Lead Cloud Infrastructure Engineer

About the role

The Manager, Infrastructure, Cloud & Identity Services serves as the technology lead for a hybrid infrastructure, cloud, identity, networking, and core enterprise technology services. This role focuses on enhancing, optimizing, modernizing, and scaling the infrastructure foundation to support the evolving needs of a commercial-stage biotechnology company and future global growth. The Lead Manager combines platform ownership, technical leadership, service delivery accountability, and vendor management to ensure infrastructure services remain secure, resilient, scalable, compliant, and aligned with business priorities.

Reporting to IT leadership, the Manager partners closely with Cybersecurity, Digital Workplace, Enterprise Applications, Data & Analytics, Quality, laboratory stakeholders, managed service providers, and technology partners to ensure infrastructure services remain operationally supportable, cost-effective, and ready to scale. The role requires technical depth to assess architectures, challenge vendor recommendations, troubleshoot complex issues, guide engineering decisions, and lead modernization across cloud, identity, compute, hosting, and core infrastructure services.

Responsibilities

Business Partnership & Service Delivery

• Serve as the technology domain lead and trusted infrastructure partner to Cybersecurity, Digital Workplace, Enterprise Applications, Data & Analytics, Quality, laboratory teams, and business stakeholders.
• Translate business, security, operational, laboratory, and compliance requirements into infrastructure strategies, service plans, technical standards, roadmaps, and measurable outcomes.
• Lead infrastructure planning, modernization, lifecycle management, and service improvement initiatives across cloud, identity, compute and hosting, resilience, and core infrastructure services.
• Partner with IT leadership on infrastructure priorities, technology investments, operational maturity, and service improvement opportunities.
• Communicate priorities, risks, dependencies, decisions, and operational impacts clearly to business, technical, and vendor stakeholders.

Infrastructure, Cloud & Identity Platform Leadership

• Provide technical leadership across Microsoft Azure, Microsoft 365, identity services, compute and hosting platforms, virtualization, backup and recovery, and related enterprise infrastructure technologies.
• Establish infrastructure, cloud, identity, security, integration, and operational standards that improve reliability, consistency, supportability, scalability, and resilience.
• Lead technical design and architecture decisions for infrastructure services, cloud platforms, identity integrations, compute and hosting environments, remote access, enterprise applications, and laboratory technology environments.
• Partner with Cybersecurity to apply security-by-design principles, Zero Trust concepts, identity controls, privileged access practices, vulnerability remediation, and infrastructure security standards.
• Contribute to infrastructure architecture, engineering standards, modernization strategies, roadmap development, and technology evaluation to improve security, operational maturity, resilience, user experience, and cost efficiency.

Infrastructure Lifecycle & Operational Excellence

• Own the day-to-day health, performance, supportability, and service quality of infrastructure, cloud, identity, compute, hosting, networking, and core enterprise technology services.
• Ensure services remain reliable, secure, compliant, scalable, recoverable, cost-effective, and aligned with changing business requirements.
• Lead infrastructure upgrades, cloud modernization, lifecycle refreshes, identity improvements, service transitions, platform optimization, and operational readiness activities.
• Establish and monitor infrastructure health, service quality, availability, capacity, performance, security, and operational metrics, using insights to drive continuous improvement and risk reduction.
• Drive remediation of recurring issues, technical debt, lifecycle risks, architecture gaps, and operational inefficiencies.
• Ensure effective incident, problem, change, enhancement, escalation, and major incident management across technologies within scope.

Vendor & Delivery Management

• Lead managed service providers, systems integrators, consultants, carriers, cloud providers, and other technology partners supporting infrastructure, cloud, identity, networking, and related services.
• Establish clear service, delivery, technical, operational, security, and quality expectations, and hold partners accountable for outcomes.
• Review and challenge vendor recommendations, technical designs, service proposals, remediation plans, and architecture decisions to ensure alignment with business requirements and long-term infrastructure strategy.
• Manage delivery priorities, dependencies, escalations, risks, service performance, and operational outcomes across internal and external resources.
• Partner with IT leadership on vendor performance, service levels, renewals, cost optimization, and technology investments while building appropriate internal capability and knowledge transfer.

Security, Compliance & Resilience

• Partner with Cybersecurity to implement infrastructure security standards, including secure configuration, patching, vulnerability remediation, identity controls, privileged access management, network security, endpoint protection alignment, and Zero Trust principles.
• Ensure infrastructure services operate in accordance with company policies, security standards, operational procedures, and applicable regulatory or audit expectations.
• Support infrastructure underlying GxP-regulated systems and laboratory environments, including change control, documentation, validation support, audit readiness, and lifecycle requirements where applicable.
• Support audits, risk assessments, compliance reviews, control evaluations, and remediation activities involving infrastructure and supporting technology controls.
• Own and mature backup, recovery, disaster recovery, business continuity, and resilience capabilities across cloud and on-premises environments.
• Proactively identify infrastructure, security, compliance, operational, vendor, and resilience risks and drive appropriate remediation.

Requirements

• Bachelor's degree or equivalent combination of education and relevant experience.
• 10+ years of progressive experience in enterprise infrastructure, cloud engineering, identity services, systems engineering, infrastructure operations, or related technology disciplines.
• 5+ years of experience serving as a platform owner, technical lead, service delivery lead, infrastructure manager, cloud lead, identity lead, or comparable technology leadership role.
• Strong hands-on experience supporting Microsoft Azure and Microsoft 365 enterprise environments.
• Strong experience with Microsoft Entra ID, Active Directory, identity lifecycle management, SSO, federation, MFA, conditional access, and modern identity services.
• Experience supporting hybrid infrastructure environments spanning cloud, compute and hosting, identity, networking, remote access, backup, disaster recovery, and infrastructure monitoring technologies.
• Experience leading infrastructure modernization, lifecycle management, operational improvement, and vendor-delivered technology services.
• Experience establishing trusted relationships with business, IT, security, application, laboratory, and vendor stakeholders and translating complex operational needs into technology outcomes.
• Demonstrated ability to independently assess complex business and technical issues and drive solutions through implementation and ongoing operation.

Preferred Qualifications

• Prior experience in biotechnology, pharmaceutical, life sciences, healthcare, or other regulated technology environments.
• Experience working in a lean, high-growth organization where infrastructure leaders maintain broad technical ownership and work closely with external service providers.
• Working knowledge of GxP, 21 CFR Part 11, computerized system validation/assurance, change control, data integrity, IT general controls, and inspection-readiness expectations.
• Working knowledge of AWS infrastructure and cloud services.
• Working knowledge of enterprise networking, firewall technologies, secure remote access, VPN/ZTNA, and modern network security architectures.
• Experience with infrastructure automation, scripting, or Infrastructure as Code using PowerShell, Terraform, Python, Bicep, ARM, or similar technologies.
• Experience with Zero Trust, privileged access management, identity governance, and modern identity security architectures.
• Experience designing or maturing infrastructure monitoring, observability, capacity management, backup, recovery, and disaster recovery capabilities.
• Relevant Microsoft, AWS, VMware, Okta, networking, security, or ITIL certifications.

Pay

The pay range for this position is $60.00 - $90.00/hr. Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

Benefits

Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:

• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long-term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)

Schedule

This is a hybrid position based in Cambridge, MA. The role is a contract position.