The Position
Roche Digital Technology (RDT) is where innovation meets purpose. As a global team at the heart of Roche, we are a community of business-minded technologists committed to help shape tomorrow’s digital future of healthcare. Our mission is to power Roche through cutting-edge digital technologies, harnessing the potential of artificial intelligence, data, and scalable tech innovations.
At Roche, we offer a hybrid work model that combines flexibility with in-person collaboration. For now, we require our employees to be in our offices on average two days per week.
We are looking for an experienced AWS Cloud Engineer to design, build, and evolve secure, scalable, and automated cloud solutions on AWS. You will work as part of a team of Cloud Engineers, taking ownership of solutions from design through implementation and operation. This is a hands-on engineering role: we are looking for someone who enjoys staying close to the technology, solving complex technical challenges, and turning architectural concepts into reliable production solutions. The role has a strong focus on Amazon EKS, AWS Bedrock, Infrastructure as Code and CI/CD, as well as cloud networking and security.
The opportunity:
- Design and implement end-to-end AWS solutions, translating business and technical requirements into secure, scalable, resilient, and maintainable architectures.
- Design, build, and operate Amazon EKS environments and Kubernetes-based workloads, including cluster architecture, workload deployment, networking, security, observability, and lifecycle management.
- Design and implement solutions leveraging AWS Bedrock and related AWS services for generative AI workloads, with particular attention to secure integration, access control, networking, scalability, and operational readiness.
- Build cloud infrastructure using AWS CDK, applying Infrastructure as Code principles to create reusable, maintainable, and automated infrastructure components.
- Develop and maintain CI/CD pipelines for infrastructure and application deployments using GitLab CI/CD and/or GitHub Actions.
- Design and implement AWS networking architectures, including VPCs, subnets, routing, private connectivity, DNS, load balancing, ingress/egress patterns, and integration across cloud environments.
- Embed security by design across cloud solutions, including IAM, least-privilege access, secrets and key management, network security, encryption, and security controls.
- Implement robust logging, monitoring, alerting, and observability to ensure production environments are transparent, reliable, and supportable.
- Build and integrate solutions using additional AWS services such as Lambda, IAM, CloudWatch, S3, API Gateway, and other services as appropriate.
- Troubleshoot complex infrastructure, networking, security, Kubernetes, and deployment issues across the technology stack.
- Contribute to engineering standards, reusable patterns, automation, technical documentation, and cloud best practices.
- Collaborate closely with other Cloud Engineers, application teams, architects, security specialists, and other stakeholders.
- Remain hands-on and close to the technology, continuously evaluating new AWS capabilities and improving existing platforms and engineering practices.
Salary range 14,175 - 26,325 PLN gross based on the employment contract. Annual bonus payment based on your performance. Dedicated training budget (training, certifications, conferences, diversified career paths etc.). Recharge Fridays (2 Fridays off per quarter available). Take time Program (up to 3 months of leave to use for any purpose). Vacation subsidy available. Flex Location (possibility to perform our work from different places in the world for a certain period of time). Take Time for Charity (additional paid leave of maximum 2 weeks to engage in the charity action of your choice). Private healthcare (LuxMed packages), group life insurance (UNUM) and Multisport. Stock share purchase additions. Yearly sales of company laptops and cars and many more! Benefits package
You are an engineer who combines strong architectural thinking with hands-on implementation skills. You are comfortable designing an end-to-end solution, but equally comfortable opening an IDE, writing CDK code, configuring an EKS workload, building a deployment pipeline, or troubleshooting a networking issue.
- Strong hands-on experience designing and implementing solutions on AWS.
- Deep practical knowledge of Amazon EKS and Kubernetes, including production-grade cluster and workload architectures.
- Experience with AWS Bedrock or strong experience building cloud-based generative AI/ML solutions with the ability to quickly develop deep Bedrock expertise.
- Strong experience with AWS CDK and Infrastructure as Code.
- Strong understanding of AWS networking, including VPC architecture, routing, private/public connectivity, DNS, security groups, load balancing, and related networking concepts.
- Strong understanding of AWS security and IAM, including least-privilege design and secure cloud architecture.
- Experience designing and implementing automated CI/CD pipelines, ideally with GitLab CI/CD and/or GitHub Actions.
- Experience with AWS logging, monitoring, and observability, particularly CloudWatch and related services.
- Good working knowledge of serverless and event-driven AWS architectures, including services such as AWS Lambda.
- Experience operating and troubleshooting production cloud environments.
- Ability to work across the full engineering lifecycle, from solution design and architecture through hands-on implementation and operation.
