Senior Software Engineer - EDP

Boehringer Ingelheim GmbH; Philippines; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

Boehringer Ingelheim GmbH is seeking a senior software engineer to design and operate secure, scalable platform services for enterprise teams. You will own end-to-end delivery, develop CI/CD templates, and embed security across the software lifecycle.

The role requires strong programming skills, DevSecOps experience, and hands-on work with Docker, Kubernetes, and OpenShift. Collaboration with cross-functional teams is essential for delivering reliable platform capabilities.

Qualifications

• Several years of professional software engineering experience with ownership of production-grade systems or internal developer platforms.
• Strong programming and scripting skills in Java, Go, C#, TypeScript, Python, or Bash, with APIs, testing, clean code, and design patterns.
• DevOps experience with secure CI/CD design, automated quality gates, vulnerability management, and security-controls integration.
• Experience with containerized and cloud-native platforms such as Docker, Kubernetes, OpenShift, with secure deployment patterns and runtime troubleshooting.
• Experience with tools like Jenkins, Nexus, SonarQube, SAST/SCA, and automated testing frameworks.
• Understanding of enterprise identity and access management (SSO, RBAC, least privilege).
• Fluent English, strong collaboration, and ability to explain complex topics to technical and non-technical stakeholders.
• Hands-on GitHub Enterprise experience and a product mindset for DevSecOps across the platform.

Responsibilities

• Design, build, test, and operate secure, scalable platform services with end-to-end ownership.
• Develop and maintain reusable CI/CD workflows, templates, and self-service capabilities for teams.
• Embed security across the delivery lifecycle: code, dependencies, secrets, containers, and IaC scanning.
• Implement SBOM generation, artifact integrity, provenance, signing, and policy enforcement.
• Govern GitHub Enterprise capabilities: orgs, repos, teams, permissions, environments, Apps, Actions, runners.
• Apply identity and secrets-management patterns using least privilege and short-lived credentials.
• Integrate platform with OpenShift, AWS, artifact repositories, CMDB, and observability tools.
• Improve reliability via observability, automated testing, runbooks, incident analysis.
• Collaborate with product owners, cybersecurity, infra, and QA to translate needs into platform solutions.

Skills

Java

Go

TypeScript

Python

Bash

APIs

Testing

Software design patterns

DevSecOps

Collaboration

Education

Bachelor's degree in Computer Science

Tools

Jenkins

Nexus

SonarQube

Trivy

Aqua

OpenShift

Kubernetes

Terraform

Ansible

GitHub Enterprise

ServiceNow

Jira

Confluence

Job description

At Boehringer Ingelheim, we enable teams across the company to build, secure, deliver, and operate software through the Enterprise Development Platform (EDP). Our platform provides standardized, automated, and compliant capabilities across the software development lifecycle while improving developer experience and accelerating business value.
We apply modern software and platform engineering practices with a strong focus on DevSecOps, automation, secure-by-default delivery, reliability, and continuous improvement. Our goal is to provide paved paths and reusable building blocks that reduce cognitive load for development teams without compromising security, quality, or compliance.
We are looking for a senior software engineer with strong software engineering and DevSecOps capabilities and hands-on experience with modern development platforms. The successful candidate will combine engineering depth, security awareness, and a product mindset to design and evolve platform capabilities used by development teams across the enterprise.

Duties & Responsibilities

• Design, build, test, and operate secure, scalable platform services and automation with full end-to-end ownership.
• Develop and maintain reusable CI/CD workflows, templates, quickstarters, APIs, and self-service capabilities for development teams.
• Embed security throughout the software delivery lifecycle, including code, dependency, secret, container, and infrastructure-as-code scanning.
• Implement supply-chain security controls such as SBOM generation, artifact integrity, provenance, signing, trusted dependencies, and policy enforcement.
• Engineer and govern GitHub Enterprise capabilities, including organizations, repositories, teams, permissions, rulesets, environments, GitHub Apps, Actions, and runners.
• Apply secure identity and secrets-management patterns using least privilege, workload identities, short-lived credentials, and enterprise secret stores.
• Integrate the platform with enterprise services such as OpenShift, AWS, artifact repositories, ServiceNow, CMDB, identity providers, testing services, and observability platforms.
• Improve platform reliability through observability, automated testing, operational runbooks, incident analysis, and measurable engineering outcomes.
• Collaborate with product owners, architects, cybersecurity, infrastructure, quality, and engineering teams to translate needs into pragmatic platform solutions.

Requirements:

• Several years of professional software engineering experience, including ownership of production-grade systems or internal developer platforms.
• Strong programming and scripting skills in one or more languages such as Java, Go, C#, TypeScript, Python, or Bash, with sound knowledge of APIs, testing, clean code, and software design patterns.
• DevOps experience, including secure CI/CD design, automated quality gates, vulnerability management, remediation workflows, and security controls integrated into developer workflows.
• Experience with containerized and cloud-native platforms such as Docker, Kubernetes, and OpenShift, including secure deployment patterns, Helm, networking, identity, and runtime troubleshooting.
• Experience with tools, such as Jenkins, Nexus, SonarQube, Trivy or Aqua, OpenBao, Jira, Confluence, ServiceNow and automated testing frameworks.
• Understanding of enterprise identity and access management, including SSO, Entra ID, RBAC, least privilege, workload identity, secrets management, auditability, and privileged-access controls.
• Strong analytical, collaboration, and communication skills, with the ability to explain complex technical topics to both engineering and non-technical stakeholders.
• A proactive, pragmatic, and accountable mindset, with a strong focus on user needs, product outcomes, continuous learning, and shared success.
• Fluent English, written and spoken.

Nice to have:

• Hands-on experience with GitHub Enterprise.
• Experience with application-security and software-supply-chain practices, including SAST, SCA, secret scanning, container scanning, SBOMs, artifact signing or attestations,dependency governance, and infrastructure-as-code scanning.
• Practical experience with cloud services, preferably AWS, and with infrastructure as code using technologies such as Terraform, Ansible, or equivalent tooling.
• Knowledge of observability and operational engineering, including logs, metrics, traces, alerting, service-level objectives, incident response, and root-cause analysis.
• Experience working in regulated or compliance-sensitive environments, including GxP, validated systems, audit trails, and evidence automation, is an advantage.