Responsibilities may include the following and other duties may be assigned:
Design, implement, and maintain PowerShell-based automation for system configuration, hardening, and deployment of FFRangio Windows workstations
Define and enforce BIOS/UEFI security settings and TPM-based trust chains (Secure Boot, measured boot, TPM attestation)
Implement and manage BitLocker and other Windows encryption mechanisms, including key management and recovery strategies
Build and maintain Windows hardening baselines using Group Policy, AppLocker, custom Shell/UI restrictions, and Kiosk (Assigned Access) mode suited to a clinical, cath-lab environment
Manage user/account permission models and least-privilege access schemes across managed devices
Create, manipulate, and maintain VHD/VHDX-based images for deployment, recovery, and testing workflows
Build and maintain CI/CD pipelines in Azure DevOps for automated build, test, and deployment of Windows images and configurations
Collaborate with software, QA, and regulatory/quality teams to ensure hardening and deployment practices
Document configurations, scripts, and processes for reproducibility and audit purposes, consistent with medical device quality system requirements
Required Knowledge and Experience
B.Sc. in Computer Science, Software Engineering, Computer Engineering, Mathematics, or a related field
4+ years of relevant experience in Windows systems engineering, software engineering, security, or automation
Strong, demonstrable PowerShell scripting skills
Solid understanding of BIOS/UEFI security concepts and TPM (Trusted Platform Module) architecture
Experience with BitLocker and Windows encryption/hardening tools: Group Policy design and management AppLocker rule creation and enforcement Kiosk mode / Assigned Access / custom shell configuration Windows account, group, and permission management
Experience creating and manipulating VHD/VHDX virtual disks (mounting, provisioning, offline servicing, diskpart/DISM)
Strong troubleshooting skills across the Windows boot chain, OS internals, and security stack
Experience with Windows imaging tools (MDT, DISM, Sysprep, WinPE), endpoint security frameworks (CIS benchmarks, DoD STIGs), Intune or other MDM solutions for Windows fleet management, scripting experience beyond PowerShell (Python, C#) for tooling integration, experience working within a large medical device organization (e.g., post-acquisition integration, Medtronic or similar), building and maintaining CI/CD pipelines in Azure DevOps, Git version control and familiarity with Agile methodologies (Scrum/Kanban) will be considered an advantage.
Physical Job Requirements
The above statements are intended to describe the general nature and level of work being performed by employees assigned to this position, but they are not an exhaustive list of all the required responsibilities and skills of this position.
Recruitment Fraud Alert
We are aware of phishing scams targeting job seekers. Please keep the following in mind:
Apply only through official Medtronic channels. All legitimate Medtronic recruiting communications come from approved Medtronic platforms and official @medtronic.com email addresses.
Medtronic will never ask for payment or sensitive personal information (such as bank account or Social Security details) during early stages of the hiring process. Any such requests are not legitimate.
If you receive a suspicious message claiming to be from Medtronic, do not respond, click links, or open attachments.
If you have any questions, concerns regarding the authenticity of a communication alleged to have been made by or on behalf of Medtronic, please contact us immediately at AskHR@medtronic.com.
Benefits & Compensation
Medtronic offers a competitive Salary and flexible Benefits Package
A commitment to our employees lives at the core of our values. We recognize their contributions. They share in the success they help to create. We offer a wide range of benefits, resources, and competitive compensation plans designed to support you at every career and life stage.
-
- This position is eligible for a short-term incentive called the Medtronic Incentive Plan (MIP).
