Senior Principal Cloud Infrastructure and Platform Engineer

Senior Principal Cloud Infrastructure and Platform Engineer

Location: South San Francisco, CA (Hybrid Tu+Th)

Bridge Analytics is seeking a senior, security-minded Cloud Infrastructure and Platform Engineering leader to own the cloud architecture of the Bridge Analytics Environment (BAE) — a Trusted Research Environment (TRE) on Google Cloud Platform (GCP) that gives scientists secure, fully-audited access to harmonized, multi-modal biomedical data with scalable compute resources. In this role, you will own the cloud infrastructure, Site Reliability Engineering (SRE), and Zero Trust security perimeter for internal and external researchers across a growing data portfolio advancing science and therapeutics for Parkinson’s disease, autism, and bipolar disorder.

Joining our small, rapidly scaling team gives you the rare opportunity to architect the platform before legacy tech debt accumulates—harnessing AI-assisted coding and automation to build at 10x the speed of a traditional enterprise team. You set the technical direction and build hands-on, backed by several teams of contracting engineers with expertise in engineering and scientific compute. You will operate in a fast-scaling, DevSecOps environment where auditability via GitOps and Terraform is key. We are looking for a true owner who can codify a live platform into Infrastructure as Code (IaC) and set the reliability, scalability, and cloud security bar for the whole environment.

Key Responsibilities

• Technical Leadership: Architect technical specifications and hand work to contractor resources to implement the work at scale.
• SDLC, CI/CD, & Delivery Backbone: Establish parity dev, test, and production environments with CI/CD pipelines (Google Cloud Build, GitHub Actions) on our Infrastructure as Code (Terraform, CDKTF, Python), deploying reliably across multi-tenant GCP projects for both internal data engineering and external researchers.
• Site Reliability Engineering (SRE): Define SLOs/SLIs and build the observability, monitoring, alerting (Cloud Monitoring), incident management, and runbooks for live researcher workloads and retire single points of failure so the platform maintains high availability. Light on-call rotation supported by contractor resources.
• Cloud Security & Zero Trust Perimeter Ownership: Own and harden the security perimeter alongside our IT and Compliance partners — VPC Service Controls (VPC-SC), Assured Workloads, Cloud Armor, KMS, Secret Manager, organization policy, and least-privilege IAM — along with Data Loss Prevention (DLP), the exfiltration posture (full and controlled exfiltration prevention, geo-blocking) and forensic audit logging that keep a regulated TRE and sensitive PII demonstrably safe.
• Identity & Access Management (IAM): Automate the access and permissions lifecycle — group-based RBAC, Single Sign-On (SSO), and provisioning via Cloud Identity and OIDC federation.

Who You Are

• You have deep, hands-on experience in cloud architecture, building and operating production cloud and distributed systems, and the seniority to set the technical bar for an entire platform — not just a single service.
• You thrive as a Principal Engineer (IC) — you would rather set system architecture direction and be a part of the hands-on build alongside a team of engineers (internal and consulting).
• You treat cloud security as non-negotiable and can own a regulated perimeter end-to-end, from VPC Service Controls and IAM to DLP and complete audit logging.
• You are a force multiplier: you turn tribal knowledge into Infrastructure as Code (IaC), automation, and runbooks, and you direct contractor and consultant resources through technical specification documentation and acceptance criteria rather than carrying every ticket yourself.
• You don’t wait to be told what to do; you proactively anticipate failure modes, conduct root cause analysis (RCA), and retire single points of failure before they become incidents.
• You are eager to adopt and integrate modern AI and LLM developer tools (e.g., Claude Code, Antigravity) into your daily workflow to multiply your impact — this is an AI-native team.
• You care about the HealthTech and Biotech mission and want your work in researchers’ hands in weeks, not years.

Qualifications

Minimum Qualifications:

• Experience: 10+ years in Cloud Infrastructure, Platform Engineering, DevOps, or Site Reliability Engineering (SRE) roles, operating production cloud at scale.
• Infrastructure as Code and Automation: Expert with Terraform in production (CDKTF and strong Python a major plus); fluent with CI/CD (GitHub Actions, Cloud Build), GitOps, Docker, and containers.
• Cloud Security and DevSecOps: Proven ownership of a security perimeter at scale — identity and least-privilege (IAM, VPC Service Controls, organization policy, Cloud KMS), DLP/exfiltration control, vulnerability management, and audit logging.
• Regulated Environments: Experience operating regulated or security-sensitive environments (HIPAA, HITRUST, GDPR, SOC 2, NIST, PII data governance, GxP, or equivalent).
• Leadership Through Influence: Track record of directing contractor or consultant resources.

Preferred Qualifications:

• Multi-Cloud / Google Cloud Platform (GCP): Hands-on expertise in architecting cloud-native infrastructure systems with IAM, cloud networking (VPC, Load Balancing), Google Kubernetes Engine (GKE), Cloud Run, Cloud Composer (Apache Airflow) DAG orchestration, BigQuery, and Vertex AI Agentic Platform.
• Data Engineering & Scientific Compute: Cloud Composer/Apache Airflow DAG orchestration, Dataplex / Knowledge Catalog, and Cloud Batch/GKE for scientific compute.
• Regulated Research Platforms: Trusted Research Environments (TRE), Life Sciences / Biotech and Pharma data platforms, or HIPAA/GDPR/PII-regulated data platforms; Policy as Code (OPA/Rego); the GA4GH ecosystem; confidential computing.
• Tech Adaptability: Enthusiasm for integrating AI coding and operations tools (e.g., Claude Code) into daily engineering workflows to optimize efficiency.
• Secure Remote Access: VDI / desktop-streaming or browser-isolation platforms (Kasm, Google Cloud Workstations, Chrome Enterprise); IAP with OIDC federation to Cloud Identity.

When applying, please include an answer to the following in your resume:

• Why are you interested in this role? We are looking for candidates who possess a genuine, strong interest in accelerating research for neurodegenerative and CNS disorders.