Senior Devops

🚀 About the Role We are looking for a Senior or Lead DevOps Engineer to design and evolve the engineering platform supporting complex embedded and real-time software products. This role goes beyond traditional CI/CD implementation. You will define reusable delivery standards, automate infrastructure and environments, strengthen the software supply chain, and create reliable validation pipelines covering emulators, virtual machines, and physical hardware. Working closely with Software, Firmware, QA, Security, Infrastructure, and Product teams, you will help improve delivery speed, quality, traceability, and operational maturity across the complete engineering lifecycle. 🎯 Your Mission As a Senior/Lead DevOps Engineer, you will: - Design scalable CI/CD frameworks for software, firmware, and embedded systems. - Standardize build, testing, release, and deployment processes. - Automate infrastructure and environment provisioning using Infrastructure as Code. - Implement GitOps practices and reusable engineering workflows. - Establish comprehensive quality gates across emulators and physical hardware. - Strengthen software supply chain security and release traceability. - Improve platform observability, developer productivity, and operational performance. - Support continuous improvement through engineering metrics and Lean practices. 💼 Key Responsibilities CI/CD & Pipeline Engineering - Design, build, and maintain enterprise-grade CI/CD pipelines. - Develop declarative and reusable pipeline components using: - Jenkins - GitLab CI - Create reusable workflows, matrix builds, and standardized delivery templates. - Automate software and firmware build, testing, packaging, and release activities. - Ensure that released artifacts are immutable, traceable, and correctly registered. - Manage dependencies and artifact repositories using Nexus and Artifactory. - Improve pipeline reliability, execution speed, scalability, and maintainability. - Reduce manual intervention across the software delivery lifecycle. Infrastructure as Code & GitOps - Automate infrastructure and environment provisioning using: - OpenTofu - Terraform - Ansible - Define reusable infrastructure modules and configuration standards. - Implement GitOps-based reconciliation and controlled configuration management. - Promote immutable infrastructure principles across development and delivery environments. - Build automatically provisioned and reproducible environments. - Ensure consistency between development, testing, staging, and production. - Contribute to infrastructure governance, versioning, and change traceability. Testing & Quality Automation - Define automated testing strategies across the delivery pipeline. - Implement fail-fast quality gates covering: - Unit testing - Integration testing - System testing - Security testing - Hardware-in-the-Loop testing - Configure automated validation using: - pytest - QEMU - HIL test benches - SonarQube - OWASP ZAP - Build testing workflows for both emulated environments and physical hardware. - Ensure that failed quality or security checks prevent unsafe releases. - Collaborate with QA and engineering teams to improve test coverage and reliability. Observability & Telemetry - Design and implement observability capabilities across engineering platforms and target systems. - Build real-time dashboards using: - Grafana - Prometheus - OpenTelemetry - eBPF - Establish monitoring for pipeline health, environments, systems, and releases. - Create dashboards that provide visibility into platform performance and project maturity. - Define meaningful alerts, metrics, logs, and distributed traces. - Use telemetry data to identify bottlenecks and improvement opportunities. - Support troubleshooting and root cause analysis. Progressive Delivery & Release Engineering - Design safe and scalable deployment strategies for embedded products. - Implement progressive delivery practices, including: - Canary deployments - A/B deployments - Over-the-Air updates - Automated rollback - Ensure deployment processes minimize operational and product risk. - Implement clear release controls and approval mechanisms. - Maintain auditable release records and complete artifact traceability. - Support reliable deployment across different hardware versions and target environments. DevSecOps & Software Supply Chain Security - Integrate security throughout the software development lifecycle. - Implement automated: - Static Application Security Testing - Software Composition Analysis - Dependency scanning - Vulnerability detection - Generate and manage Software Bills of Materials. - Ensure releases are secure, controlled, traceable, and auditable. - Contribute to engineering practices aligned with IEC 62443. - Strengthen artifact integrity and software supply chain security. - Collaborate with Security teams to define remediation and compliance workflows. Embedded Linux & Firmware Delivery - Support the creation and evolution of automated build