Senior Windows DevOps Engineer

About the role

CathWorks, part of Medtronic, develops FFRangio, a Windows-based system used in cardiac catheterization labs to support interventional cardiology decisions. As part of the platform and infrastructure team, you will own the security hardening, imaging and deployment automation of the Windows environment behind FFRangio, working at the intersection of low-level Windows internals and modern Windows virtualization and DevOps practices. The role suits someone who treats scripting as the primary tool for making security and deployment repeatable, auditable and reliable.

Key responsibilities

• Design, implement and maintain PowerShell-based automation for system configuration, hardening and deployment of FFRangio workstations
• Define and enforce BIOS/UEFI security settings and TPM-based trust chains (Secure Boot, measured boot, TPM attestation)
• Implement and manage BitLocker and other Windows encryption mechanisms, including key management and recovery strategies
• Build and maintain Windows hardening baselines using Group Policy, AppLocker, custom shell/UI restrictions and Kiosk (Assigned Access) mode
• Manage user and account permissions and least-privilege access across managed devices
• Create, manipulate and maintain VHD/VHDX images for deployment, recovery and testing
• Build and maintain CI/CD pipelines in Azure DevOps for automated build, test and deployment of Windows images and configurations
• Collaborate with software, QA and regulatory/quality teams, and document configurations, scripts and processes for auditability under medical device quality system requirements

Required profile

• B.Sc. in Computer Science, Software Engineering, Computer Engineering, Mathematics or a related field
• 4+ years of relevant experience in Windows systems engineering, software engineering, security or automation
• Solid understanding of BIOS/UEFI security concepts and TPM architecture
• Experience in a large medical device organization (e.g. post-acquisition integration, Medtronic or similar) and experience with CI/CD pipelines in Azure DevOps will be considered an advantage

Required skills

• Strong PowerShell scripting skills
• Group Policy, AppLocker, BitLocker, Kiosk mode and Windows account/group management
• VHD/VHDX manipulation with diskpart/DISM
• Windows imaging tools (MDT, DISM, Sysprep, WinPE), CIS benchmarks, DoD STIGs, Intune or other MDM solutions
• Scripting beyond PowerShell (Python, C#) for tooling integration
• Git version control, Azure DevOps pipelines, Agile (Scrum/Kanban) are an advantage

The position is eligible for the Medtronic Incentive Plan (MIP).