Sr. System Build & Release Software Engineer

Johnson & Johnson Johnson & Johnson · Pharma · Milpitas, CA +2

This role is for a Senior Software Engineer focused on Build & Release (DevOps) for medical devices within Johnson & Johnson's Vision team. The primary responsibilities involve managing and improving CI/CD pipelines, ensuring secure supply chains, automating build processes, and supporting the development of software for medical devices. While the company is in healthcare and uses technology, the core function of this role is software engineering and DevOps, not direct AI/ML model development or research.

What you'd actually do

  1. Collaborate with product developers, QA, and V&V teams to ensure safe, auditable releases.
  2. Incorporate industry standards and best practices to continuously improve our CI/CD pipeline.
  3. Implement and maintain build reproducibility, artifact provenance, and secure supply-chain controls.
  4. Troubleshoot and resolve complex DevSecOps issues across build, test, and release systems
  5. Automate SBOM generation, management, and publishing for software and firmware builds to meet traceability and compliance needs.

Skills

Required

  • 7+ years software engineering experience with demonstrated ownership of build/release or DevOps systems
  • Automated Windows OS image creation using tools such as Windows ADK
  • Windows Docker for build workflows
  • Creating windows software installers using tools such as InstallShield
  • Conan & CMake to set up C++ project builds
  • CI/CD tools (e.g., Jenkins and Groovy scripting)
  • Integration & configuration of static code analysis tools (SonarQube, Checkmarx, Blackduck)
  • Git, Bitbucket, and Git workflows
  • Jira and Confluence
  • PowerShell and other scripting languages (e.g., Python, Bash)
  • Automating SBOM generation and embedding SBOMs into release artifacts
  • DevSecOps concepts, secure build pipelines, and artifact provenance
  • Troubleshooting skills across build systems, CI servers, container-based builds, and Windows-based build environments
  • Clear documentation for processes and audits

Nice to have

  • Medical device experience (IEC 62304) or experience in heavy regulated industry/environment
  • Sophisticated embedded software development with multiple modules in different language platforms

What the JD emphasized

  • safe, auditable releases
  • secure supply-chain controls
  • SBOM generation
  • Medical device experience (IEC 62304) or experience in heavy regulated industry/environment is preferred.