Principle DevOps Engineer (Medical Devices & Embedded Systems)

Digitive; Waltham (MA); On-site; USD 110,000 - 160,000; Full time

Job summary

Digitive is seeking an experienced engineer to strengthen secure development practices for embedded hardware. You will architect and optimize CI/CD pipelines, configure firmware builds, and integrate static analysis within the toolchain.

Regulatory awareness and rigorous validation processes are essential for this role. The ideal candidate brings deep DevSecOps experience, scripting skills, and hands-on work with SonarQube, Docker, and common build systems to ensure compliant, efficient software

Qualifications

• Strong knowledge of secure software development and threat modeling.
• Experience with CI/CD and DevSecOps tooling in deployment workflows.
• Hands-on with embedded build environments and build automation.

Responsibilities

• Architect and manage CI/CD pipelines and developer toolchains.
• Configure firmware/software builds for embedded hardware targets.
• Integrate static analysis tools and automated testing in CI.
• Ensure tool validation and compliance under medical/regulated frameworks.
• Document validation plans and generate technical validation reports.

Skills

Security practices

Threat modeling

DevSecOps tools

CI/CD tooling

Embedded build environments

Build automation

Static analysis tooling

Regulatory awareness

Scripting

Tools

Jenkins

GitLab CI

GitHub Actions

Azure DevOps

CMake

Make

Docker

GCC/Clang

SonarQube

Coverity

Klocwork

Cppcheck

Job description

• Strong foundational knowledge of general security practices, threat modeling, and DevSecOps tools (e.g., SonarQube, Black Duck SCA, Artifactory, GitHub Enterprise, and Jenkins) embedded within deployment workflows.
• DevOps Expertise: Strong experience setting up and managing CI/CD tools (e.g., Jenkins, GitLab CI, GitHub Actions, or Azure DevOps).
• Embedded Software Build Environments: Hands-on experience with build automation tools (e.g., CMake, Make, Docker, GCC/Clang toolchains) for embedded or hardware-centric systems.
• Quality Tools Integration: Experience integrating static analysis tools (e.g., SonarQube, Coverity, Klocwork, or Cppcheck).
• Regulatory Awareness: Familiarity with regulated industry standards (e.g., ISO 13485, IEC 62304, FDA 21 CFR Part 11) and formal tool validation processes.
• Scripting Skills: Proficiency in scripting languages such as Python, Bash, or PowerShell for build and task automation.

Job Responsibilities

• CI/CD Pipeline Management: Architect, optimize, and manage continuous integration and deployment (CI/CD) pipelines and developer toolchains.
• Embedded Build Systems: Configure and automate firmware/software builds specifically for target hardware and embedded device environments.
• Quality & Static Analysis: Integrate and maintain static code analysis tools, liners, and automated testing suites within the CI toolchain.
• Validation & Compliance: Ensure all build tools, environments, and pipeline components meet software tool validation requirements under medical device regulatory frameworks.
• Documentation & Reporting: Execute approved validation plans and generate technical validation reports required for regulatory audits.