Engineer III, Software

Work Schedule First Shift (Days) Environmental Conditions Office Job Description Job Title   DevOps   Engineer (Build & Secure Packaging)   Job Description   When you join us at Thermo Fisher Scientific, you’ll become a member of a hard-working, motivated team that aligns with your enthusiasm for exploration and discovery. With revenues exceeding $40 billion and the largest investment in R&D in the industry, we provide our people with resources and opportunities to make significant contributions to the world.   How will you make an impact   Work on backend platform software that powers advanced scientific instruments used in semiconductor s , life sciences, and materials research .   We are seeking a Python   DevOps   Engineer with 6–10 years of professional experience to develop secure, reliable automation frameworks   based on Python, supported by PowerShell   environments.   This role supports enterprise build automation, Python packaging, SBOM integration, and secure artifact publishing within a regulated environment. The position operates at the intersection of Engineering, DevOps, and Security to ensure compliant, traceable, and reproducible software distribution.     What will you do    Design and implement scalable Python components, refactor them strategically. Ensure reliable error handling and propagation across scripting environments.    Safeguard Code Quality, builds test strategy; enforces coverage gates                  Automate Python packaging and build artifact generation using PyPI and Conda standards. Ensure security, traceability, and compliance with distributed Python packages.    Builds robust PowerShell scripts, including unittests (using Pester).    Collaborate with Development and CI/CD teams to automate artifact publishing and enforce compliance standards.    Maintain documentation and support troubleshooting of packaging and dependency workflows.    On Cyber Security, perform security code reviews, threat awareness. Implements automated scanning (SCA, CVE monitoring); manages SBOM. Integrate secrets into CI/CD securely .   Effectively contributes to planning and execution by delivering well-defined, traceable assignments, aligned with team objectives.

Strong Python   , PowerShell   and   Shell Scripting/Bash   scripting expertise.    Experience with Anaconda/Miniconda and conda package management.    Experience in build ing   automation and configuration file generation.    Experience with Python packaging standards (pyproject.toml, conda-build, meta.yaml).    Experience with   CI/CD tools   such as Jenkins, GitHub Actions, GitLab CI, or similar    Strong understanding of   build and deployment automation   Experience in   Containerization using Docker .   Experience implementing observability (monitoring, logging, alerting) to support reliability and operational excellence.   Understanding SBOM concepts, software licensing, and vulnerability management.    Strong troubleshooting skills and attention to detail.    Drives DevSecOps outcomes through security-focused code reviews and threat awareness, automated scanning (SCA/CVE monitoring) with SBOM generation/management.     Ensures secure CI/CD by integrating secrets safely, enforcing signed artifacts and hardened pipelines, and hardening base images to minimize attack surface.     Desirable Skills     Experience in scientific, engineering, or highly regulated industries.    Apply strong Python code quality practices for automation scripts, including linting (Pylint/Flake8) and static typing (mypy).   Familiarity with Windows process management and scripting environments.    Experience supporting enterprise software distribution.    Exposure to Agentic AI concepts, including practical usage of GitHub Copilot (GHCP) or similar AI-assisted development tools to enhance automation, scripting, and developer productivity.