Senior DevOps Engineer

Embedded Shishya; Deutschland; Vor Ort; EUR 90.000 - 120.000; Vollzeit

Zusammenfassung

Embedded Shishya in Germany seeks a seasoned DevOps/Infrastructure Engineer with a strong security focus to design, deploy, and operate CI/CD pipelines and automate builds for embedded/Android and cloud applications.

You will design and maintain firmware signing systems, including PKI, certificate lifecycle management, and secure key handling, and you will integrate HSMs with signing services across Jenkins and GitLab CI pipelines.

Qualifikationen

• Must have MSc or BSc in Electrical Engineering, Computer Science, Computer Engineering, Electronics Engineering or equivalent practical experience.

Aufgaben

• Configure, deploy and support CI/CD pipelines (GHA, Gitlab CI, Jenkins).
• Automate builds, tests, packaging, and deployments for Embedded/Android and Cloud applications.
• Design, implement, and maintain firmware signing systems with PKI and secure key handling.
• Set up and integrate HSMs with signing services.
• Integrate signing workflows into CI/CD pipelines (Jenkins, GitLab CI).
• Develop automation for secure key provisioning, rotation and access management.
• Deploy, configure and maintain security tools: SAST, DAST, CVE scanners, SBOM tooling.
• Ensure high availability, disaster recovery and infrastructure resilience.

Kenntnisse

CI/CD tooling

DevSecOps

Linux systems

Networking

Docker

Kubernetes

English

travel willingness

Ausbildung

MSc or BSc in Electrical Engineering, Computer Science, Computer Engineering, Electronics Engineering or equivalent

Tools

Jenkins

Gerrit

Terraform

Ansible

Jobbeschreibung

Key Responsibilities

• Configure, deploy and support CI/CD pipelines (GHA, Gitlab CI, Jenkins).
• Automate builds, tests, packaging, and deployments for Embedded/Android and Cloud applications.
• Design, implement, and maintain firmware signing systems, including PKI infrastructure, certificate lifecycle management, and secure key handling.
• Set up, configure, and integrate Hardware Security Modules (HSM) with signing services.
• Integrate signing workflows into CI/CD pipelines (e.g., Jenkins, GitLab CI).
• Develop automation for secure key provisioning, rotation and access management.
• Deploy, configure, and maintain security tools, such as:
  • SAST (Static Application Security Testing)
  • DAST (Dynamic Application Security Testing)
  • CVE scanners for dependencies, container images, firmware components
  • Secret scanning and SBOM generation tooling
• Ensure high availability, disaster recovery, and infrastructure resilience.

Qualifications

Required Skills & Experience

• MSc or BSc in Electrical Engineering, Computer Science, Computer Engineering, Electronics Engineering or equivalent practical experience.
• 5+ years of experience in DevOps, Infrastructure/Cloud Engineering, or similar roles.
• Strong experience with Jenkins, Gerrit, and modern CI/CD tooling.
• At least one cloud provider (AWS, Azure, GCP).
• Infrastructure-as-Code tooling (Terraform, Ansible, etc.).
• Deep knowledge of Linux systems, networking, and secure system architecture.
• Proven experience with DevSecOps toolchains (SAST, DAST, vulnerability scanning).
• Familiarity with containerization and orchestration (Docker, Kubernetes).
• Proficient in English and strong communication skills.
• Willingness to travel.

Nice to have skills

• Familiarity with PKI systems, certificate authorities, trust chains.
• Experience with HSMs (Thales, AWS CloudHSM, Azure Key Vault HSM, etc.).
• Experience with firmware or embedded system workflows.
• Familiarity with SBOM tooling (CycloneDX, SPDX).
• Background in automation for cryptographic key management.
• Proficiency in at least one platform language: Python, Go or similar.