Engineer III, Software

Work Schedule

First Shift (Days)

Environmental Conditions

Office

Job Description

Job Title

DevOps Engineer (Build & Secure Packaging)

Job Description

When you join us at Thermo Fisher Scientific, you’ll become a member of a hard-working, motivated team that aligns with your enthusiasm for exploration and discovery. With revenues exceeding $40 billion and the largest investment in R&D in the industry, we provide our people with resources and opportunities to make significant contributions to the world.

How will you make an impact

Work on backend platform software that powers advanced scientific instruments used in semiconductor s , life sciences, and materials research . We are seeking a Python DevOps Engineer with 6–10 years of professional experience to develop secure, reliable automation frameworks based on Python, supported by PowerShell environments.

This role supports enterprise build automation, Python packaging, SBOM integration, and secure artifact publishing within a regulated environment. The position operates at the intersection of Engineering, DevOps, and Security to ensure compliant, traceable, and reproducible software distribution.

What will you do

Design and implement scalable Python components, refactor them strategically. Ensure reliable error handling and propagation across scripting environments.

Safeguard Code Quality, builds test strategy; enforces coverage gates

Automate Python packaging and build artifact generation using PyPI and Conda standards. Ensure security, traceability, and compliance with distributed Python packages.

Builds robust PowerShell scripts, including unittests (using Pester).

Collaborate with Development and CI/CD teams to automate artifact publishing and enforce compliance standards.

Maintain documentation and support troubleshooting of packaging and dependency workflows.

On Cyber Security, perform security code reviews, threat awareness. Implements automated scanning (SCA, CVE monitoring); manages SBOM. Integrate secrets into CI/CD securely .

Effectively contributes to planning and execution by delivering well-defined, traceable assignments, aligned with team objectives.

Required Skills

Strong Python , PowerShell and Shell Scripting/Bash scripting expertise.

Experience with Anaconda/Miniconda and conda package management.

Experience in build ing automation and configuration file generation.

Experience with Python packaging standards (pyproject.toml, conda-build, meta.yaml).

Experience with CI/CD tools such as Jenkins, GitHub Actions, GitLab CI, or similar

Strong understanding of build and deployment automation

Experience in Containerization using Docker .

Experience implementing observability (monitoring, logging, alerting) to support reliability and operational excellence.

Understanding SBOM concepts, software licensing, and vulnerability management.

Strong troubleshooting skills and attention to detail.

Drives DevSecOps outcomes through security-focused code reviews and threat awareness, automated scanning (SCA/CVE monitoring) with SBOM generation/management.

Ensures secure CI/CD by integrating secrets safely, enforcing signed artifacts and hardened pipelines, and hardening base images to minimize attack surface.

Desirable Skills

Experience in scientific, engineering, or highly regulated industries.

Apply strong Python code quality practices for automation scripts, including linting (Pylint/Flake8) and static typing (mypy).

Familiarity with Windows process management and scripting environments.

Experience supporting enterprise software distribution.

Exposure to Agentic AI concepts, including practical usage of GitHub Copilot (GHCP) or similar AI-assisted development tools to enhance automation, scripting, and developer productivity.

Experience working in an agile environment like SAFe, using Jira.

Preferred Qualifications

BTech degree in Computer Science, Electronics, or a related technical field (or equivalent practical experience).

Experience operating in regulated or security-focused environments require auditability and traceability.