<b>Job Title: </b>Senior Cloud Engineering Architect<br><b>Location: </b>Gaithersburg, MD<br><br>At AstraZeneca, we pride ourselves on crafting a collaborative culture that champions knowledge-sharing, ambitious thinking and innovation - ultimately providing employees with the opportunity to work across teams, functions and even the globe. <br><br>Recognizing the importance of individualized flexibility, our ways of working allow employees to balance personal and work commitments while ensuring we continue to create a strong culture of collaboration and teamwork by engaging face-to-face in our offices <b>3 days a week</b>. Our head office is purposely designed with collaboration in mind, providing space where teams can come together to strategize, brainstorm and connect on key projects. <br><br>Are you ready to be part of the future of healthcare? Can you think big, be bold, and harness the power of digital and AI to tackle longstanding life sciences challenges? Then Evinova, a global health tech business might be for you! <br><br>Transform patients' lives through technology, data, and innovative ways of working. You're disruptive, decisive, and transformative. Someone excited to use technology to improve patients' health. We're building a new Health-tech business - Evinova, a fully-owned subsidiary of AstraZeneca Group.<br><br>Evinova delivers market-leading digital health solutions that are science-based, evidence-led, and human experience-driven. Thoughtful risks and quick decisions come together to accelerate innovation across the life sciences sector. Be part of a diverse team that pushes the boundaries of science by digitally empowering a deeper understanding of the patients we're helping. Launch pioneering digital solutions that improve the patients' experience and deliver better health outcomes. Together, we have the opportunity to combine deep scientific expertise with digital and artificial intelligence to serve the wider healthcare community and create new standards across the sector. <br><br><b>Introduction to Role:</b><br><br>We are looking for a passionate and experienced Senior Cloud Engineering Architect to guide in the transformation of our SaaS platform infrastructure and operations. Join us in leveraging cutting-edge technology, data, and AI to revolutionize life sciences and improve billions of lives globally.<br><br>In this pivotal role, you will design, implement, and optimize robust cloud-based infrastructure and operational frameworks that enable rapid innovation and deliver exceptional system reliability. Additionally, you will guide, and mentor your team members, sharing your expertise in cloud infrastructure, AWS CDK automation, Kubernetes, networking, and DevOps best practices.<br><br><b>Accountabilities:</b><br><br><b>Infrastructure Design & Management:</b><br><ul><li>Architect and handle scalable, multi-tenant AWS-based infrastructure using AWS CDK, ensuring modular and maintainable codebases.</li><li> <b>Kubernetes & EKS: </b>Lead the deployment and management of Kubernetes clusters using Amazon EKS, implementing standard processes for scalability and security.</li><li> <b>CI/CD Pipelines: </b> Build, lead, and enhance automated CI/CD pipelines to ensure efficient, reliable deployments using tools like ArgoCD and GitHub Actions.</li><li><b>IAM Role Management:</b> Design, maintain, and optimize IAM roles, policies, and guardrails to ensure least privilege access across AWS resources.</li><li><b>Networking:</b> Architect and maintain AWS networking components such as VPCs, Transit Gateway, ALB, and Security Groups, ensuring robust security and performance.</li><li><b>Security & Compliance: </b> Implement DevSecOps best practices, including IAM security, encryption standards, and compliance with industry regulations (GXP, GDPR, HIPAA, NIST).</li><li><b>AWS WAF & Firewall Policies:</b> Design and implement firewall policies and AWS WAF configurations to protect applications from web threats.</li><li><b>Automation:</b> Lead efforts to automate infrastructure provisioning, application releases, and ETL workflows, reducing manual intervention and improving efficiency.</li><li><b>Monitoring & Incident Response:</b> Develop and implement comprehensive monitoring, logging, and alerting systems using OpenTelemetry, Prometheus, Grafana, AWS CloudWatch, and AWS CloudTrail.</li><li><b>AWS EventBridge & CloudTrail:</b> Use AWS EventBridge for event-driven automation and fix security and operational issues using AWS CloudTrail.</li><li><b>Governance & Strategic Input:</b> Drive governance processes, including security reviews, cost optimization, and operational consistency across the platform.</li><li><b>AWS Control Tower & Multi-Account Management:</b> Handle multiple AWS accounts using AWS Control Tower and standard processes for account isolation.</li><li><b>AI & Machine Learning:</b> Exposure to AI tools and frameworks is a plus.</li><li><b>Mentorship & Leadership:</b> Mentor and guide junior and mid-level engineers, fostering a culture of learning and collaboration. Provide technical leadership in the adoption of AWS CDK and standard processes for cloud automation.</li><li><b>Collaboration:</b> Partner with multi-functional teams, including product management and security, to align DevOps strategies with business goals and ensure cohesive development and operational workflows.</li></ul><br><br><b>Essential Skills/Experience:</b><br><ul><li><b>Experience:</b> 10+ years in DevOps or cloud infrastructure roles, with significant experience in SaaS and multi-tenant platforms. Proven track record of mentoring team members in Cloud infrastructure related projects.</li><li><b>Education:</b> High School or equivalent experience or GED</li><li><b>Cloud Expertise:</b> Expert knowledge of AWS services, including VPC, IAM, EC2, S3, RDS, Lambda, EKS, AWS WAF, AWS EventBridge, and AWS CloudTrail.</li><li> <b>Containerization & Orchestration:</b> Deep proficiency in Docker, Kubernetes, Helm, and associated ecosystem tools.</li><li> <b>CI/CD Proficiency:</b> Expertise in CI/CD tools such as ArgoCD and GitHub Actions.