbooks).
• Excellent communication and cross‑team collaboration skills in a global, vendor‑partnered context.

Preferred Qualifications

• Experience in industrial/OT settings (oil & gas, utilities, manufacturing) and familiarity with ICS/SCADA considerations.
• Knowledge of security frameworks relevant to OT (e.g., ISA/IEC 62443, NIST controls) and practical implementation in PCN environments.
• Experience integrating automation telemetry with observability platforms (dashboards, metrics, alerting) to validate outcomes and SLOs.
• Familiarity with Git branching strategies, artifact repositories, and release orchestration for infra/config code.
• Background in Windows/Linux system administration in segmented networks (bastion/jump servers, proxy constraints).

Bachelor's degree in Computer Science, Engineering, or a related field—or equivalent practical experience.

Chevron participates in E-Verify in certain locations as required by law.