IIoT DevOps Engineer

• Location: Barcelona, Spain

About the job

Sanofi’s Digital Manufacturing & Supply “Solution Engineering & Delivery” organization is responsible for creating and maintaining digital solutions which are used on Sanofi industrial sites to manage manufacturing, quality and administrative processes.

The Plant Connectivity team works within this group to define, deploy and support an architecture able to collect, store and contextualize production equipment data. These production equipment data (time series) are then consumed by digital apps aiming to enhance production quality and/or efficiency.

Our capability to capture and expose this times series data is critical.

Connecting OT world (Operational Technology) to digital application is challenging due to Cybersecurity requirement, huge volume of data, real time and diversity of the equipment to connect. IIoT data management will be a key area to succeed our “Factory of the Future” journey. We need to manage IIoT data in a consistent and robust way from the sensor (at plant level) up to the cloud data platform.

Our IIoT platform is designed to scale across multiple sites using a reusable core model and a governed deployment approach. The main principle is “build once, deploy many”. The platform uses Ignition at the edge and AWS SiteWise and cloud services for data storage and integration. Strong focus is placed on governance, security, and validation readiness

We are looking for a skilled IIoT DevOps Engineer to join our team. He/She owns CI/CD pipelines, release orchestration, and DevSecOps controls to enable repeatable, auditable, and scalable deployments across sites, for both :

• Core platform components: Shared services, cloud historian, integrations

• Site-level deployments: Ignition configurations, gateways, edge services, and site-specific customizations

In a regulated (GxP) environment, the role ensures the CI/CD process produces validation-ready evidence, maintains full traceability from change request to deployment, and supports change control and audit requirements.

RESPONSIBILITIES

CI/CD pipeline architecture and engineering

• Design, implement and maintain CI/CD pipelines to build, test, package, and deploy IIoT platform assets

• Define and maintain branching strategy, versioning rules (platform vs site), and artifact promotion flows

• Implement and maintain deployment strategies based on component needs:

  • Blue/green, canary, or phased rollout where relevant
  • Rollback and forward-fix patterns
  • Controlled releases aligned with validation and change control

Git-based configuration management

• Define and maintain Git workflows for:

  • Ignition project and configuration versioning (including Ignition 8.3 Git patterns when relevant)
  • Infrastructure as Code (IaC) and platform configuration
  • Site-specific overlays and parameterization, while protecting the reusable core

• Improve developer experience through templates, scaffolding, repository standards, and documentation

DevSecOps and compliance by design

• Integrate security and quality controls into pipelines, including:

  • Static analysis and code quality gates (e.g., SonarQube)
  • Dependency and container vulnerability scanning
  • Secrets management and prevention of credential leakage
  • Policy-as-code checks for infrastructure and Kubernetes manifests

• Ensure CI/CD artifacts and logs meet audit trail and validation evidence requirements

• Enable traceability from requirements and change requests to commits, builds, releases, and deployments, including approvals when required

Release orchestration across cloud and edge

• Implement and operate release orchestration for Kubernetes-based services and workflow engines (e.g., Argo Workflows, Argo CD when relevant)

• Coordinate releases across:

  • Cloud services (AWS)
  • Edge environments (plant connectivity)
  • Hybrid integrations and data pipelines

Environment strategy, operations, and observability

• Define and maintain environment standards. Naming, access control, and separation of duties

• Ensure pipelines enforce these standards

• Embed observability into the delivery lifecycle:

  • Pipeline metrics. Failure rates, lead time, deployment frequency
  • Deployment health checks and SLO inputs

• Build and maintain operational documentation: runbooks, troubleshooting guides, incident handoffs, and release definition of done

Collaboration, governance, and enablement

• Work with Platform Owners, Quality and Validation, Cybersecurity, and Site teams to align on delivery policies and RACI

• Support internal teams and SI partners to adopt the delivery model consistently

• Contribute to platform governance. Enable controlled autonomy while maintaining scalability across sites

REQUIREMENTS & QUALIFICATIONS

Experience & knowledge

• 5+ years of experience in DevOps, CI/CD, or Platform Engineering roles

• Hands-on experience building CI/CD pipelines.

• Ability to work across architecture, security, validation, and engineering teams

• Knowledge on Agile methodology

• Experience in regulated environments (Pharma / biological, medical devices, or similar GxP context) is a plus

• Experience designing platform plus site customization models for multi-site deployment is a plus

Technologies and Techniques

• GitHub Actions or equivalent tools

• Strong Git fundamentals and experience with branching and versioning at scale

• Experience with Infrastructure as Code, ideally Terraform

• Experience with containers and Kubernetes ; packaging, deployment, troubleshooting

• Experience with industrial systems (SCADA, MES, IIoT, or edge-to-cloud architectures) is a plus

• As a plus, familiarity with :

  • Ignition (Inductive Automation)
  • AWS IoT services: IoT Core, SiteWise
  • Artifact repositories such as JFrog Artifactory
  • Enterprise security and code scanning tools

Core Competencies

• Systems thinking: Ability to design delivery flows across edge, cloud, and multiple teams

• Clear communication and documentation: Decisions are easy to understand and reuse

• Risk-based mindset: Balances speed with compliance and safety

• Operational discipline: Treats CI/CD as a product with monitoring and continuous improvement

• Ability to work in a team environment.

• Conflict resolution and problem solving

• Ability to collaborate and build effective network inside and outside Sanofi

• Ability to challenge, open minded and active listening

• Ability to evaluate processes/solutions to improve performance and drive continuous improvement

• Fluent in English (verbal, written)

TERMS OF EMPLOYMENT

• This job requires collaboration in a global and agile environment, with international business and Digital teams, involving multiple stakeholders

• English is the usual working language

• This job requires occasional business trips to other Sanofi sites

LOCATION INFORMATION

This position is based in Barcelona, Spain.

WHY CHOOSE US ?

• We provide a highly collaborative environment, with an opportunity to work with a world-class team.

• Contribute to a company that is a leader in healthcare and a pioneer in digital transformation, shaping the future of global health.

• Bring the miracles of science to life alongside a supportive, future-focused team.

• Discover endless opportunities to grow your talent and drive your career, whether through a promotion or lateral move, at home or internationally.

• Enjoy a thoughtful, well-crafted rewards package that recognises your contribution and amplifies your impact.

• Take good care of yourself and your family with a wide range of health and wellbeing benefits, including high-quality healthcare, prevention and wellness programs, and at least 14 weeks of gender-neutral parental leave.

#LI-Hybrid #BarcelonaHub #SanofiHubs