IIoT DevOps Engineer - Location Barcelona Spain About the job Sanofis Digital Manufacturing Supply Solution Engineering Delivery organization is responsible for creating and maintaining digital solutions which are used on Sanofi industrial sites to manage manufacturing quality and administrative processes. The Plant Connectivity team works within this group to define deploy and support an architecture able to collect store and contextualize production equipment data. These production equipment data (time series) are then consumed by digital apps aiming to enhance production quality and/or efficiency. Our capability to capture and expose this times series data is critical. Connecting OT world (Operational Technology) to digital application is challenging due to Cybersecurity requirement huge volume of data real time and diversity of the equipment to connect. IIoT data management will be a key area to succeed our Factory of the Future journey. We need to manage IIoT data in a consistent and robust way from the sensor (at plant level) up to the cloud data platform. Our IIoT platform is designed to scale across multiple sites using a reusable core model and a governed deployment approach. The main principle is build once deploy many. The platform uses Ignition at the edge and AWS SiteWise and cloud services for data storage and integration. Strong focus is placed on governance security and validation readiness We are looking for a skilled IIoT DevOps Engineer to join our team. He/She owns CI/CD pipelines release orchestration and DevSecOps controls to enable repeatable auditable and scalable deployments across sites for both - Core platform components Shared services cloud historian integrations - Site-level deployments Ignition configurations gateways edge services and site-specific customizations In a regulated (GxP) environment the role ensures the CI/CD process produces validation-ready evidence maintains full traceability from change request to deployment and supports change control and audit requirements. RESPONSIBILITIES CI/CD pipeline architecture and engineering - Design implement and maintain CI/CD pipelines to build test package and deploy IIoT platform assets - Define and maintain branching strategy versioning rules (platform vs site) and artifact promotion flows - Implement and maintain deployment strategies based on component needs - - Blue/green canary or phased rollout where relevant - Rollback and forward-fix patterns - Controlled releases aligned with validation and change control Git-based configuration management - Define and maintain Git workflows for - - Ignition project and configuration versioning (including Ignition 8.3 Git patterns when relevant) - Infrastructure as Code (IaC) and platform configuration - Site-specific overlays and parameterization while protecting the reusable core - Improve developer experience through templates scaffolding repository standards and documentation DevSecOps and compliance by design - Integrate security and quality controls into pipelines including - - Static analysis and code quality gates (e.g. SonarQube) - Dependency and container vulnerability scanning - Secrets management and prevention of credential leakage - Policy-as-code checks for infrastructure and Kubernetes manifests - Ensure CI/CD artifacts and logs meet audit trail and validation evidence requirements - Enable traceability from requirements and change requests to commits builds releases and deployments including approvals when required Release orchestration across cloud and edge - Implement and operate release orchestration for Kubernetes-based services and workflow engines (e.g. Argo Workflows Argo CD when relevant) - Coordinate releases across - - Cloud services (AWS) - Edge environments (plant connectivity) - Hybrid integrations and data pipelines Environment strategy operations and observability - Define and maintain environment standards. Naming access control and separation of duties - Ensure pipelines enforce these standards - Embed observability into the delivery lifecycle - - Pipeline metrics. Failure rates lead time deployment frequency - Deployment health checks and SLO inputs - Build and maintain operational documentation runbooks troubleshooting guides incident handoffs and release definition of done Collaboration governance and enablement - Work with Platform Owners Quality and Validation Cybersecurity and Site teams to align on delivery policies and RACI - Support internal teams and SI partners to adopt the delivery model consistently - Contribute to platform governance. Enable controlled autonomy while maintaining scalability across sites REQUIREMENTS QUALIFICATIONS Experience knowledge - 5+ years of experience in DevOps CI/CD or Platform Engineering roles - Hands-on experience building CI/CD pipelines. - Ability to work across architecture security validation and engineering teams - Knowledge on Agile methodology - Experience in regulated environments (Pharma / biological medical devices or similar GxP context) is a plus - Experience designing platform plus site customization models for multi-site deployment is a plus Technologies and Techniques - GitHub Actions or equivalent tools - Strong Git fundamentals and experience with branching and versioning at scale - Experience with Infrastructure as Code ideally Terraform - Experience with containers and Kubernetes packaging deployment troubleshooting - Experience with industrial systems (SCADA MES IIoT or edge-to-cloud architectures) is a plus - As a plus familiarity with - Ignition (Inductive Automation) - AWS IoT services IoT Core SiteWise - Artifact repositories such as JFrog Artifactory - Enterprise security and code scanning tools Core Competencies - Systems thinking Ability to design delivery flows across edge cloud and multiple teams - Clear communication and documentation Decisions are easy to understand and reuse - Risk-based mindset Balances speed with compliance and safety - Operational discipline Treats CI/CD as a product with monitoring and continuous improvement - Ability to work in a team environment. - Conflict resolution and problem solving - Ability to collaborate and build effective network inside and outside Sanofi - Ability to challenge open minded and active listening - Ability to evaluate processes/solutions to improve performance and drive continuous improvement - Fluent in English (verbal written) TERMS OF EMPLOYMENT - This job requires collaboration in a global and agile environment with international business and Digital teams involving multiple stakeholders - English is the usual working language - This job requires occasional business trips to other Sanofi sites LOCATION INFORMATION This position is based in Barcelona Spain.