Staff DevOps Engineer

Nova Biomedical • Waltham, MA

1d • Hybrid

About The Position

The Staff DevOps Engineer provides senior-level technical leadership for cloud infrastructure, deployment automation, DevSecOps practices, and software delivery systems supporting regulated medical device platforms. The role designs, implements, and maintains secure, scalable, and resilient cloud environments while supporting embedded Linux platforms, connected medical devices, cloud-native services, and healthcare interoperability solutions. The position calls for deep expertise in AWS, Infrastructure as Code, CI/CD automation, security, and compliance in highly regulated software development environments.

The role works with connectivity and software teams on deployment topologies for device management platforms, middleware, LIS/HIS interfaces, and cloud-native APIs in networked hospital environments. It also provides technical guidance and mentorship to cross-functional engineering teams without primary people-management responsibility. The position is based in Waltham, Massachusetts, with hybrid and flexible work arrangements noted among the company’s offerings. The stated targeted salary range is $125,000–$170,000 per year.

The work may take place in a laboratory environment, with possible exposure to chemicals or biological materials. Physical requirements include extended periods of standing or sitting, handling laboratory equipment and instrumentation, carrying up to 25 pounds, repetitive tasks, use of PPE, and occasional bending, reaching, or movement within the lab.

Requirements

• At least 8 years of experience in DevOps, Site Reliability Engineering, or Software Engineering.
• Hands-on experience building and managing cloud environments for regulated medical devices, healthcare, diagnostics, or similarly controlled environments.
• Familiarity with medical device software compliance standards, including IEC 62304, ISO 13485, FDA 21 CFR Part 11, and IVDR, as they relate to software release lifecycle, risk management, and design controls.
• Demonstrated mastery of AWS, including EC2, EKS/ECS, IAM, VPC, RDS, Route53, and cloud security frameworks.
• Strong foundational knowledge of security practices, threat modeling, and DevSecOps tools.
• Proven expertise implementing Infrastructure as Code.
• Deep understanding of DevOps principles, Docker and Kubernetes containerization, Ansible configuration management, and Linux system administration, particularly embedded Linux platforms and firmware integration.
• Experience configuring and maintaining enterprise CI/CD systems, log analysis pipelines, and automated test-evidence generation in regulated development workflows.
• Strong analytical, problem-solving, communication, and technical leadership skills.
• Bachelor’s degree in Computer Science, Software Engineering, Information Technology, Electrical Engineering, or a related technical discipline; equivalent combinations of education and relevant experience may be considered.

Nice To Haves

• Hands-on working knowledge of Pulumi is highly preferred.
• Strong familiarity with Terraform and CloudFormation.
• Experience with security and DevSecOps tools such as SonarQube, Black Duck SCA, Artifactory, GitHub Enterprise, and Jenkins.
• Experience with CI/CD systems such as Jenkins, GitLab CI/CD, or Azure DevOps.
• Experience with ELK and Splunk log analysis pipelines.
• AWS certifications and DevOps-related certifications are preferred.

Responsibilities

• Implement scalable, secure, and resilient AWS cloud infrastructure in alignment with regulatory standards including IEC 62304, ISO 13485, and FDA 21 CFR Part 11.
• Design, implement, and maintain Infrastructure as Code architectures to automate environment provisioning.
• Integrate automated security compliance, vulnerability scanning, code analysis, and certificate management into build and deployment lifecycles.
• Build, optimize, and maintain automated CI/CD pipelines supporting embedded Linux builds, firmware compilation, web applications, and API service deployments.
• Collaborate with connectivity and software teams on deployment topologies for device management platforms, middleware, LIS/HIS interfaces, and cloud-native APIs in networked hospital environments.
• Implement automated data-integrity safeguards, error-handling monitoring, log aggregation, and real-time monitoring, alerting, and tracing across staging and production environments.
• Maintain compliance, documentation, and end-to-end traceability of configuration changes, environment baselines, and release evidence using ALM and issue-tracking tools.
• Provide technical guidance, mentorship, peer reviews, and DevOps best-practice leadership to cross-functional engineering teams without primary people-management responsibility.
• Communicate infrastructure risks, deployment blockers, security vulnerabilities, and release-readiness trends to engineering leadership and stakeholders.
• Perform other duties as assigned.

Benefits

• Flexible medical, dental, and vision coverage.
• Competitive 401(k) company match.
• Bonus program.
• Generous paid time off and paid holidays.
• Tuition reimbursement.
• Hybrid and flexible work arrangements.
• Professional development, engagement, and events.
• Company marketplace for lunch and snacks at the Norwood, Billerica, and Westbrook offices.
• Company-subsidized cafeteria at the Waltham office.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior