Senior Cloud Engineering Architect - Evinova

AstraZeneca•Gaithersburg, MD

3d•$187,000 - $246,000•Hybrid

About The Position

Evinova is a health-tech business focused on advancing digital transformation across the life sciences sector. It develops digital health solutions intended to improve clinical research, care delivery, and patient experiences. Employees are expected to work from the office three days per week to support collaboration. The Senior Cloud Engineering Architect will provide hands-on technical leadership in designing, building, and operating secure, scalable cloud infrastructure for Evinova’s digital health products. The role focuses on AWS, Kubernetes/EKS, infrastructure as code, CI/CD, security, observability, and automation for highly available, multi-tenant SaaS platforms. The architect will partner with engineering, product, and security teams to improve platform reliability, scalability, and operational excellence and to establish cloud engineering best practices. The position also provides technical leadership and mentorship to junior and mid-level engineers, promotes AWS CDK and cloud automation best practices, and aligns DevOps strategies with business goals. The annual base pay range is $187,000–$246,000 USD, with a short-term incentive bonus opportunity and eligibility to participate in an equity-based long-term incentive program.

Requirements

At least 10 years of experience in DevOps or cloud infrastructure roles.
Significant experience with SaaS and multi-tenant platforms.
A proven track record of mentoring team members on cloud infrastructure projects.
Expert knowledge of AWS services, including VPC, IAM, EC2, S3, RDS, Lambda, EKS, AWS WAF, AWS EventBridge, and AWS CloudTrail.
Deep proficiency with Docker, Kubernetes, Helm, and related ecosystem tools.
Expertise with CI/CD tools such as ArgoCD and GitHub Actions.
Advanced experience with AWS CDK, preferably using TypeScript, and CloudFormation.
Strong understanding of AWS networking services, including VPCs, Transit Gateway, ALB, and Security Groups.
In-depth knowledge of IAM, AWS KMS, encryption standards, AWS WAF, and security compliance frameworks including NIST.
Extensive experience with OpenTelemetry, Prometheus, Grafana, AWS CloudWatch, and AWS CloudTrail for monitoring and incident response.
Familiarity with AWS Glue and Managed Kafka for real-time and batch data processing.
Strong scripting and automation skills using TypeScript and Bash.
Experience managing multiple AWS accounts with AWS Control Tower.
Exceptional verbal and written communication skills and ability to explain complex technical concepts to diverse stakeholders.
Ability to understand strategic direction and architect initiatives in alignment with it.
Ability to manage multiple priorities and thrive in a fast-paced environment.
Collaborative, innovative, and customer-focused approach to infrastructure and technology.

Nice To Haves

Advanced AWS CDK expertise, including building complex, reusable constructs and pipelines.
Familiarity with Projen for automating CDK project configuration and management.
Hands-on experience with Helm charts and Kubernetes manifests.
Experience with monitoring and logging tools such as Prometheus, Grafana, and AWS CloudWatch.
Exposure to multi-tenant SaaS platforms and related best practices.
Experience working with AI tools and frameworks.
Passion for mentoring team members and fostering a collaborative, innovation-driven culture.

Responsibilities

Architect and manage scalable, multi-tenant AWS infrastructure using AWS CDK and maintain modular, maintainable codebases.
Lead the deployment and management of Kubernetes clusters on Amazon EKS, applying scalability and security best practices.
Build, manage, and improve automated CI/CD pipelines using tools such as ArgoCD and GitHub Actions.
Design, maintain, and optimize IAM roles, policies, and guardrails to support least-privilege access across AWS resources.
Architect and maintain AWS networking components, including VPCs, Transit Gateway, ALB, and Security Groups.
Implement DevSecOps practices, encryption standards, and compliance with applicable regulations and frameworks, including GXP, GDPR, HIPAA, and NIST.
Design and implement firewall policies and AWS WAF configurations to protect applications from web threats.
Automate infrastructure provisioning, application releases, and ETL workflows to reduce manual work and improve efficiency.
Develop monitoring, logging, and alerting systems using OpenTelemetry, Prometheus, Grafana, AWS CloudWatch, and AWS CloudTrail.
Use AWS EventBridge for event-driven automation and AWS CloudTrail to troubleshoot security and operational issues.
Drive governance processes, security reviews, cost optimization, and operational consistency across the platform.
Manage multiple AWS accounts using AWS Control Tower and account-isolation best practices.
Mentor and guide junior and mid-level engineers and provide technical leadership in AWS CDK adoption and cloud automation practices.
Partner with product management, security, engineering, and other cross-functional teams to align DevOps strategies with business goals and coordinate development and operational workflows.