Engineer III, Software

Job Title

DevOpsEngineer (Build & Secure Packaging)

When you join us at Thermo Fisher Scientific, you'll become a member of a hard-working, motivated team that aligns with your enthusiasm for exploration and discovery. With revenues exceeding $40 billion and the largest investment in R&D in the industry, we provide our people with resources and opportunities to make significant contributions to the world.

How will you make an impact

Work on backend platform software that powers advanced scientific instruments used in semiconductors, life sciences, and materials research.We are seeking a PythonDevOpsEngineer with 6-10 years of professional experience to develop secure, reliable automation frameworksbased on Python, supported by PowerShellenvironments.

This role supports enterprise build automation, Python packaging, SBOM integration, and secure artifact publishing within a regulated environment. The position operates at the intersection of Engineering, DevOps, and Security to ensure compliant, traceable, and reproducible software distribution.

What will you do

• Design and implement scalable Python components, refactor them strategically. Ensure reliable error handling and propagation across scripting environments.

• Safeguard Code Quality, builds test strategy enforces coverage gates

• Automate Python packaging and build artifact generation using PyPI and Conda standards. Ensure security, traceability, and compliance with distributed Python packages.

• Builds robust PowerShell scripts, including unittests (using Pester).

• Collaborate with Development and CI/CD teams to automate artifact publishing and enforce compliance standards.

• Maintain documentation and support troubleshooting of packaging and dependency workflows.

• On Cyber Security, perform security code reviews, threat awareness. Implements automated scanning (SCA, CVE monitoring) manages SBOM. Integrate secrets into CI/CD securely.

• Effectively contributes to planning and execution by delivering well-defined, traceable assignments, aligned with team objectives.
  

Required Skills

• Strong Python,PowerShellandShell Scripting/Bashscripting expertise.

• Experience with Anaconda/Miniconda and conda package management.

• Experience in buildingautomation and configuration file generation.

• Experience with Python packaging standards (pyproject.toml, conda-build, meta.yaml).

• Experience withCI/CD toolssuch as Jenkins, GitHub Actions, GitLab CI, or similar

• Strong understanding ofbuild and deployment automation

• Experience inContainerization using Docker.

• Experience implementing observability (monitoring, logging, alerting) to support reliability and operational excellence.

• Understanding SBOM concepts, software licensing, and vulnerability management.

• Strong troubleshooting skills and attention to detail.

• Drives DevSecOps outcomes through security-focused code reviews and threat awareness, automated scanning (SCA/CVE monitoring) with SBOM generation/management.

• Ensures secure CI/CD by integrating secrets safely, enforcing signed artifacts and hardened pipelines, and hardening base images to minimize attack surface.

Desirable Skills

• Experience in scientific, engineering, or highly regulated industries.

• Apply strong Python code quality practices for automation scripts, including linting (Pylint/Flake8) and static typing (mypy).

• Familiarity with Windows process management and scripting environments.

• Experience supporting enterprise software distribution.

• Exposure to Agentic AI concepts, including practical usage of GitHub Copilot (GHCP) or similar AI-assisted development tools to enhance automation, scripting, and developer productivity.

• Experience working in an agile environment like SAFe, using Jira.

Preferred Qualifications

• BTech degree in Computer Science, Electronics, or a related technical field (or equivalent practical experience).

• Experience operating in regulated or security-focused environments require auditability and traceability.