Senior Cloud Engineering Architect - Evinova

WHY JOIN US?Evinova is a health-tech business focused on accelerating better health outcomes by advancing digital transformation across the life sciences sector. By combining science-based expertise, evidence-led rigor, and deep human insight, we design digital solutions that enable healthcare to work better for everyone.Operating at the intersection of healthcare, technology, data, and analytics, we are helping unlock the full potential of digital health, transforming how clinical research is conducted, how care is delivered, and how patients experience healthcare. Our solutions are built to scale, driving efficiency, improving decision-making, and ultimately delivering better outcomes for patients worldwide.At Evinova, we are driven by a shared purpose to transform health through data and digital innovation. Our teams collaborate across disciplines to solve complex challenges, continuously learning and evolving in a fast-paced, high-impact environment.We also recognize the importance of flexibility and balance. Our ways of working support both individual needs and team collaboration. To foster connection and collaboration, employees are expected to work from the office three days per week, creating opportunities for in-person teamwork, innovation, and meaningful connection.About the Role:As a DevOps/Cloud Infrastructure leader at Evinova, you'll help design, build, and operate the secure, scalable cloud foundation behind our digital health products. You'll take a hands-on technical leadership role across AWS, Kubernetes/EKS, infrastructure as code, CI/CD, security, observability, and automation, supporting highly available, multi-tenant SaaS platforms.You'll work closely with engineering, product, and security teams to strengthen platform reliability, scalability, and operational excellence while helping establish cloud engineering best practices across the organization. Key ResponsibilitiesInfrastructure Design & Management:Architect and manage scalable, multi-tenant AWS-based infrastructure using AWS CDK, ensuring modular and maintainable codebases.Kubernetes & EKS: Lead the deployment and management of Kubernetes clusters using Amazon EKS, implementing best practices for scalability and security.CI/CD Pipelines: Build, manage, and enhance automated CI/CD pipelines to ensure efficient, reliable deployments using tools like ArgoCD and GitHub Actions.IAM Role Management: Design, maintain, and optimize IAM roles, policies, and guardrails to ensure least privilege access across AWS resources.Networking: Architect and maintain AWS networking components such as VPCs, Transit Gateway, ALB, and Security Groups, ensuring robust security and performance.Security & Compliance: Implement DevSecOps best practices, including IAM security, encryption standards, and compliance with industry regulations (GXP, GDPR, HIPAA, NIST).AWS WAF & Firewall Policies: Design and implement firewall policies and AWS WAF configurations to protect applications from web threats.Automation: Lead efforts to automate infrastructure provisioning, application releases, and ETL workflows, reducing manual intervention and improving efficiency.Monitoring & Incident Response: Develop and implement comprehensive monitoring, logging, and alerting systems using OpenTelemetry, Prometheus, Grafana, AWS CloudWatch, and AWS CloudTrail.AWS EventBridge & CloudTrail: Utilize AWS EventBridge for event-driven automation and troubleshoot security and operational issues using AWS CloudTrail.Governance & Strategic Input: Drive governance processes, including security reviews, cost optimization, and operational consistency across the platform.AWS Control Tower & Multi-Account Management: Manage multiple AWS accounts using AWS Control Tower and best practices for account isolation.AI & Machine Learning: Exposure to AI tools and frameworks is a plus.Mentorship & Leadership: Mentor and guide junior and mid-level engineers, fostering a culture of learning and collaboration. Provide technical leadership in the adoption of AWS CDK and best practices for cloud automation.Collaboration: Partner with cross-functional teams, including product management and security, to align DevOps strategies with business goals and ensure cohesive development and operational workflows.Required Experience & Qualifications10+ years in DevOps or cloud infrastructure roles, with significant experience in SaaS and multi-tenant platforms. Proven track record of mentoring team members in Cloud infrastructure related projects.Cloud Expertise: Expert knowledge of AWS services, including VPC, IAM, EC2, S3, RDS, Lambda, EKS, AWS WAF, AWS EventBridge, and AWS CloudTrail.Containerization & Orchestration: Deep proficiency in Docker, Kubernetes, Helm, and associated ecosystem tools.CI/CD Proficiency: Expertise in CI/CD tools such as ArgoCD and GitHub Actions.Infrastructure as Code (IaC): Advanced experience with AWS CDK (TypeScript preferred) and CloudFormation.Networking: Strong understanding of AWS networking services such as VPCs, Transit Gateway, ALB, and Security Groups.Security: In-depth knowledge of IAM, AWS KMS, encryption standards, AWS WAF, and security compliance frameworks including NIST.Monitoring & Alerting: Extensive experience with OpenTelemetry, Prometheus, Grafana, AWS CloudWatch, and AWS CloudTrail for monitoring and incident response.Data & ETL Pipelines: Familiarity with AWS Glue and Managed Kafka for real-time and batch data processing.Programming & Automation: Strong scripting and automation skills using TypeScript and Bash.Multi-Account AWS Management: Experience managing multiple AWS accounts with AWS Control Tower.Communication & Collaboration: Exceptional verbal and written communication skills, with the ability to explain complex technical concepts to diverse stakeholders.Desired Experience & QualificationsAdvanced expertise in AWS CDK, including building complex, reusable constructs and pipelines.Familiarity with Projen for automating CDK project configuration and management.Hands-on experience with Helm charts and Kubernetes manifests.Experience with monitoring and logging tools such as Prometheus, Grafana, and AWS CloudWatch.Exposure to multi-tenant SaaS platforms and best practices.Experience working with AI tools and frameworks.Personal AttributesBig Picture: Able to understand the strategic direction and help architect smaller initiatives with the direction in mind.Mentor & Leader: Enjoys mentoring team members, and fostering a collaborative, innovation-driven team culture.Organized & Adaptable: Able to manage multiple priorities and thrive in a fast-paced environment.Innovative: Passionate about leveraging technology to solve complex problems and drive efficiency.Customer-Focused: Dedicated to building infrastructure that delivers measurable business and customer value.SO, WHAT’S NEXT?To be considered for this exciting opportunity, please complete the full application on our website at your earliest convenience – it is the only way that our Recruiter and Hiring Manager can know that you feel well qualified for this opportunity. If you know someone who would be a great fit, please share this posting with them.Where can I find out more?Explore what we’re building: Stay connected and see our impact in action: Apply today to bring smarter, faster clinical trials to life!Evinova is an equal opportunity employer that is committed to diversity and inclusion and providing a workplace that is free from discrimination. Evinova is committed to accommodating persons with disabilities. Such accommodation is available on request in respect of all aspects of the recruitment, assessment and selection process and may be requested by emailing View email address on click.appcast.io.#LI-HybridThe annual base pay for this position ranges from $187,000 - $246,000 USD. Base pay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. In addition, our positions offer a short-term incentive bonus opportunity; eligibility to participate in our equity-based long-term incentive program. Benefits offered included a qualified retirement program [401(k) plan]; paid vacation and holidays; paid leaves; and, health benefits including medical, prescription drug, dental, and vision coverage in accordance with the terms and conditions of the applicable plans.Additional details of participation in these benefit plans will be provided if an employee receives an offer of employment. If hired, employee will be in an “at-will position” and the Company reserves the right to modify base pay (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.Date Posted28-Oct-2026Closing Date12-Nov-2026Our mission is to build an inclusive environment where equal employment opportunities are available to all applicants and employees. In furtherance of that mission, we welcome and consider applications from all qualified candidates, regardless of their protected characteristics. If you have a disability or special need that requires accommodation, please complete the corresponding section in the application form.SummaryLocation: US - Gaithersburg - MDType: Full time