Problem
Firmware updates were run device by device over SSH, took hours per site and occasionally bricked devices when power dropped mid-update.
My role
Designed and built the updater end to end; ran the first three site rollouts.
Approach
One worker per device with retry-until-reachable semantics, and a narrow, explicitly guarded critical section for the rename step.
Implementation
Python, Paramiko, a CSV-driven queue that accepts new devices while running, and structured logs per device.
Outcome
Rollouts run unattended per site; the risky step is isolated and logged.