Position Title: DevOps Platform Engineer
About the Job
The DevOps Platform Engineer builds and operates the shared engineering tooling that product teams use to build, test, secure, deploy, and run applications. This is a hands-on engineering role at the center of how software is delivered across the enterprise.
The platform is run both as an internal product and as a managed service. Engineers in this role design reusable pipelines, golden paths, and self-service capabilities, then support them in production against defined service levels. The emphasis is on removing manual steps and ticket-based provisioning so that product teams can move quickly on a paved road that is secure and compliant by default.
In a regulated pharmaceutical and healthcare environment, the DevOps Platform Engineer also ensures that all platform activities adhere to compliance, audit, and data integrity standards (including GxP, 21 CFR Part 11, and SOX where applicable).
The role operates across Microsoft Azure and Amazon Web Services, with cloud-agnostic tooling — GitHub, Terraform, and Kubernetes — as the strategic core.
What You Will Be Doing
CI/CD and Delivery Pipelines
- Design, build, and maintain reusable CI/CD pipelines and pipeline templates using GitHub Actions and Azure DevOps.
- Consolidate and migrate legacy Jenkins and GitLab pipelines onto the strategic toolchain.
- Integrate automated testing, code quality, and security scanning into every stage of the delivery lifecycle.
Infrastructure as Code and Cloud Automation
- Build and maintain Terraform modules and Ansible content for repeatable, peer-reviewed infrastructure provisioning across Azure and AWS.
- Implement policy as code to enforce security, tagging, cost, and configuration standards at deployment time.
- Replace ticket-based requests with self-service automation that product teams can consume directly.
Container and Kubernetes Platforms
- Engineer and operate container platforms on Kubernetes, AKS, EKS, and OpenShift.
- Build and maintain Helm charts, GitOps workflows, ingress, autoscaling, and workload onboarding patterns.
- Support product teams containerizing and migrating applications onto the platform.
Developer Experience and Self-Service
- Contribute to the internal developer platform and developer portal, including Backstage templates, scaffolding, and golden paths.
- Write and maintain clear documentation, reference implementations, and onboarding guides.
- Turn recurring pain points raised by product teams into prioritized platform improvements.
Security, Compliance, and Supply Chain
- Embed static and dynamic analysis, dependency scanning, and SBOM generation into pipelines using SonarQube, Snyk, and equivalent tooling.
- Implement secrets and certificate management using HashiCorp Vault, CyberArk, and cloud-native key services.
- Remediate vulnerabilities and misconfigurations surfaced by cloud security posture tooling.
Reliability and Operational Support
- Own the availability, performance, and capacity of the platform services in scope.
- Instrument platform services using Datadog, Dynatrace, Prometheus, Grafana, Splunk, and OpenTelemetry.
- Contribute to incident response, root-cause analysis, problem management, and corrective actions.
Technical Craft and Engineering Practices
- Write clean, tested, peer-reviewed automation code managed in Git using trunk-based practices.
- Use AI-assisted engineering tools such as GitHub Copilot and Claude Code to accelerate development, testing, and documentation, applying appropriate review and technical judgement.
- Continuously reduce toil, technical debt, and duplication across the platform estate.
Collaboration and Ways of Working
- Work within an agile product team with a shared backlog, defined customers, and service-level objectives.
- Partner with Cybersecurity, Cloud, Architecture, and Operations teams on approved engineering patterns.
- Mentor less experienced engineers and share knowledge through demonstrations, guilds, and documentation.
About You
Required
- Demonstrated capability in DevOps, platform, or cloud engineering, typically gained across five to eight years of professional experience.
- Strong hands-on experience with CI/CD tooling, ideally GitHub Actions or Azure DevOps.
- Practical Infrastructure as Code experience with Terraform, together with configuration management using Ansible.
- Production experience with Kubernetes and application containerization.
- Working knowledge of at least one major public cloud, with exposure to a second.
- Proficiency in at least one scripting or programming language such as Python, Bash, Go, or PowerShell.
- Experience integrating security and quality controls into automated pipelines.
- Clear written and verbal communication in English.
Preferred
- Experience with OpenShift, Backstage or another developer portal, and GitOps tooling such as Argo CD or Flux.
- Experience with observability platforms including Datadog, Dynatrace, Prometheus, Grafana, Splunk, Cribl, or Observe.
- Experience with policy as code, software supply-chain security, DevSecOps, SRE, or FinOps practices.
- Experience delivering within a validated, GxP, or otherwise regulated environment, including awareness of data-protection obligations such as GDPR.
- Certifications such as AWS or Azure associate or professional level, Certified Kubernetes Administrator or Application Developer, or HashiCorp Terraform Associate.
- A bachelor's degree in computer science, engineering, information technology, or a related discipline.
Core Competencies
- Automation-first and API-first mindset
- Strong engineering discipline and attention to quality
- Customer focus toward internal engineering teams
- Pragmatic problem-solving under production pressure
- Bias toward reuse, simplification, and standardization
- Collaborative and generous with knowledge
- Continuous learning and adaptability
Measures of Success
- Reduced application onboarding and deployment lead time
- Increased deployment frequency and change success rate
- Increased adoption of standardized pipelines and golden paths
- Reduced manual provisioning and platform ticket volumes
- Improved platform availability and developer satisfaction
- Reduced vulnerabilities, security findings, and audit exceptions
- Increased automation coverage, reuse, and engineering productivity
Pursue progress, discover extraordinary
Better is out there. Better medications, better outcomes, better science. But progress doesn’t happen without people – people from different backgrounds, in different locations, doing different roles, all united by one thing: a desire to make miracles happen. So, let’s be those people.
At Sanofi, we provide equal opportunities to all regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, ability or gender identity.
Watch our ALL IN video and check out our Diversity Equity and Inclusion actions at sanofi.com!