Senior DevOps Engineer

Job description

About B. Braun and This Team B. Braun is one of the world’s leading medical device and pharmaceutical companies, developing and manufacturing products and solutions for healthcare professionals and patients across more than 60 countries. Our Group Digital Department (GDD) is driving a major technology transformation — building the digital foundation that powers B. Braun’s clinical products and healthcare platforms on modern cloud infrastructure. The Center of Competence (CoC) Platform Engineering & DevOps is at the heart of this transformation. We build and operate the Internal Developer Platform (IDP) that enables B. Braun’s product engineering teams to deliver faster, more reliably, and with less operational overhead. We are GitOps-first, Kubernetes-native, and treat developer experience as a product discipline — not a side effect of infrastructure work. The CoC is an active engineering community — not a fixed structure. As the platform matures and team needs evolve, so does the CoC itself. You’ll have a genuine hand in shaping how we work, not just executing within a defined process. Role Overview As a Senior DevOps Engineer, you are embedded within a hospital-facing clinical software product team as their dedicated DevOps and platform engineering contact. You are not a central ops function — you sit inside the product team, own its delivery infrastructure, and connect it to B. Braun’s broader platform capabilities. Your primary assignment is a clinical management platform used in hospitals across Europe — a mature, production-grade Azure-hosted application serving real patient workflows. The product is executing a structured modernisation of its DevOps toolchain toward B. Braun’s Digital Foundation standards. You will own this transition: operating the current toolchain while systematically building its replacement. This is not a greenfield role. The stack you inherit is deliberate and functional. Your job is to understand it thoroughly, introduce modern observability and delivery practices, and drive the toolchain migration at a pace that keeps the platform stable. Your Mission Own and evolve the CI/CD pipeline infrastructure for your assigned product — from current-state Jenkins pipelines to GitHub Actions, without breaking continuity Introduce production-grade observability across the platform using OpenTelemetry and B. Braun’s centralized monitoring stack Manage the product’s Azure infrastructure confidently across a multi-tenant, per-customer deployment model Execute a controlled, coexistence-based migration of the development toolchain aligned to B. Braun’s DevSecOps standards Define and monitor SLOs for the product’s critical services, enabling data-driven reliability decisions Contribute reusable patterns and learnings back to B. Braun’s Internal Developer Platform Key Responsibilities CI/CD and Pipeline Engineering Operate and maintain existing Jenkins pipelines for the product’s build, test, and deployment workflows Design and implement GitHub Actions pipelines following B. Braun’s DevSecOps model and ensuring full traceability and version control Manage the coexistence of Jenkins and GitHub Actions during the transition period: two toolchains running in parallel, incrementally converging Integrate quality and security tooling into pipelines: Code Quality, Vulnerability Scanning, and SBOM management Ensure full traceability and versioning of all pipeline changes within the GitOps model Contribute reusable GitHub Actions workflow templates and composite actions to the Internal Developer Platform Cloud Infrastructure and Kubernetes Manage and operate the product’s Azure environment: multi-tenant deployment model Manage Azure-hosted Windows-based infrastructure (IIS, Windows Server) alongside cloud-native components — the product spans both worlds Implement and maintain infrastructure automation using Crossplane XRDs, Helm, and Azure-native tooling Support environment provisioning for dev, test, staging, and production environments aligned to the product’s DTAP model Troubleshoot and resolve production issues related to infrastructure, deployments, and runtime behaviour Deploy and operate Kubernetes workloads (AKS): responsible for deployments, services, ingress, namespace RBAC, and day-to-day troubleshooting Observability and Instrumentation Deploy OpenTelemetry agent instrumentation alongside the product’s runtime — collecting logs, metrics, and traces without modifying application source code — and forward telemetry to B. Braun’s centralized observability stack Build and maintain Grafana dashboards and Azure Monitor alert rules covering the four golden signals for all critical services Define SLIs from the collected telemetry; translate them into SLOs and error budgets in collaboration with the product team Identify and eliminate observability gaps — surface what the product