Senior Software DevSecOps Engineer - CST - Lafayette, CO (Onsite) at Medtronic in Lafayette, Colorado

Job Description:

C areers That Change Lives

In this exciting role as a Senior Software Dev Sec Ops Enginee r , you'll play a key role in the design and implementation of a continuous security strategy for the Enabling Technologies software organization .

You're open to learning new technologies and methodologies, appreciate a fast-paced learning environment, and enjoy working on a DevOps team that's embracing initiatives across multiple sites . This is an exciting opportunity for self-motivated engineers to work collaboratively to solve problems in complex environments .

You embrace the Medtronic M indset :

• Act boldly : Seizing on opportunities to experiment, optimize and disrupt
• Compete to win : Being proactive to solve problems
• Move with speed and decisiveness : Work together and learn fast, making thoughtful decisions and partnering across reporting structures
• Foster belonging : Collaborative team culture, learning together, promoting team cohesion
• Deliver results the right way : Quality first and customer centric

You will work closely with the software development and product security teams , as well as your cross-functional partners , in an Agile environment (Scrum). You will plan program increments with your DevOps counterparts to create security objectives that support the overall goal of implementing robust security measures into the continuous integration pipeline . You will provide solutions that require the regular use of ingenuity and creativity and work is performed under only general direction to determine technical objectives of assignments

Impact patient outcomes . Come for a job, stay for a career.

A Day in the Life

The Senior Dev Sec Ops Engineerrole is a hands-on role, focused on enhancing product security and building security into our CI/CD pipelines. You will collaborate with internal stakeholders and our leadership team to identify and evaluate new technologies and tools to continuously improve our automation processes.

You will :

• Work with the software , product security, test , and systems engineering teams to identify requirements for a fully automated continuous build, test , deployment and monitoring pipeline
• Contribute to the architecture, design, and development of new technologies in our CI/CD pipelines to maximize security, efficiency and reliability of the build
• Participate in design reviews to support a focus on our d eployment strategy , as we continue our pursuits of a web-based architecture (REST) for our clinical application .
• Architect and implement Dev Sec Ops tooling such as JFrog Xray, TeamCity , Sonar Qube , GitLab and Artifactory to support continuous integration and self-service
• Plan and deliver using Agile methodologies
• Be vigilant to automate routine work and enable other groups through self-service
• Develop and maintain sound version control best practices, including branching and merging strategies
• Implement strategies for CI unit test integration
• Work with leadership and development teams to establish best pract ices and common tools
• Build security and DevOps relationships across Medtronic operating units to share knowledge and solutions

Must Have: Minimum Requirements

• Bachelors' degree in Computer Science or similar Engineering Discipline and 4+ years of experience in development
• Or an advanced degree in Computer Science or similar Engineering Discipline and 2+ years of experience in development
• Experience with security tooling (JFrog Xray, CycloneDX)
• Proficiency with Linux and developing/scripting in a Linux environment.
• Programming experience - C++, JavaScript (Node is a plus), Python, React / Redux
• Version control expertise using Git-based source control tools (GitLab is a plus)
• Experience with automation tooling - Ansible, Packer, Terraform, etc.
• Experience with containerization tools and infrastructure, including Docker and Podman
• Comfort working in an environment with virtual machine deployments based on VMWare / vCenter / vSphere.
• Experience with deployment and maintenance of cloud-hosted DevOps services to support an initiative of minimizing our on-prem footprint.
• Experience with CI/CD pipeline design and architecture.
• Experience working independently across sprint teams to build and solve requirements.
• Excellent oral and written communication skills
• Proficiency with evaluating new DevOps toolsets in support of continuous improvement.

• CISM, CISSP, or other security certifications
• Experience in C++ and/or C# with .NET framework.
• Experience working with Debian OSS tooling and software.
• Experience managing and automating infrastructure in the cloud.
• Experience working in a data center environment for maintenance and install of on-prem server hardware.
• Experience with supporting Web Applications - Web servers, monitoring, networking.
• System integration and scripting expertise.
• Server monitoring and maintenance tools.
• Auditing and Compliance Certifications such as CISA, PCI-ISA, and PCIP.

Together, we can change healthcare worldwide. At Medtronic, we push the limits of what technology, therapies and services can do to help alleviate pain, restore health and extend life. We challenge ourselves and each other to make tomorrow better than yesterday. It is what makes this an exciting and rewarding place to be.

We want to accelerate and advance our ability to create meaningful innovations - but we will only succeed with the right people on our team. Let's work together to address universal healthcare needs and improve patients' lives. Help us shape the future.

Physical Job Requirements
The physical demands described within the Responsibilities section of this job description are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. For Office Roles: While performing the duties of this job, the employee is regularly required to be independently mobile. The employee is also required to interact with a computer and communicate with peers and co-workers. Contact your manager or local HR to understand the Work Conditions and Physical requirements that may be specific to each role. (ADA-United States of America).

Additional Information

• Travel: 10% or less