pipelines for embedded Linux systems. - Build and maintain custom Linux images using: - Yocto - Buildroot - Automate compilation, dependency management, packaging, validation, and image publication. - Improve build reproducibility across different hardware targets. - Integrate embedded Linux builds into quality and security pipelines. - Support patching, version management, and product lifecycle activities. Real-Time & Multi-Core Systems - Design CI/CD workflows supporting real-time firmware development. - Build and validate firmware based on Zephyr RTOS. - Automate testing across multi-core and hardware-dependent environments. - Support engineering teams in validating timing, reliability, and hardware integration requirements. - Integrate firmware testing with emulators and physical HIL environments. Virtual Machine Image Automation - Create and maintain automated VM image pipelines using: - Packer - VMware - KVM - Automate image creation, configuration, patching, testing, and publication. - Ensure VM images are reproducible, secure, and version controlled. - Integrate image validation into CI/CD pipelines. Database Change Management - Implement controlled and versioned database deployment processes. - Automate database schema changes using: - Flyway - Liquibase - Apply consistent database changes across all environments. - Ensure database migrations are traceable, repeatable, and recoverable. - Integrate database validation and rollback mechanisms into delivery pipelines. Engineering Metrics & Continuous Improvement - Define and monitor engineering performance indicators. - Use DORA metrics to assess and improve software delivery performance. - Create visibility into delivery speed, stability, recovery, and quality. - Apply Lean improvement methodologies such as: - Deming PDCA - PDSA - Formulate hypotheses, test process changes, and measure their impact. - Standardize improvements that deliver measurable engineering value. - Promote a culture of experimentation, learning, and continuous improvement. DORA focuses on the capabilities that drive software delivery and operational performance. [dora.dev] Technical Leadership - Act as a technical reference for DevOps, automation, and software delivery practices. - Define engineering standards, reusable patterns, and reference implementations. - Mentor engineers and support teams in adopting DevOps best practices. - Lead technical discussions, design reviews, and improvement initiatives. - Influence engineering decisions across Software, Firmware, QA, Security, and Infrastructure. - Balance strategic platform evolution with hands-on implementation. ✅ What We’re Looking For Mandatory Requirements - Senior or Lead-level experience in DevOps, Platform Engineering, Release Engineering, or a related field. - Strong hands-on experience designing complex CI/CD pipelines. - Advanced knowledge of Jenkins and GitLab CI. - Experience managing artifacts using Nexus or Artifactory. - Strong experience with Infrastructure as Code using Terraform or OpenTofu. - Hands-on experience with Ansible. - Experience implementing GitOps and immutable infrastructure principles. - Strong understanding of testing automation and pipeline quality gates. - Experience with observability, telemetry, and monitoring platforms. - Solid knowledge of DevSecOps and software supply chain security. - Experience implementing secure and auditable release processes. - Strong troubleshooting, automation, and problem-solving capabilities. - Ability to lead technical initiatives across multidisciplinary teams. 🛠 Core Technical Stack CI/CD & Artifact Management - Jenkins - GitLab CI - Nexus - Artifactory - Declarative Pipelines - Reusable Workflows - Matrix Builds - Immutable Artifacts Infrastructure as Code & GitOps - OpenTofu - Terraform - Ansible - GitOps - Immutable Infrastructure - Automated Environment Provisioning Testing & Quality - SonarQube - pytest - QEMU - Hardware-in-the-Loop Testing - OWASP ZAP - Automated Quality Gates Observability & Telemetry - Grafana - Prometheus - OpenTelemetry - eBPF - Dashboards and Alerting - Distributed Tracing Security & Progressive Delivery - Canary Deployments - A/B OTA Updates - Automated Rollback - SAST - SCA - SBOM - IEC 62443 - Software Supply Chain Security ⭐ Project Environment Experience with the following technologies is highly valued, although it is not required across every area: Embedded Linux - Yocto - Buildroot - Custom Linux Images - Reproducible Embedded Builds Embedded environments introduce additional delivery challenges related to hardware dependencies, real-time constraints, fragmented toolchains, and safety or security requirements. Real-Time Systems - Zephyr RTOS - Firmware Pipelines - Multi-Core Environments - Real-Time Testing Virtualization - Packer - VMware - KVM - Automated VM Image Management Database Delivery - Flyway - Liquibase - Versioned Database Migrations Engineering Excellence - DORA Metrics - Deming PDCA/PDSA - Lean Systems - Continuous Improvement