Azure DevOps CI Engineer - Embedded & Threat Modeling

Doble Engineering Company; West Village (MA); On-site; USD 99,000 - 135,000; Full time

Job summary

Doble Engineering Company seeks a 6‑month contractor to migrate desktop/firmware CI pipelines into our Azure DevOps environment, while strengthening CRA and IEC 62443‑4‑1 secure‑SDLC practices. You will embed threat modeling, SBOM generation, and Snyk scanning into pipelines to produce CRA‑compliant evidence as a by‑product of day‑to‑day engineering.

Responsibilities include designing Azure DevOps multi‑stage pipelines, migrating from GitLab/SVN, supporting desktop/firmware builds,

Qualifications

• 5+ years in DevOps/CI‑CD with hands‑on Azure DevOps Pipelines.
• Experience building desktop/firmware or embedded build pipelines (not web‑only).
• Knowledge of Snyk (SAST/SCA), SBOM generation, and STRIDE threat modeling.
• Familiarity with the EU CRA and IEC 62443‑4‑1 secure‑development lifecycle concepts.
• English working proficiency; Italian a strong plus given mixed-language migration meetings.

Responsibilities

• Design and implement Azure DevOps multi‑stage pipelines.
• Migrate sources from GitLab/SVN to Azure DevOps Git.
• Support desktop/firmware builds (C/C++, .NET) and Yocto builds.
• Containerize workflows with Docker and AKS.
• Support monolith‑to‑microservices refactoring with per‑service pipelines.
• Create reusable pipeline templates and manage infrastructure with Terraform.
• Integrate Snyk and SBOM scanning into pipelines.
• Enforce CRA/IEC secure‑SDLC practices and manage secrets in Key Vault.

Skills

Azure DevOps

GitLab migration

Desktop builds

Docker

AKS

SBOM generation

Threat modeling

Snyk

English proficiency

Italian beneficial

Tools

Yocto

Terraform

ACR

Job description

Doble Engineering Company seeks a 6‑month contractor to migrate desktop/firmware CI pipelines into our Azure DevOps environment, while strengthening CRA and IEC 62443‑4‑1 secure‑SDLC practices. You will embed threat modeling, SBOM generation, and Snyk scanning into pipelines to produce CRA‑compliant evidence as a by‑product of day‑to‑day engineering.

Responsibilities include designing Azure DevOps multi‑stage pipelines, migrating from GitLab/SVN, supporting desktop/firmware builds,