Senior Devops

🚀 About the Role We are looking for a Senior or Lead DevOps Engineer to design and evolve the engineering platform supporting complex embedded and real-time software products. This role goes beyond traditional CI/CD implementation. You will define reusable delivery standards, automate infrastructure and environments, strengthen the software supply chain, and create reliable validation pipelines covering emulators, virtual machines, and physical hardware. Working closely with Software, Firmware, QA, Security, Infrastructure, and Product teams, you will help improve delivery speed, quality, traceability, and operational maturity across the complete engineering lifecycle. 🎯 Your Mission As a Senior/Lead DevOps Engineer, you will: Design scalable CI/CD frameworks for software, firmware, and embedded systems.Standardize build, testing, release, and deployment processes.Automate infrastructure and environment provisioning using Infrastructure as Code.Implement GitOps practices and reusable engineering workflows.Establish comprehensive quality gates across emulators and physical hardware.Strengthen software supply chain security and release traceability.Improve platform observability, developer productivity, and operational performance.Support continuous improvement through engineering metrics and Lean practices.💼 Key Responsibilities CI/CD & Pipeline Engineering Design, build, and maintain enterprise-grade CI/CD pipelines.Develop declarative and reusable pipeline components using:JenkinsGitLab CICreate reusable workflows, matrix builds, and standardized delivery templates.Automate software and firmware build, testing, packaging, and release activities.Ensure that released artifacts are immutable, traceable, and correctly registered.Manage dependencies and artifact repositories using Nexus and Artifactory.Improve pipeline reliability, execution speed, scalability, and maintainability.Reduce manual intervention across the software delivery lifecycle.Infrastructure as Code & GitOps Automate infrastructure and environment provisioning using:OpenTofuTerraformAnsibleDefine reusable infrastructure modules and configuration standards.Implement GitOps-based reconciliation and controlled configuration management.Promote immutable infrastructure principles across development and delivery environments.Build automatically provisioned and reproducible environments.Ensure consistency between development, testing, staging, and production.Contribute to infrastructure governance, versioning, and change traceability.Testing & Quality Automation Define automated testing strategies across the delivery pipeline.Implement fail-fast quality gates covering:Unit testingIntegration testingSystem testingSecurity testingHardware-in-the-Loop testingConfigure automated validation using:pytestQEMUHIL test benchesSonarQubeOWASP ZAPBuild testing workflows for both emulated environments and physical hardware.Ensure that failed quality or security checks prevent unsafe releases.Collaborate with QA and engineering teams to improve test coverage and reliability.Observability & Telemetry Design and implement observability capabilities across engineering platforms and target systems.Build real-time dashboards using:GrafanaPrometheusOpenTelemetryeBPFEstablish monitoring for pipeline health, environments, systems, and releases.Create dashboards that provide visibility into platform performance and project maturity.Define meaningful alerts, metrics, logs, and distributed traces.Use telemetry data to identify bottlenecks and improvement opportunities.Support troubleshooting and root cause analysis.Progressive Delivery & Release Engineering Design safe and scalable deployment strategies for embedded products.Implement progressive delivery practices, including:Canary deploymentsA/B deploymentsOver-the-Air updatesAutomated rollbackEnsure deployment processes minimize operational and product risk.Implement clear release controls and approval mechanisms.Maintain auditable release records and complete artifact traceability.Support reliable deployment across different hardware versions and target environments.DevSecOps & Software Supply Chain Security Integrate security throughout the software development lifecycle.Implement automated:Static Application Security TestingSoftware Composition AnalysisDependency scanningVulnerability detectionGenerate and manage Software Bills of Materials.Ensure releases are secure, controlled, traceable, and auditable.Contribute to engineering practices aligned with IEC 62443.Strengthen artifact integrity and software supply chain security.Collaborate with Security teams to define remediation and compliance workflows.Embedded Linux & Firmware Delivery Support the