DevSecOps Engineer - Edge Platforms

Overview

We are seeking a Dev Ops Engineer specializing in Edge Deployments and Embedded Linux systems to build and operate deployment infrastructure for distributed edge platforms. The role involves designing, implementing, and maintaining tools and processes to facilitate continuous integration, delivery, and deployment through containerized workloads, Kubernetes-based orchestration, and automated device lifecycle management. Additionally, the role oversees embedded Linux and device software delivery workflows, including the build and management of OS images, patch generation, packaging, deployment, and update verification within device or edge environments.

You will work closely with development, quality assurance, system administration, and infrastructure teams to design the next generation of our edge deployment and orchestration platform, ensuring that the software development life cycle is efficient, secure, and reliable. Key responsibilities include automating repetitive tasks, reducing manual intervention, and ensuring consistent, repeatable, and secure builds and deployments. The engineer is also tasked with improving overall software product quality and reliability, ensuring compliance with relevant processes and procedures, and maintaining the security of the software supply chain.

• Design and operate infrastructure that builds, deploys and manages containerized workloads across edge device deployments.
• Architect systems for secure, reliable application delivery to remote embedded systems.
• Build and maintain tooling for device provisioning, configuration, and lifecycle management.
• Build and maintain embedded Linux BSPs and system images for ARM based edge hardware.
• Support board bring up activities, including boot loader, kernel, device tree, drivers, storage layout, and hardware validation.

• Deploy and operate Kubernetes clusters at the edge, with emphasis on K3s or other lightweight distributions.
• Design systems for orchestrating container workloads on resource-constrained hardware.
• Build and maintain container image pipelines and registries optimized for distributed edge deployments.
• Implement declarative deployment workflows using Git Ops.

• Build automated pipelines for embedded software builds, container images, and system images.
• Integrate cross-compilation tool chains into CI pipelines.
• Develop safe deployment mechanisms including staged rollouts and automated rollback.
• Develop and maintain low level device software and update/install tooling in C, Bash, and Python.

• Build and maintain custom embedded Linux platforms.
• Support distributions such as:
• Yocto
• Buildroot
• Debian / Ubuntu
• Optimize systems for container runtimes and Kubernetes operation.

• Build monitoring and observability infrastructure for distributed edge clusters.
• Deploy telemetry pipelines for metrics, logs, and traces.
• Implement tooling for remote debugging, diagnostics, and failure recovery.

• Implement secure device provisioning and authentication.
• Build signed update pipelines for OS and container images.
• Implement secrets management and certificate rotation for edge clusters.
• Ensure systems remain resilient in low-bandwidth or intermittent connectivity environments.
• Design and maintain secure boot, TPM backed identity, disk encryption, measured boot, and signed software update flows.
• Build software supply chain controls including SBOM generation, artifact signing, vulnerability scanning, and release verification.

• 5+ years experience in Dev Ops, SRE, or platform engineering.
• Strong experience with Linux systems engineering.
• Hands‑on experience deploying and operating Kubernetes clusters in production.
• Experience working with container technologies (Docker / OCI / containerd).
• Experience building and maintaining CI/CD pipelines.
• Strong scripting or programming experience (C, Bash, Python, Go, or similar).
• Experience with embedded Linux platforms (Yocto, Buildroot).
• Experience with bootloaders, kernel configuration, partitioning, OTA/update systems, and…