Director, DevOps Engineering

About the role

M3 (www.m3as.com) is a leading provider of hospitality-specific software solutions, delivering cloud-based tools for hotel accounting, financial reporting, labor management, payroll, and business intelligence. Built by hoteliers for hoteliers, M3 empowers hotel owners, operators, and management companies to streamline back-office operations, reduce costs, gain real-time insights, and drive portfolio performance across thousands of properties in North America and beyond.

Description Summary:

The Director of DevOps Engineering owns the organization's CI/CD pipeline architecture end-to-end, with primary accountability for embedding automated security controls into every stage of the pipeline (DevSecOps), building and operating ephemeral development and test environments, and leading release management and deployment strategy — including progressive delivery patterns such as Blue/Green and Canary deployments — for production releases. The individual must be capable of leading a technical team in a hands-on manner, partnering closely with Security, Engineering, and QA on release readiness, and driving the long-term pipeline, environment, and deployment roadmap in support of fast, safe, and repeatable software delivery.

Essential Duties:

The duties listed below are the essential functions of this position, and they may change as the needs of the company demand. All associates are expected to do what is necessary to get the work done and to cooperate fully with their supervisor’s requests for additional or altered duties.

- Supervises all roles assigned to the DevOps Engineering department, personally or through subordinate leads, including recruiting, training and development, performance management, motivation, corrective action, or termination in conjunction with HR if necessary.

- Owns the architecture, design, and continuous maturity of the organization’s CI/CD pipelines end-to-end, standardizing pipeline tooling and patterns (e.g., GitHub Actions, GitLab CI, Jenkins) across engineering teams to enable fast, reliable, and repeatable software delivery.

- Leads adoption of DevSecOps practices by embedding automated security checks directly into CI/CD pipelines, including static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA)/dependency scanning, container and image scanning, secrets detection, and infrastructure-as-code policy checks.

- Partners with the security team to define pipeline gating criteria, vulnerability severity thresholds, and remediation SLAs; implements policy-as-code in the pipeline to enforce security and compliance requirements defined by the Cloud Infrastructure Director and Security at build and deploy time.

- Designs, builds, and operates ephemeral environment infrastructure that provisions on-demand, short-lived environments per branch or pull request, enabling engineers to validate changes under production-like conditions without manual environment requests.