Staff Engineer, Software

Job description

Work Schedule Standard (Mon-Fri) Environmental Conditions Office Job Description Job DescriptionAt Thermo Fisher Scientific, our Mission is to enable our customers to make the world healthier, cleaner and safer. We are seeking a highly experienced Staff Engineer Software - DevOps and Platform Engineering professional to provide technical leadership and hands-on engineering across DevOps, DevSecOps, AWS infrastructure, CI/CD, platform engineering, build and release systems, automation, and developer productivity. This is a senior individual contributor role requiring deep technical expertise, strong architectural thinking, ownership, leadership, and the ability to influence engineering practices across multiple teams and products. The successful candidate will be expected to solve complex engineering problems, define scalable solutions, establish technical standards, mentor engineers, evaluate emerging technologies, and drive continuous improvement across the software delivery lifecycle. Purpose of the RoleThe Staff Engineer will provide end-to-end technical ownership and architectural leadership for cloud infrastructure, CI/CD platforms, DevSecOps, build and release engineering, automation, and software delivery systems. The role will focus on building secure, reliable, scalable, cost-effective, and highly automated engineering platforms that improve software delivery speed, platform reliability, developer productivity, and operational efficiency. Key ResponsibilitiesDevOps Architecture and Technical LeadershipDefine DevOps, cloud, CI/CD, build, release, and platform architecture across multiple products and engineering teams. Design scalable, secure, reliable, maintainable, and cost-effective engineering solutions. Establish reusable architectures, frameworks, standards, and engineering best practices. Lead architecture reviews, complex technical investigations, and cross-product problem solving. Identify technical risks and drive mitigation plans before they affect delivery or operations. Provide technical direction to development, verification, automation, security, infrastructure, and release teams. Mentor engineers and raise the technical capability of the broader organization. Evaluate emerging technologies and introduce solutions that provide measurable engineering or business value. AWS Cloud and InfrastructureDesign, implement, and maintain secure and scalable AWS infrastructure across engineering environments. Apply strong hands-on expertise across compute, networking, storage, identity, security, monitoring, and automation. Design auto-scaling and on-demand build, test, and automation infrastructure. Implement Infrastructure as Code using Terraform, AWS CDK, CloudFormation, or equivalent technologies. Apply least-privilege IAM, centralized secrets management, and secure access patterns. Drive AWS cost optimization through right-sizing, auto-scaling, storage lifecycle management, cleanup, and usage monitoring. Design infrastructure for reliability, recovery, and operational continuity. CI/CD and Platform EngineeringArchitect and maintain enterprise-grade CI/CD platforms using Jenkins, GitHub Actions, and related technologies. Design reusable pipelines covering build, test, security scanning, packaging, signing, artifact publishing, deployment, and release. Standardize CI/CD patterns across repositories and reduce duplication through reusable workflows and templates. Improve build and release performance through parallel execution, caching, dependency optimization, and dynamic infrastructure. Implement self-service platform capabilities that improve developer productivity and reduce manual intervention. Ensure critical CI/CD services remain reliable, supportable, and highly available. DevSecOps and Software Supply Chain SecurityIntegrate security throughout the software development and CI/CD lifecycle. Implement centralized secrets and credential management and eliminate hardcoded or long-lived credentials where possible. Integrate automated security scanning including CodeQL, SonarQube, dependency scanning, secret scanning, and vulnerability analysis. Implement secure code signing, certificate management, and software artifact integrity controls. Support SBOM generation, dependency traceability, artifact provenance, and software supply chain security. Partner with cybersecurity and compliance teams to implement applicable security and audit requirements. AI and GenAI EngineeringEvaluate and adopt AI and GenAI tools that improve software engineering, DevOps productivity, and quality. Apply AI-assisted engineering to code development and review, CI/CD pipeline creation, infrastructure automation, log analysis, build failure diagnosis, incident troubleshooting, security analysis, test generation, and documentation. Explore agentic AI opportunities for repetitive DevOps and engineering workflows. Establish appropriate security, governance, privacy, and human-review practices for AI-generated outputs. Guide engineering teams in responsible and effective use of AI-assisted engineering tools. Reliability and ObservabilityEstablish monitoring, logging, metrics, dashboards, and alerting across engineering platforms. Monitor CI/CD availability, build performance, failure trends, deployment reliability, and infrastructure utilization. Conduct root-cause analysis for major issues and implement permanent corrective actions. Drive proactive monitoring and preventive maintenance rather than reactive support. Improve platform availability, resilience, recovery capability, and operational readiness. Build, Release, and Installer EngineeringDesign reliable and repeatable build and release processes across multiple product lines. Improve build performance and reduce developer feedback and release turnaround time. Standardize dependency management, artifact publishing, versioning, code signing, and release practices. Maintain traceability between source code, build results, security scans, artifacts, and releases. Provide expertise in Windows installer technologies such as WiX and MSI and lead modernization of legacy installer solutions. Automate installer generation, signing, packaging, and publishing through CI/CD. Technical SkillsAWS cloud architecture and services Jenkins, GitHub, and GitHub Actions CI/CD architecture and platform engineering Infrastructure as Code using Terraform, AWS CDK, CloudFormation, or equivalent Python, PowerShell, Shell, C Sharp, or Groovy Docker and containerized build environments DevSecOps, CodeQL, SonarQube, SBOM, and security scanning JFrog or equivalent artifact management platforms Code signing and certificate management Windows and Linux engineering environments Git, CMake, MSBuild, WiX, MSI, and modern build toolchains Monitoring and observability technologies Preferred experience includes Kubernetes, Amazon EKS, OpenTelemetry, GitHub Advanced Security, software supply chain security, OIDC or federated authentication, FinOps, GitOps, developer platforms, and AI or GenAI assisted engineering tools. Education and ExperienceBachelor degree in Computer Science, Software Engineering, Computer Engineering, Information Technology, or a related discipline. A Master degree is preferred but not mandatory. Typically 10 or more years of relevant experience in DevOps, software engineering, cloud engineering, SRE, infrastructure, or platform engineering. Strong experience designing and operating enterprise CI/CD and AWS environments. Demonstrated experience leading significant technical initiatives across multiple products or teams. Proven ability to independently solve complex technical and architectural problems. Leadership ExpectationsDemonstrate strong technical ownership, accountability, and engineering judgment. Define architecture and technical direction across multiple teams and products. Influence decisions without direct authority and build alignment across global, cross-functional teams. Think in systems, identify root ca