Description

• Strong foundational knowledge of general security practices, threat modeling, and DevSecOps tools (e.g., SonarQube, Black Duck SCA, Artifactory, GitHub Enterprise, and Jenkins) embedded within deployment workflows.
• DevOps Expertise: Strong experience setting up and managing CI/CD tools (e.g., Jenkins, GitLab CI, GitHub Actions, or Azure DevOps).
• Embedded Software Build Environments: Hands-on experience with build automation tools (e.g., CMake, Make, Docker, GCC/Clang toolchains) for embedded or hardware-centric systems.
• Quality Tools Integration: Experience integrating static analysis tools (e.g., SonarQube, Coverity, Klocwork, or Cppcheck).
• Regulatory Awareness: Familiarity with regulated industry standards (e.g., ISO 13485, IEC 62304, FDA 21 CFR Part 11) and formal tool validation processes.
• Scripting Skills: Proficiency in scripting languages such as Python, Bash, or PowerShell for build and task automation.

Job Responsibilities

• CI/CD Pipeline Management: Architect, optimize, and manage continuous integration and deployment (CI/CD) pipelines and developer toolchains.
• Embedded Build Systems: Configure and automate firmware/software builds specifically for target hardware and embedded device environments.
• Quality & Static Analysis: Integrate and maintain static code analysis tools, liners, and automated testing suites within the CI toolchain.
• Validation & Compliance: Ensure all build tools, environments, and pipeline components meet software tool validation requirements under medical device regulatory frameworks.
• Documentation & Reporting: Execute approved validation plans and generate technical validation reports required for regulatory audits

Key Skills

Education

Bachelor's degree