DevOps / Infrastructure Engineer

DevOps Engineer

Scientists spend a staggering amount of time wrangling data instead of running experiments. We build the AI-native platform that changes that: the system of record and the intelligence layer for R&D labs formulating everything from next-gen batteries to sustainable materials to alternative proteins. Our software doesn't just store lab data, it designs experiments, recommends formulations, surfaces insights, and automates the busywork that stands between a researcher and their next discovery.

Alchemy is a multi-tenant enterprise ELN, LIMS, PLM and QC platform used by applied science companies in chemicals, materials and aerospace as well as all CPG categories. Our platform runs on AWS across multiple regions, including regulated environments. Core technologies include Terraform, ECS/Fargate and Aurora MySQL.

You'll help operate and modernize an established cloud platform, expanding Terraform coverage while maintaining existing CloudFormation infrastructure. The role combines ongoing production operations with improvements to reliability, automation, security and cost efficiency.

You'll take end-to-end responsibility for infrastructure operations and improvement:

• Infrastructure as code. Expand and maintain Terraform coverage, safely bring existing resources under code management, diagnose configuration drift and maintain CloudFormation infrastructure as it is progressively modernized.
• Deployment and release pipelines. Own and improve GitHub Actions and Jenkins pipelines, environment automation and regular releases across our cloud environments.
• Production reliability. Monitor and troubleshoot application infrastructure, databases, containers and networking. Handle incidents, improve observability and take substantial on-call responsibility as part of a small team.
• Cloud cost optimization. Improve cloud efficiency through right-sizing, capacity planning, resource lifecycle management and cost visibility.
• Customer-hosted deployments. Support deployments into customer-managed AWS environments and produce clear technical documentation for customer infrastructure and security teams.
• Security and compliance. Remediate infrastructure and dependency vulnerabilities, strengthen platform security and support audit evidence and compliance requirements.
• Internal tooling. Build and improve tools for environment management, deployments and operational visibility. Java or Vue expertise is not required, but practical automation and tool-building skills are essential.

Who You Are

Must Have

• Terraform — modules, state, multi-environment and multi-region layout, and specifically import, state mv/rm, targeted applies, and diagnosing drift on infrastructure you did not create.
• AWS depth, not breadth — VPC and networking (peering, NAT, security groups, NACLs), IAM, ECS/Fargate, Aurora MySQL including Serverless v2, ALB/NLB, S3, Secrets Manager and SSM, CloudWatch, Lambda, Batch.
• CloudFormation you can author and deploy, not only read — legacy templates are still load-bearing here and will be for a while.
• CI/CD ownership — GitHub Actions and Jenkins, building and maintaining pipelines rather than consuming them.
• Bash and Python for automation, tooling and operational glue.
• Aurora MySQL operations — sizing and scaling, snapshots, clones and restores, failover, connection and pool behaviour, and reading a slow query. The application's schema is not yours to own.
• Incident discipline — scope by time window, form a hypothesis, prepare a rollback before you touch anything, write up what happened.
• Cost awareness as an engineering skill, not a finance report.
• AI-assisted engineering — practical experience using coding agents, writing clear guidance for them and building automated checks around their output. Sound engineering judgment and human review of production changes are essential.
• Clear written English and the habit of documenting so someone else can operate it.

Strongly Preferred

• Multi-region operations (EU + US) and data-residency awareness.
• Experience with AWS GovCloud or other regulated cloud environments, including controlled access and operational requirements.
• Deploying a product into a customer's own cloud account, and writing the documents their security review consumes.
• PR-based infrastructure change and review culture — plan output read as evidence, not as a formality.
• SSO/OIDC, CloudFront behaviour and debugging.
• Vulnerability patching at image and dependency level (ECR, Trivy, Scout, Dependabot or equivalents).
• ISO 27001 / SOC 2 exposure from the engineering side.

Nice to Have

• AWS certifications (Solutions Architect, DevOps Engineer Professional).
• Azure or GCP exposure.
• Java / Spring Boot familiarity, enough to read the application and reason about deployment behaviour.
• WAF and edge security, EKS/Kubernetes, Datadog or Grafana-stack experience are signals of range, not requirements.

How You Work

• You automate repetitive work and maintain clear operational documentation
• You are comfortable improving established systems while keeping them running reliably
• You treat infrastructure as code as an ongoing engineering responsibility
• You take ownership of operational problems across infrastructure and application behaviour
• You balance planned improvements with internal engineering support. Around half of the team's incoming work involves helping other teams resolve blockers
• You document decisions and procedures so others can operate the systems you maintain

You'll help shape how we operate and improve the infrastructure behind an enterprise platform. Your work will improve deployment reliability, cloud efficiency, security and the day-to-day experience of our engineering teams.

This is a hands-on role in a small team, with broad ownership across an established platform. You'll balance infrastructure modernization with production operations, on-call responsibilities and substantial internal engineering support.