Lead Cloud Platform Engineer

At KBI Biopharma, we are advancing science and accelerating breakthroughs. As a global leader in biopharmaceutical development and manufacturing, we empower life science companies to bring new medicines and vaccines to the world faster. Explore your potential at KBI, where innovation meets impact. Position Summary: To support KBI's Digital transformation, the Lead Cloud Platform Engineer position is a critical role in the Digital group within the Information Technology department. The Digital group is responsible for transforming KBI through delivering and supporting custom digital products (data and applications). These applications are built using services and cloud technologies provided by Amazon Web Services and the cloud platform engineering functions are to collaborate with product teams to build, deploy, monitor, and support these applications. The Lead Cloud Platform Engineer role is expected to own the design, delivery and roadmap, of our Digital Platform product and monitor the technology landscape to constantly increase security, reliability, robustness and speed of development and deployment of new or existing Digital products, so as to maximize the Digital group’s impact on KBI’s business and its clients. Responsibilities: · Own and deliver a high-availability Digital platform a to a large portfolio of diverse digital products. Deliver high-availability and minimized cloud infrastructure cost through automations, monitoring, automated alerting, and manual intervention. · Design and lead the implementation of all needed pro-active and reactive protection and monitoring measures to keep all company data stored in our Digital cloud infrastructure secure and prevent un-authorized access. · Work closely with our dev-ops and development teams to implement their cloud requirements and deploy new and existing applications to our cloud infrastructure (“Digital Platform”). · Establish and document standards for how development team must operate to be hosted in the Digital Platform to ensure information security and application reliability. Train development teams to understand and adhere to these standards. · Establish, own and execute the Digital platform’s roadmap of enhancements to constantly accelerate product development and ensure best cloud computing practices are followed. · Establish, review and maintain our suite of cloud security tools to ensure data and application security in the cloud. Own and ensure close collaboration with the cyber-security team in IT-ops to ensure seamless data security across both on-prem and cloud infrastructures. · Design developer access to the needed Digital Platform resources that ensures both data security, and application resilience and reliability. · Identify, design and update tooling to support monitoring cloud usage and mimizing operation cost to make sure instances are right sized, resources are used optimally, and spend can be reviewed granularly (by month, by product, by service, ...), understood and reported. · Design, develop, automate, maintain, and document cloud configurations and related services. Design and develop automation scripts to support our “Infrastructure as Code” strategy, auditability and robustness. · Develop, automate, maintain, and document networking infrastructure in AWS to ensure security, and reliability. · Own and ensure close collaboration with IT-ops, IT-cybersecurity and the IT-network teams to ensure smooth operations across our on-prem and Cloud resources. · Develop, maintain, and document the various accounts and services, such as development, test, and production environments. Design, deploy and maintain a set of accounts that enable the development of applications both GMP and non-GMP, balancing the different needs for documented state of the first group (GMP) with the need for flexibility and speed of the second group (non-GMP). · Manage and quickly respond to Digital Platform end-user issues and support needs while still achieving group, and departmental objectives. · Own and lead the monitoring and adoption of advancements in the cloud technology industry to inform our cloud strategy and roadmap, and continuously seek to deliver more robust services. Requirements: · MA/MS degree in a quantitative field (ex. computer science, engineering, math, physics, etc.) and 10 years of proven experience managing cloud infrastructure platforms or BA/BS and 12 years of experience or equivalent. · 10+ years of experience managing cloud technologies required to develop a robust, secure and scalable platform, leveraging all relevant cloud services: AWS ControlTower, S3, Redshift, EKS, IAM, EC2, ECS... Three or more AWS associate or higher-level certifications a plus. · 10+ years of infrastructure automation experience such as CloudFormation, Serverless Framework, or Terraform · Expert knowledge of cloud networking concepts to support optimized data and resource access control and ensure information security. · 5+ years of proven ability to develop, debug and maintain automation and monitoring scripts to manage the platform on a day-to-day basis, optimize for cost, ... using scripting tools such as Python, or Bash or Powershell. · 5+ years of proven experience supporting application deployment and management automation frameworks, e.g. ArgoCD, Docker, ... · Experience supporting or executing internal and external security audits and acquiring security certifications (SOC 2, ISO27001, ...). · Driven individual with exceptional communication skills, comfortable discussing, and presenting to senior leadership and auditors. · Exceptionally effective and creative problem-solver · Experience working across technical disciplines and departments to drive business outcomes. Preferred qualifications: · 5+ years of experience working in an Agile framework such as SCRUM. Salary Range: $152,000 - $209,000 Salary range provided per current averages and expectations. The salary and job title for this opening will be based on the selected candidate’s qualifications and experience and may be outside this range. KBI has a robust total rewards strategy which includes an annual bonus structure for all employees, medical, dental, and vision coverage, paid PTO and holidays, 401K matching with 100% vesting in 60 days and employee recognition programs. KBI Biopharma, Inc. is an EEO/AA employer and actively seeks to diversify its work force. Therefore, all qualified applicants, regardless of race, color, national origin, religion, gender, gender identity, sexual orientation, age, disability or veteran status, are strongly encouraged to apply. I understand that neither the completion of this application nor any other part of my consideration for employment establishes any obligation for KBI Biopharma, Inc. to hire me. If I am hired, I understand that either KBI Biopharma, Inc. or I can terminate my employment at any time and for any reason, with or without cause and without prior notice. I understand that no representative of KBI Biopharma, Inc. has the authority to make any assurance to the contrary. I attest with my signature below that I have given to KBI Biopharma, Inc. true and complete information on this application. No requested information has been concealed. I authorize KBI Biopharma, Inc. to contact references provided for employment reference checks. If any information I have provided is untrue, or if I have concealed material information, I understand that this will constitute cause for the denial of employment or immediate dismissal. At KBI, we are constantly seeking to improve our team with accomplished individuals who share in our commitment to serve our clients as they seek to advance important medicines to the patients who need them. We offer our employees a challenging, rewarding and fast-paced environment along with the opportunity for career advancement through the development of one’s technical skills. At KBI, employees work in a collaborative, team environment, where sharing knowledge and expertise with one another is strongly encouraged. If you do not see a position that matches your background, we invite you to return to our site often as positions are updated frequently. Please Note: To 3rd Party Search Firms/Employment Agencies: All inquiries must be directed to staffinginquiry@kbibiopharma.com. Please do not call or email any KBI Biopharma employee about current or future job openings. All resumes submitted by search firms or employment agencies to any employee at KBI Biopharma via-email, telephone, social media or other means will be deemed to be the sole property of KBI Biopharma, unless the firm submitting the resume has previously entered into a written agreement with KBI Biopharma regarding recruitment services and has been approved by Human Resources to work on an open position. KBI Biopharma will not pay any fee or remuneration with respect to candidates without complying with this requirement.