Principal Cloud Infrastructure Engineer

About the role

Lead the design, build, and operation of secure, resilient, and scalable cloud-native platforms, including AWS Landing Zones. Serve as the Cloud technical lead for complex, global projects—translating architectural designs into delivered services and operational capabilities. Own automation and Infrastructure as Code (IaC) adoption using Terraform or CloudFormation to streamline provisioning and lifecycle management. Implement security-by-design across cloud platforms, including identity management, encryption, zero-trust principles, and adherence to frameworks such as ISO 27000. Build and evolve monitoring and observability (e.g., Prometheus, Grafana, CloudWatch) to ensure reliability, performance, and QoS across services. Lead deployments of new cloud technologies and services, ensuring seamless integration with existing systems and full compliance with FLBG policies and procedures, including AIS metrics prior to go-live. Guide cloud migration strategies (on-prem → cloud or hybrid), optimize usage for cost, scalability, and efficiency, and define best practices for governance and compliance. Collaborate with senior stakeholders globally, partnering across IT and OT, influencing roadmaps, and engaging with vendors to ensure solutions meet technical and security requirements. Provide 4th-line expertise and BAU technical governance, including transition-to-operations, documentation, and audit input.

Responsibilities

• Lead the design, build, and operation of secure, resilient, and scalable cloud-native platforms, including AWS Landing Zones.
• Serve as the Cloud technical lead for complex, global projects—translating architectural designs into delivered services and operational capabilities.
• Own automation and Infrastructure as Code (IaC) adoption using Terraform or CloudFormation to streamline provisioning and lifecycle management.
• Implement security-by-design across cloud platforms, including identity management, encryption, zero-trust principles, and adherence to frameworks such as ISO 27000.
• Build and evolve monitoring and observability (e.g., Prometheus, Grafana, CloudWatch) to ensure reliability, performance, and QoS across services.
• Lead deployments of new cloud technologies and services, ensuring seamless integration with existing systems and full compliance with FLBG policies and procedures, including AIS metrics prior to go-live.
• Guide cloud migration strategies (on-prem → cloud or hybrid), optimize usage for cost, scalability, and efficiency, and define best practices for governance and compliance.
• Collaborate with senior stakeholders globally, partnering across IT and OT, influencing roadmaps, and engaging with vendors to ensure solutions meet technical and security requirements.
• Provide 4th-line expertise and BAU technical governance, including transition-to-operations, documentation, and audit input.

Requirements

• 10+ years in a 3rd/4th Line Cloud engineer role in a global enterprise business, or 6+ Years in a biomedical sciences 3rd/4th line IT support role.
• Or a mixture of both.
• Proven experience managing production cloud environments.
• Experience with DevOps practices and agile methodologies.
• In depth design and support knowledge of Cloud Infrastructure technologies such as, but not limited to AWS / Azure.
• Strong scripting/coding skills (Python, Bash) and containerization experience (Docker, Kubernetes).
• Strong understanding of networking (VPCs, load balancing, DNS).
• Understanding of security best practices (IAM, encryption, secrets management).
• Experience with CI/CD pipelines and DevOps practices.
• In depth knowledge of Infrastructure security and associated frameworks such as ISO27000.
• Experience designing distributed systems and microservices architecture.
• Familiarity with monitoring tools (CloudWatch, Prometheus, Grafana).
• Adept at communicating with technical and non-technical stakeholders at all levels, and across organizations, using architecture communication techniques.
• Adept at gaining support from business and technical stakeholders for IT initiatives with low/medium levels of risk, impact, and complexity.
• AWS Certified DevOps Engineer or Solutions Architect advantageous.
• Microsoft Certified: Azure Administrator or DevOps Engineer advantageous.

Qualifications

• Minimum education requirements: Degree or higher in Computer Science or Information Technology or relevant technical certifications.
• Minimum experience requirements: 10 yrs+ experience in an IT 3rd/ 4th line position with proven track record in an enterprise Cloud environment, or 5+ years’ experience of working in a biomedical IT service environment.
• Any combination of education and experience, which would provide an equivalent background to deliver against role expectations.

Skills

• Experience with DevOps practices and agile methodologies.
• In depth design and support knowledge of Cloud Infrastructure technologies such as, but not limited to AWS / Azure.
• Strong scripting/coding skills (Python, Bash) and containerization experience (Docker, Kubernetes).
• Strong understanding of networking (VPCs, load balancing, DNS).
• Understanding of security best practices (IAM, encryption, secrets management).
• Experience with CI/CD pipelines and DevOps practices.
• In depth knowledge of Infrastructure security and associated frameworks such as ISO27000.
• Experience designing distributed systems and microservices architecture.
• Familiarity with monitoring tools (CloudWatch, Prometheus, Grafana).
• Adept at communicating with technical and non-technical stakeholders at all levels, and across organizations, using architecture communication techniques.
• Adept at gaining support from business and technical stakeholders for IT initiatives with low/medium levels of risk, impact, and complexity.

Benefits

• Company provides comprehensive benefits package including health insurance, retirement plans, and paid time off.
• Flexible work arrangements to accommodate personal and professional needs.
• Professional development opportunities through training and workshops.
• Collaborative work environment fostering innovation and creativity.

Pay

• Competitive salary commensurate with experience and qualifications.

Schedule

• Full-time position with standard business hours.