IIoT DevOps Engineer

IIoT DevOps Engineer Location: Barcelona, Spain About the job Sanofi’s Digital Manufacturing & Supply “Solution Engineering & Delivery” organization is responsible for creating and maintaining digital solutions which are used on Sanofi industrial sites to manage manufacturing, quality and administrative processes. The Plant Connectivity team works within this group to define, deploy and support an architecture able to collect, store and contextualize production equipment data. These production equipment data (time series) are then consumed by digital apps aiming to enhance production quality and/or efficiency. Our capability to capture and expose this times series data is critical. Connecting OT world (Operational Technology) to digital application is challenging due to Cybersecurity requirement, huge volume of data, real time and diversity of the equipment to connect. IIoT data management will be a key area to succeed our “Factory of the Future” journey. We need to manage IIoT data in a consistent and robust way from the sensor (at plant level) up to the cloud data platform. Our IIoT platform is designed to scale across multiple sites using a reusable core model and a governed deployment approach. The main principle is “build once, deploy many”. The platform uses Ignition at the edge and AWS SiteWise and cloud services for data storage and integration. Strong focus is placed on governance, security, and validation readiness We are looking for a skilled IIoT DevOps Engineer to join our team. He/She owns CI/CD pipelines, release orchestration, and DevSecOps controls to enable repeatable, auditable, and scalable deployments across sites, for both : Core platform components: Shared services, cloud historian, integrations Site-level deployments: Ignition configurations, gateways, edge services, and site-specific customizations In a regulated (GxP) environment, the role ensures the CI/CD process produces validation-ready evidence, maintains full traceability from change request to deployment, and supports change control and audit requirements. RESPONSIBILITIES CI/CD pipeline architecture and engineering Design, implement and maintain CI/CD pipelines to build, test, package, and deploy IIoT platform assets Define and maintain branching strategy, versioning rules (platform vs site), and artifact promotion flows Implement and maintain deployment strategies based on component needs: Blue/green, canary, or phased rollout where relevant Rollback and forward-fix patterns Controlled releases aligned with validation and change control Git-based configuration management Define and maintain Git workflows for: Ignition project and configuration versioning (including Ignition 8.3 Git patterns when relevant) Infrastructure as Code (IaC) and platform configuration Site-specific overlays and parameterization, while protecting the reusable core Improve developer experience through templates, scaffolding, repository standards, and documentation DevSecOps and compliance by design Integrate security and quality controls into pipelines, including: Static analysis and code quality gates (e.g., SonarQube) Dependency and container vulnerability scanning Secrets management and prevention of credential leakage Policy-as-code checks for infrastructure and Kubernetes manifests Ensure CI/CD artifacts and logs meet audit trail and validation evidence requirements Enable traceability from requirements and change requests to commits, builds, releases, and deployments, including approvals when required Release orchestration across cloud and edge Implement and operate release orchestration for Kubernetes-based services and workflow engines (e.g., Argo Workflows, Argo CD when relevant) Coordinate releases across: Cloud services (AWS) Edge environments (plant connectivity) Hybrid integrations and data pipelines Environment strategy, operations, and observability Define and maintain environment standards. Naming, access control, and separation of duties Ensure pipelines enforce these standards Embed observability into the delivery lifecycle: Pipeline metrics. Failure rates, lead time, deployment frequency Deployment health checks and SLO inputs Build and maintain operational documentation: runbooks, troubleshooting guides, incident handoffs, and release definition of done Collaboration, governance, and enablement Work with Platform Owners, Quality and Validation, Cybersecurity, and Site teams to align on delivery policies and RACI Support internal teams and SI partners to adopt the delivery model consistently Contribute to platform governance. Enable controlled autonomy while maintaining scalability across sites REQUIREMENTS & QUALIFICATIONS Experience & knowledge 5+ years of experience in DevOps, CI/CD, or Platform Engineering roles Hands-on experience building CI/CD pipelines. Ability to work across architecture, security, validation, and engineering teams Knowledge on Agile methodology Experience in regulated environments (Pharma / biological, medical devices, or similar GxP context) is a plus Experience designing platform plus site customization models for multi-site deployment is a plus Technologies and Techniques GitHub Actions or equivalent tools Strong Git fundamentals and experience with branching and versioning at scale Experience with Infrastructure as Code, ideally Terraform Experience with containers and Kubernetes ; packaging, deployment, troubleshooting Experience with industrial systems (SCADA, MES, IIoT, or edge-to-cloud architectures) is a plus As a plus, familiarity with : Ignition (Inductive Automation) AWS IoT services: IoT Core, SiteWise Artifact repositories such as JFrog Artifactory Enterprise security and code scanning tools Core Competencies Systems thinking: Ability to design delivery flows across edge, cloud, and multiple teams Clear communication and documentation: Decisions are easy to understand and reuse Risk-based mindset: Balances speed with compliance and safety Operational discipline: Treats CI/CD as a product with monitoring and continuous improvement Ability to work in a team environment. Conflict resolution and problem solving Ability to collaborate and build effective network inside and outside Sanofi Ability to challenge, open minded and active listening Ability to evaluate processes/solutions to improve performance and drive continuous improvement Fluent in English (verbal, written) TERMS OF EMPLOYMENT This job requires collaboration in a global and agile environment, with international business and Digital teams, involving multiple stakeholders English is the usual working