Director, DevOps, Support, and Operations
GE Aerospace · Evendale, United States · remote
Job Description SummaryAs part of the GE Aerospace Digital Technology organization supporting the Defense & Systems (D&S) business, the Director of DevOps, Support, and Operations keeps the Defense and Systems Customer Experience (DSCX) application portfolio secure, reliable, and compliant. This is a people-leadership role accountable for vulnerability remediation, reliability (SLA, SLO, and SLI), automation and toil reduction, vendor management, defect management, legacy lifecycle and sunsetting, and resilience and continuity including on-call and disaster recovery. This person will lead a team of operations and application engineers and set the operational discipline for the portfolio.
Job DescriptionWhy This Role Exists
DSCX owns 30+ digital products for Defense & Systems. Today our technical product managers wear three hats for their products: product management, project management, and operations. We are dividing that load across three dedicated functions, and this role will build out the operations discipline, consolidating ticket management, software hygiene, patching, and vulnerability closure into a single team. This role is planned to have 6-8 direct reports, and the portfolio includes many legacy applications and reports that need to be retired, rewritten, or absorbed into our AI product vision. Vulnerability and high priority defect findings come from the Defense & Systems security organization under the BISO, and closing them inside the severity SLA, including CMMC obligations on affected products, is part of this team's accountability. Your charge is to standardize processes and artifacts, build automation that removes the manual work, and then coach and train your team to hold it. You should be experienced with AI and know where it creates opportunity to expand what the team can deliver.
Environment
The DSCX portfolio runs primarily on AWS, Palantir Foundry, or through SaaS based 3rd party solutions, with on-premise implementations supported for customers whose data sensitivity requires it. Delivery runs through Rally and Microsoft Teams and ServiceNow is our system of record for incident, change, and defect management. Monitoring and alerting tooling varies by application across the portfolio, and consolidating it is part of this team's work. Finally, the portfolio carries a $25+MM annual budget across our product line.
Roles and Responsibilities
Security and Vulnerability Remediation
- Own vulnerability remediation and high-priority application defects across the DSCX portfolio, working against the policy, scanning cadence, and severity SLAs set by the Defense & Systems Business Information Security Officer (BISO), who is the source for both.
- Accountable for getting DSCX applications compliant against the BISO's D&S-wide program, including CMMC obligations on affected products.
- Own the remediation backlog with a named owner and target date per finding, held to the same discipline as a RAID log.
- Escalate when remediation is blocked, for example a vendor dependency or a legacy system with no patch path.
Automation and Engineering Leverage
- Cut manual operational work quarter over quarter. Own the automation backlog and report the burn-down.
- Set the infrastructure-as-code standard, where applicable, for the portfolio and hold the team to it.
- Build for cause removal, not ticket clearance. Recurring incidents get an engineering fix and a process change.
Reliability and Quality
- Own SLA, SLO, and SLI definitions and reporting, covering uptime, latency, and vendor SLAs.
- Own product defects across the portfolio: tracking, triage, and resolution SLAs through ServiceNow.
- Lead blameless post-mortems and track action items to closure.
- Run Daily Visual Management for the operations team. Incident load, remediation aging, and defect status are visible daily, not reconstructed for a review.
Legacy and Lifecycle Management
- 15+ legacy applications and reports need to be retired, rewritten, or absorbed into our AI product vision, each with a roadmap and date attached. This may require partnership with the appropriate TPM on the team.
- Own migration plans, timelines, and stakeholder communication for sunsetting systems with TPMs as applicable.
Resilience and Continuity
- Accountable for on-call rotations and escalation paths. You own the rotation and are the escalation path for Sev 1 incidents affecting DSCX applications.
- Own the disaster recovery and business continuity plan and the emergency contact lists that go with it.
Vendor Management
- Own vendor renewals, certifications, billing, and technical support relationships for third-party software across the portfolio.
People and Team
- Lead, coach, and develop the operations team, including hiring, performance management, and talent development.
- Set the operational discipline and build a culture of ownership, blamelessness, and continuous improvement.
Minimum Qualifications
- Bachelor’s degree from accredited university or college with minimum of 8 years of professional experience OR Associates degree with minimum of 11 years of professional experience OR High School Diploma with minimum of 13 years of professional experience
- Minimum 5 years of professional experience in Application Operations and IT
- Note: Military experience is equivalent to professional experience
Eligibility Requirement:
- Legal authorization to work in the U.S. is required. We will not sponsor individuals for employment visas, now or in the future, for this job.
Desired Characteristics
Technical Expertise
- Deep expertise running production software at enterprise scale: SLI and SLO definition with error budgets, incident command and blameless post-incident review, and vulnerability remediation against a defined severity SLA.
- Hands-on fluency with AWS, hybrid cloud and on-premise deployment models, infrastructure as code, and ServiceNow. Palantir Foundry experience is a strong plus.
- Strong understanding of security operating models, specifically working against a policy, scanning cadence, and severity SLA standard set by a security organization rather than owned by your team.
- Experience with application lifecycle and legacy sunsetting, disaster recovery, and business continuity planning.
- Three or more years leading an operations, reliability, or infrastructure team, including hiring and performance management.
Business Acumen
- Manages vendor relationships, renewals, and support commitments with discipline.
- Prioritizes remediation and defects by severity and business impact, and drives items to closure with named owners and target dates.
- Analyzes the impact of operational choices on compliance, cost, and reliability, including FAR, DCMA audit readiness, CMMC, CUI, and export control obligations.
Leadership
- Builds an operations discipline where none has existed as a standalone team.
- Runs blameless reviews.
- Protects the team's focus.
- Coaches with questions before positions.
- Leads a distributed team on purpose.
Key Success Metrics
- Security posture: vulnerability findings remediated within BISO SLA; reduction in aged and overdue findings across DSCX applications.
- Reliability: uptime and latency against SLO; vendor SLA adherence.
- Quality: defect resolution within SLA; recurrence rate and post-mortem action closure.
- Lifecycle and toil: legacy applications retired on plan; quarter over quarter toil reduction and automation backlog burn-down.
Location and Travel
Location: Cincinnati, OH (Evendale) strongly preferred. You will lead a team that is part hybrid and part fully remote, so a deliberate approach to running distributed on-call and incident response is part of the job.
Travel: up to 15% for vendor engagement and site support.
Notes:
The base pay range for this position is $152,000 to $230,000 annually. The specific pay offered may be influenced by a variety of factors, including the candidate’s experience, education, and skill set.