</li><li><b>Infrastructure as Code (IaC):</b> Advanced experience with AWS CDK (TypeScript preferred) and CloudFormation.</li><li> <b>Networking:</b> Strong understanding of AWS networking services such as VPCs, Transit Gateway, ALB, and Security Groups.</li><li><b>Security:</b> In-depth knowledge of IAM, AWS KMS, encryption standards, AWS WAF, and security compliance frameworks including NIST.</li><li><b>Monitoring & Alerting:</b> Extensive experience with OpenTelemetry, Prometheus, Grafana, AWS CloudWatch, and AWS CloudTrail for monitoring and incident response.</li><li><b>Data & ETL Pipelines:</b> Familiarity with AWS Glue and Managed Kafka for real-time and batch data processing.</li><li><b>Programming & Automation:</b> Strong scripting and automation skills using TypeScript and Bash.</li><li><b>Multi-Account AWS Management:</b> Experience managing multiple AWS accounts with AWS Control Tower.</li><li><b>Communication & Collaboration:</b> Exceptional verbal and written communication skills, with the ability to explain complex technical concepts to diverse partners.</li><li><b>Big Picture:</b> Able to understand the strategic direction and help architect smaller initiatives with the direction in mind.</li><li><b>Mentor & Leader</b>: Enjoys mentoring team members, and fostering a collaborative, innovation-driven team culture.</li><li><b>Organized & Adaptable:</b> Able to manage multiple priorities and thrive in a fast-paced environment.</li><li><b>Innovative</b>: Passionate about leveraging technology to solve complex problems and drive efficiency.</li><li><b>Customer-Focused</b>: Dedicated to building infrastructure that delivers measurable business and customer value.</li></ul><br><br><b>Desirable Skills/Experience:</b><br><ul><li>Advanced expertise in AWS CDK, including building complex, reusable constructs and pipelines.</li><li>Familiarity with Projen for automating CDK project configuration and management.</li><li>Hands-on experience with Helm charts and Kubernetes manifests.</li><li>Experience with monitoring and logging tools such as Prometheus, Grafana, and AWS CloudWatch.</li><li>Exposure to multi-tenant SaaS platforms and standard methodologies.</li><li>Experience working with AI tools and frameworks.</li></ul><br><br><b>Where can I find out more?</b><br><ul><li>Learn more about Evinova www.evinova.com</li><li>Our Social Media, Follow AstraZeneca on LinkedIn https://www.linkedin.com/company/1603/</li><li>Follow AstraZeneca on Facebook https://www.facebook.com/astrazenecacareers/</li><li>Follow AstraZeneca on Instagram https://www.instagram.com/astrazeneca_careers/?hl=en</li><li>Our US Footprint: Powering Scientific Innovation - YouTube</li></ul><br><br><b>Why Evinova?</b><br><br>Evinova is a global health tech business, separate company part of the AstraZeneca group. Together, we can accelerate the delivery of life-changing medicines, improve the design and delivery of clinical trials for better patient experiences and outcomes, and think more holistically about patient care before, during, and after treatment. We know that regulators, healthcare professionals, and care teams at clinical trial sites do not want a fragmented approach. They do not want a future where every pharmaceutical company provides its own, different digital solutions. They want solutions that work across the sector, simplify their workload, and benefit patients broadly. By bringing our solutions to the wider life sciences community, we can help build more unified approaches to how we all develop and deploy digital technologies, better serving our teams, physicians, and ultimately patients. Evinova represents a unique opportunity to deliver meaningful outcomes with digital and AI to serve the wider healthcare community and create new standards for the sector. Join us on our journey of building a new kind of health tech business to reset expectations of what a bio-pharmaceutical company can be. This means we're opening new ways to work, pioneering cutting-edge methods, and bringing unexpected teams together. Interested? Come and join our journey.<br><br><b>Total Rewards:</b><br>The annual base pay for this position ranges from <b>$146,491.20 to $219,736.80</b> Hourly and salaried non-exempt employees will also be paid overtime pay when working qualifying overtime hours. Base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition, our positions offer a short-term incentive bonus opportunity; eligibility to participate in our equity-based long-term incentive program (salaried roles), to receive a retirement contribution (hourly roles), and commission payment eligibility (sales roles). Benefits offered included a qualified retirement program [401(k) plan]; paid vacation and holidays; paid leaves; and, health benefits including medical, prescription drug, dental, and vision coverage in accordance with the terms and conditions of the applicable plans. Additional details of participation in these benefit plans will be provided if an employee receives an offer of employment. If hired, employee will be in an "at-will position" and the Company reserves the right to modify base pay (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors. <br><br>AstraZeneca is an equal opportunity employer that is committed to diversity and inclusion and providing a workplace that is free from discrimination. AstraZeneca is committed to accommodating persons with disabilities. Such accommodation is available on request in respect of all aspects of the recruitment, assessment and selection process and may be requested by emailing AZCHumanResources@astrazeneca.com.<br><br>#LI-Hybrid<br><br><b>Date Posted</b><br>11-Jul-2025<br><br><b>Closing Date</b><br>16-Jul-2025Our mission is to build an inclusive and equitable environment. We want people to feel they belong at AstraZeneca and Alexion, starting with our recruitment process. We welcome and consider applications from all qualified candidates, regardless of characteristics. We offer reasonable adjustments/accommodations to help all candidates to perform at their best. If you have a need for any adjustments/accommodations, please complete the section in the application form.