Engineer III, Software

Job Title 

Python DevOps Engineer (Build & Secure Packaging) 

Job Description 

When you join us at Thermo Fisher Scientific, you’ll become a member of a hard-working, motivated team that aligns with your enthusiasm for exploration and discovery. With revenues exceeding $40 billion and the largest investment in R&D in the industry, we provide our people with resources and opportunities to make significant contributions to the world. 

How will you make an impact 

Work on backend platform software that powers advanced scientific instruments used in semiconductors, life sciences, and materials research. We are seeking a Python DevOps Engineer with 6–10 years of professional experience to develop secure, reliable automation frameworks based on Python, supported by PowerShell environments. 

This role supports enterprise build automation, Python packaging, SBOM integration, and secure artifact publishing within a regulated environment. The position operates at the intersection of Engineering, DevOps, and Security to ensure compliant, traceable, and reproducible software distribution. 
 
What will you do  

• Design and implement scalable Python components, refactor them strategically. Ensure reliable error handling and propagation across scripting environments.  

• Safeguard Code Quality, builds test strategy; enforces coverage gates                

• Automate Python packaging and build artifact generation using PyPI and Conda standards. Ensure security, traceability, and compliance with distributed Python packages.  

• Builds robust PowerShell scripts, including unittests (using Pester).  

• Collaborate with Development and CI/CD teams to automate artifact publishing and enforce compliance standards.  

• Maintain documentation and support troubleshooting of packaging and dependency workflows.  

• On Cyber Security, perform security code reviews, threat awareness. Implements automated scanning (SCA, CVE monitoring); manages SBOM. Integrate secrets into CI/CD securely . 

• Effectively contributes to planning and execution by delivering well-defined, traceable assignments, aligned with team objectives. 
       

Required Skills  

• Strong Python and PowerShell scripting expertise.  

• Experience with Anaconda/Miniconda and conda package management.  

• Experience in building automation and configuration file generation.  

• Experience with Python packaging standards (pyproject.toml, conda-build, meta.yaml).  

• Experience with CI/CD for python integration (preferably Jenkins) and artifact publishing workflows.  

• Ensures secure CI/CD by integrating secrets safely, enforcing signed artifacts and hardened pipelines, and hardening base images to minimize attack surface. 

• Experience in Containerization using Docker. 

• Experience implementing observability (monitoring, logging, alerting) to support reliability and operational excellence. 

• Understanding SBOM concepts, software licensing, and vulnerability management.  

• Strong troubleshooting skills and attention to detail.  

• Drives DevSecOps outcomes through security-focused code reviews and threat awareness, automated scanning (SCA/CVE monitoring) with SBOM generation/management.  

Desirable Skills  

• Experience in scientific, engineering, or highly regulated industries.  

• Apply strong Python code quality practices for automation scripts, including linting (Pylint/Flake8) and static typing (mypy). 

• Familiarity with Windows process management and scripting environments.  

• Experience supporting enterprise software distribution.  

• Exposure to Agentic AI concepts, including practical usage of GitHub Copilot (GHCP) or similar AI-assisted development tools to enhance automation, scripting, and developer productivity.  

• Experience working in an agile environment like SAFe, using Jira. 

Preferred Qualifications 

• BTech degree in Computer Science, Electronics, or a related technical field (or equivalent practical experience). 

• Experience operating in regulated or security-focused environments require auditability and traceability.