SENIOR DEVOPS ENGINEER

Role based in Barcelona - 3 days at the office / 2 days at home Introduction to role.
Are you ready to shape the future of healthcare? Evinova, a healthtech leader under the AstraZeneca Group, is seeking a passionate and experienced Senior DevOps Engineer to lead the transformation of our SaaS platform infrastructure and operations.
Join us in leveraging cutting-edge technology, data, and AI to revolutionize life sciences and improve billions of lives globally.
In this pivotal role, you will design, implement, and optimize robust cloud-based infrastructure and operational frameworks that enable rapid innovation and deliver exceptional system reliability.
You will also guide and mentor team members, sharing your expertise in AWS CDK automation, Kubernetes, networking, and DevOps best practices.
Accountabilities.
- Infrastructure Design & Management.
Architect and manage scalable, multi-tenant AWS-based infrastructure using AWS CDK, ensuring modular and maintainable codebases.
- Kubernetes & EKS.
Lead the deployment and management of Kubernetes clusters using Amazon EKS, implementing best practices for scalability and security.
- CI/CD Pipelines.
Build, manage, and enhance automated CI/CD pipelines to ensure efficient, reliable deployments using tools like ArgoCD and GitHub Actions.
- IAM Role Management.
Design, maintain, and optimize IAM roles, policies, and guardrails to ensure least privilege access across AWS resources.
- Networking.
Architect and maintain AWS networking components such as VPCs, Transit Gateway, ALB, and Security Groups, ensuring robust security and performance.
- Security & Compliance.
Implement DevSecOps best practices, including IAM security, encryption standards, and compliance with industry regulations (GXP, GDPR, HIPAA, NIST).
- AWS WAF & Firewall Policies.
Design and implement firewall policies and AWS WAF configurations to protect applications from web threats.
- Automation.
Lead efforts to automate infrastructure provisioning, application releases, and ETL workflows, reducing manual intervention and improving efficiency.
- Monitoring & Incident Response.
Develop and implement comprehensive monitoring, logging, and alerting systems using OpenTelemetry, Prometheus, Grafana, AWS CloudWatch, and AWS CloudTrail.
- AWS EventBridge & CloudTrail.
Utilize AWS EventBridge for event-driven automation and troubleshoot security and operational issues using AWS CloudTrail.
- Governance & Strategic Input.
Drive governance processes, including security reviews, cost optimization, and operational consistency across the platform.
- AWS Control Tower & Multi-Account Management.
Manage multiple AWS accounts using AWS Control Tower and best practices for account isolation.
- AI & Machine Learning.
Exposure to AI tools and frameworks is a plus.
- Mentorship & Leadership.
Mentor and guide junior and mid-level engineers, fostering a culture of learning and collaboration.
Provide technical leadership in the adoption of AWS CDK and best practices for cloud automation.
- Collaboration.
Partner with cross-functional teams, including product management and security, to align DevOps strategies with business goals and ensure cohesive development and operational workflows.
Essential Skills/Experience.
- Experience.
7+ years in DevOps or cloud infrastructure roles, with significant experience in SaaS and multi-tenant platforms.
Proven track record of mentoring team members.
- Cloud Expertise.
Expert knowledge of AWS services, including VPC, IAM, EC2, S3, RDS, Lambda, EKS, AWS WAF, AWS EventBridge, and AWS CloudTrail.
- Containerization & Orchestration.
Deep proficiency in Docker, Kubernetes, Helm, and associated ecosystem tools.
- CI/CD Proficiency.
Expertise in CI/CD tools such as ArgoCD and GitHub Actions.
- Infrastructure as Code (IaC).
Advanced experience with AWS CDK (TypeScript preferred) and CloudFormation.
- Networking.
Strong understanding of AWS networking services such as VPCs, Transit Gateway, ALB, and Security Groups.
- Security.
In-depth knowledge of IAM, AWS KMS, encryption standards, AWS WAF, and security compliance frameworks including NIST.
- Monitoring & Alerting.
Extensive experience with OpenTelemetry, Prometheus, Grafana, AWS CloudWatch, and AWS CloudTrail for monitoring and incident response.
- Data & ETL Pipelines.
Familiarity with AWS Glue and Managed Kafka for real-time and batch data processing.
- Programming & Automation.
Strong scripting and automation skills using TypeScript and Bash.
- Multi-Account AWS Management.
Experience managing multiple AWS accounts with AWS Control Tower.
- Communication & Collaboration.
Exceptional verbal and written communication skills, with the ability to explain complex technical concepts to diverse stakeholders.
Desirable Skills/Experience.
- Advanced expertise in AWS CDK, including building complex, reusable constructs and pipelines.
- Familiarity with Projen for automating CDK project configuration and management.
- Hands-on experience with Helm charts and Kubernetes manifests.
- Experience with monitoring and logging tools such as Prometheus, Grafana, and AWS CloudWatch.
- Exposure to multi-tenant SaaS platforms and best practices.
- Experience working with AI tools and frameworks.
AstraZeneca is a place where innovation meets purpose.
Our work directly impacts patients by transforming our ability to develop life-changing medicines.
We empower our teams to perform at their peak by combining cutting-edge science with leading digital technology platforms.
With a focus on data analytics, AI, machine learning, and more, we drive cross-company change to disrupt the industry.
Here you can explore new solutions in a dynamic environment that encourages lifelong learning.
Ready to make a difference? Apply now to join Evinova in redefining healthcare through technology! Date Posted 14-jul- Closing Date 27-jul- AstraZeneca embraces diversity and equality of opportunity.
We are committed to building an inclusive and diverse team representing all backgrounds, with as wide a range of perspectives as possible, and harnessing industry-leading skills.
We believe that the more inclusive we are, the better our work will be.
We welcome and consider applications to join our team from all qualified candidates, regardless of their characteristics.
We comply with all applicable laws and regulations on non-discrimination in employment (and recruitment), as well as work authorization and employment eligibility verification requirements.