DevOps Engineer (Security and Platform Operations)

Description

Acker, the oldest and most respected wine auction house and retailer in America is hiring a full-time DevOps Engineer with a security-first mindset to improve the reliability, operational maturity, and day-to-day security of our e-commerce platform and related systems. This role is hands-on and operational. It focuses on improving how we deploy, secure, monitor, and document our environment.

Our stack includes WordPress and WooCommerce running on AWS with Amazon RDS, Cloudflare for DNS and edge security controls, and Azure DevOps and Azure Pipelines for build and deployment workflows. The role also includes Microsoft 365 and Exchange Online security administration and continuous improvement. You do not need to be an application programmer, but you should be comfortable with automation, scripting, and tightening operational processes.

Key Responsibilities

• Maintain and improve the reliability and security of our AWS-hosted WordPress and WooCommerce platform, including Amazon RDS and Elastic Beanstalk deployments.
• Maintain and improve Azure DevOps and Azure Pipelines to support consistent releases, including approvals, artifacts, environment separation, and rollback planning.
• Improve deployment practices to reduce downtime and risk. This includes coordinating Cloudflare maintenance mode, release validation, warm-up steps, and post-deploy verification.
• Administer and improve Cloudflare configurations including DNS, SSL/TLS settings, WAF rules, bot controls, rate limiting, caching behavior, and maintenance workflows.
• Implement basic monitoring and alerting using cloud-native or existing tools, with a focus on site availability and key WooCommerce flows such as add-to-cart and checkout.
• Administer and improve Microsoft 365 and Exchange Online security controls in coordination with IT leadership, including MFA, Conditional Access baselines, admin role hygiene, audit logging, and retention policies.
• Maintain strong access controls and operational security hygiene across cloud and SaaS systems, including least privilege, periodic access reviews, and secure secrets handling.
• Own backup, disaster recovery readiness, and restore validation for systems supporting the e-commerce platform and adjacent services.
• Create and maintain operational documentation including diagrams, runbooks, deployment procedures, recovery steps, and access processes.
• Partner with internal teams and vendors to support integrations, hosting, and operational troubleshooting across adjacent systems and services.

Requirements

Required Qualifications

• 4 to 6 years of experience in DevOps, infrastructure, platform operations, or systems administration supporting production environments.
• Hands-on AWS operations experience for production web workloads, including IAM fundamentals, networking concepts, backups, and Amazon RDS operations.
• Hands-on experience with Azure DevOps and Azure Pipelines, including release workflows, approvals, artifacts, variables, and deployment automation.
• Hands-on Cloudflare experience including DNS, SSL/TLS, WAF, bot mitigation, rate limiting, and caching controls.
• Hands-on Microsoft 365 and Exchange Online administration with demonstrated experience improving security posture through practical controls and policy enforcement.
• Working knowledge of WordPress and WooCommerce from an operations perspective, including common production risks and troubleshooting patterns.
• Ability to automate repeatable operational workflows using scripting and configuration where appropriate.
• Strong documentation skills and the ability to turn tribal knowledge into repeatable processes.

Preferred Qualifications

• Infrastructure as Code experience using Terraform, CloudFormation, or similar tools.
• Experience improving Elastic Beanstalk deployment practices and reducing downtime during releases.
• Experience with basic monitoring, alerting, and log visibility using cloud-native tooling or a lightweight observability platform.
• Familiarity with payment and checkout operational troubleshooting and common e-commerce reliability patterns.
• Experience supporting mixed hosting environments and coordinating with third-party vendors.
• Familiarity with ERP-adjacent operations and supporting integrations with back-office systems, currently Microsoft Dynamics GP.

What We’re Looking For

• Security-first mindset with strong operational judgment and steady follow-through.
• Builder mentality focused on automation, standardization, and documentation.
• Comfortable owning outcomes across cloud operations, DevOps workflows, edge security controls, and Microsoft 365 administration.
• Clear communicator who can document systems well and collaborate across technical and non-technical teams.
• Practical, organized, and consistent, with a focus on reducing risk and improving reliability over time.

About Acker

Established in 1820, Acker is America’s oldest and most respected wine merchant—and the world’s leading fine wine auction house.  Now in its third century, Acker stands as the global destination for collectors, enthusiasts, and investors seeking the finest wines and spirits, with an unparalleled reputation for integrity, expertise, and exceptional service.

Benefits

• Paid vacation, sick time, and company holidays
• Medical, dental, and vision insurance
• 401 (k) retirement plan
• Wine discounts & More

Acker Merrall & Condit Co and its subsidiaries are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other legally protected status. Reasonable accommodation for disability are provided to applicants and employees in accordance with applicable law.

This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.