team cannot currently see Toolchain Migration and SDLC Alignment Lead the migration to GitHub: archive and preserve repository history and metadata, coordinate sign-off with Quality Management, and execute a controlled cutover Align branching strategies, environment models, and release processes with B. Braun’s DevSecOps standards — migrating gradually without disrupting existing release cycles Migrate documentation tooling while maintaining traceability integrity across requirements, code, and deployments Assess and document the product’s integration engine topology: how it connects to hospital systems, what dependencies exist, and what a future migration path looks like SRE and Reliability Establish SLOs and SLIs for the product’s critical services; track error budgets and provide data-driven input for prioritisation decisions Create and maintain runbooks for common operational scenarios to reduce cognitive load during incidents and enable autonomous product team operation Participate in incident response and blameless postmortem facilitation for platform-level issues Platform Contribution (CoC Member) Contribute patterns, templates, and learnings from your product team assignment back to B. Braun’s Internal Developer Platform Participate in CoC design reviews, code reviews, and technical standard-setting Share operational experience with CoC colleagues to continuously improve shared platform capabilities What You Bring Required 5+ years in DevOps, Platform Engineering, or a related discipline — senior depth, operating independently Microsoft Azure — production-grade operations across App Services, SQL, Key Vault, Azure Monitor, Entra ID, AKS, and Virtual Networks Kubernetes — hands-on deployment, operations, and troubleshooting of production workloads on AKS CI/CD — Jenkins and GitHub Actions; you can operate the current toolchain while building its replacement Source control migration — experience planning and executing a controlled repository migration with full history and traceability preservation OpenTelemetry — agent-based instrumentation on running systems; telemetry pipeline configuration and log-to-OTel mapping SRE fundamentals — SLO/SLI definition from scratch, error budget awareness, reliability monitoring Fluent English — working language across the CoC Strongly Preferred Windows / .NET environment — IIS, .NET Framework, Windows Server; ability to read the deployment landscape and troubleshoot runtime behaviour without writing application code Coexistence strategy — experience running legacy and modern toolchains in parallel during a long migration, without service disruption Integration engine topology — ability to map and document how a middleware integration layer connects to external systems; understanding of system interfaces and communication patterns Spanish — useful for local collaboration in Barcelona; not required for team work Nice to Have Experience in regulated or compliance-aware environments — healthcare, pharma, finance (B. Braun provides onboarding for domain-specific SOPs and quality processes) GitOps tooling: ArgoCD, Crossplane SBOM management and software composition analysis JFrog Artifactory EU MDR / ISO 13485 / IEC 62304 — awareness, not expertise What We Offer An embedded role with real ownership — you are the DevOps function for a live clinical platform, not a ticket executor A technically rich challenge: operating a mature production system while modernising its delivery infrastructure Connection to a wider CoC community — colleagues already embedded in Barcelona, and a European network across Germany and Bulgaria B. Braun’s modern platform tooling as the destination stack — Azure, AKS, GitHub Actions, ArgoCD, OpenTelemetry, Crossplane A chance to shape the operational foundation for a critical medical software product used in hospitals across Europe Flexible hybrid working model with 3 days remote and 2 days on-site per week Adaptable working hours from Monday to Thursday, allowing flexible start and finish times Reduced working hours on Fridays during summer (June to September) Compensation aligned with the Chemical Industry Collective Agreement 10% annual variable bonus linked to company performance Flexible compensation plan including transport, childcare vouchers and private health insurance Daily meal allowance for office days Work-from-home allowance Company-sponsored retirement plan Life and accident insurance (AXA) Access to company-funded training and certifications, based on role and project needs Continuous learning environment aligned with ongoing platform and technology transformation Access to a well-being platform including coaching, psychological support and emotional health resources, free for employees and available at reduced cost for family members Full IT setup provided, with choice between Windows or Mac Competitive salary B. Braun Medical, S.A. U. | Aitana Altuna