creation and evolution of automated build pipelines for embedded Linux systems.Build and maintain custom Linux images using:YoctoBuildrootAutomate compilation, dependency management, packaging, validation, and image publication.Improve build reproducibility across different hardware targets.Integrate embedded Linux builds into quality and security pipelines.Support patching, version management, and product lifecycle activities.Real-Time & Multi-Core Systems Design CI/CD workflows supporting real-time firmware development.Build and validate firmware based on Zephyr RTOS.Automate testing across multi-core and hardware-dependent environments.Support engineering teams in validating timing, reliability, and hardware integration requirements.Integrate firmware testing with emulators and physical HIL environments.Virtual Machine Image Automation Create and maintain automated VM image pipelines using:PackerVMwareKVMAutomate image creation, configuration, patching, testing, and publication.Ensure VM images are reproducible, secure, and version controlled.Integrate image validation into CI/CD pipelines.Database Change Management Implement controlled and versioned database deployment processes.Automate database schema changes using:FlywayLiquibaseApply consistent database changes across all environments.Ensure database migrations are traceable, repeatable, and recoverable.Integrate database validation and rollback mechanisms into delivery pipelines.Engineering Metrics & Continuous Improvement Define and monitor engineering performance indicators.Use DORA metrics to assess and improve software delivery performance.Create visibility into delivery speed, stability, recovery, and quality.Apply Lean improvement methodologies such as:Deming PDCAPDSAFormulate hypotheses, test process changes, and measure their impact.Standardize improvements that deliver measurable engineering value.Promote a culture of experimentation, learning, and continuous improvement. DORA focuses on the capabilities that drive software delivery and operational performance. [dora.dev]Technical Leadership Act as a technical reference for DevOps, automation, and software delivery practices.Define engineering standards, reusable patterns, and reference implementations.Mentor engineers and support teams in adopting DevOps best practices.Lead technical discussions, design reviews, and improvement initiatives.Influence engineering decisions across Software, Firmware, QA, Security, and Infrastructure.Balance strategic platform evolution with hands-on implementation.✅ What We’re Looking For Mandatory Requirements Senior or Lead-level experience in DevOps, Platform Engineering, Release Engineering, or a related field.Strong hands-on experience designing complex CI/CD pipelines.Advanced knowledge of Jenkins and GitLab CI.Experience managing artifacts using Nexus or Artifactory.Strong experience with Infrastructure as Code using Terraform or OpenTofu.Hands-on experience with Ansible.Experience implementing GitOps and immutable infrastructure principles.Strong understanding of testing automation and pipeline quality gates.Experience with observability, telemetry, and monitoring platforms.Solid knowledge of DevSecOps and software supply chain security.Experience implementing secure and auditable release processes.Strong troubleshooting, automation, and problem-solving capabilities.Ability to lead technical initiatives across multidisciplinary teams.🛠 Core Technical Stack CI/CD & Artifact Management JenkinsGitLab CINexusArtifactoryDeclarative PipelinesReusable WorkflowsMatrix BuildsImmutable ArtifactsInfrastructure as Code & GitOps OpenTofuTerraformAnsibleGitOpsImmutable InfrastructureAutomated Environment ProvisioningTesting & Quality SonarQubepytestQEMUHardware-in-the-Loop TestingOWASP ZAPAutomated Quality GatesObservability & Telemetry GrafanaPrometheusOpenTelemetryeBPFDashboards and AlertingDistributed TracingSecurity & Progressive Delivery Canary DeploymentsA/B OTA UpdatesAutomated RollbackSASTSCASBOMIEC 62443Software Supply Chain Security⭐ Project Environment Experience with the following technologies is highly valued, although it is not required across every area: Embedded Linux YoctoBuildrootCustom Linux ImagesReproducible Embedded BuildsEmbedded environments introduce additional delivery challenges related to hardware dependencies, real-time constraints, fragmented toolchains, and safety or security requirements. Real-Time Systems Zephyr RTOSFirmware PipelinesMulti-Core EnvironmentsReal-Time TestingVirtualization PackerVMwareKVMAutomated VM Image ManagementDatabase Delivery FlywayLiquibaseVersioned Database MigrationsEngineering Excellence DORA MetricsDeming PDCA/PDSALean SystemsContinuous Improvement