Azure DevOps Lead — CI Migration & Secure SDLC

ETS-Lindgren GmbH; Marlborough (MA); On-site; USD 206,640,000 - 282,408,000; Full time

Job summary

Doble Engineering seeks a contractor to migrate and fortify desktop/firmware CI pipelines into a unified Azure DevOps environment. You will embed threat modeling, Snyk scanning, and SBOM generation as standard in pipelines to meet CRA and IEC 62443-4-1 secure-SDLC requirements.

You will design multi-stage YAML pipelines, migrate from GitLab/SVN/Bitbucket to Azure DevOps Git, and containerize workflows with Docker and AKS. Expect collaboration with embedded/OT teams and a six-month engagement.

Qualifications

• 5+ years in DevOps / CI-CD engineering with hands-on Azure DevOps Pipelines and Git-based source-control migration.
• Experience building desktop/firmware or embedded build pipelines (not web-only).
• Knowledge of Snyk (SAST/SCA), SBOM generation, STRIDE threat modeling.

Responsibilities

• Design and implement Azure DevOps multi-stage YAML pipelines and migrate source-control from GitLab/SVN/Bitbucket to Azure DevOps Git.
• Containerize and manage build/scan workflows using Docker, AKS, and Azure Container Registry.
• Embed threat modeling, Snyk scanning, SBOM generation into pipelines for CRA/IEC 62443-4-1 compliant evidence.
• Harden pipelines by moving secrets to Azure Key Vault and enforcing least-privilege access.
• Ensure audit-trail artifacts for CRA Annex VII and maintain traceability with Jira/ADO.

Skills

CI/CD engineering

Threat modeling

Security

Azure DevOps

Snyk

Security mindset

Tools

Azure DevOps Pipelines

Git-based migrations

Docker

Kubernetes

Snyk

SBOM tooling (CycloneDX/SBOM)

Job description

Doble Engineering seeks a contractor to migrate and fortify desktop/firmware CI pipelines into a unified Azure DevOps environment. You will embed threat modeling, Snyk scanning, and SBOM generation as standard in pipelines to meet CRA and IEC 62443-4-1 secure-SDLC requirements.

You will design multi-stage YAML pipelines, migrate from GitLab/SVN/Bitbucket to Azure DevOps Git, and containerize workflows with Docker and AKS. Expect collaboration with embedded/OT teams and a six-month engagement.