DevOps Infrastructure Engineer – Internal Developer Platform

About the role

Roche is seeking a senior DevOps Infrastructure Engineer to design and operate a secure, self‑service Internal Developer Platform. The role involves end‑to‑end responsibility for cloud infrastructure, security automation and platform reliability.

Key responsibilities

• Drive continuous monitoring and automated patching of cloud server OS vulnerabilities.
• Create and maintain hardened cloud server AMIs using IaC tools such as Terraform, Ansible and Packer.
• Manage Cloud Security Hub, Security Center and handle security alerts, triage and remediation.
• Oversee deployment and maintenance of endpoint security agents (Cortex XDR, Nessus) and optimize cloud KMS for data encryption.
• Develop cloud security AIOps to predict, detect and automatically remediate anomalies.
• Lead secure software supply‑chain integration across CI/CD pipelines, including SAST, DAST, SCA and runtime security monitoring.
• Hardening of Kubernetes clusters, implementing network policies, container runtime security and configuration baselines.
• Establish unified secret management using centralized vault solutions.

Required profile

• Proven experience in designing and operating large‑scale cloud platforms with a strong security focus.
• Ability to work independently and set technical direction across the full platform lifecycle.
• Experience leading security assessments and implementing proactive mitigation strategies.

Required skills

• Terraform, Ansible, Packer (IaC)
• Cloud Security Hub, Security Center, KMS
• Cortex XDR, Nessus
• CI/CD pipelines, SAST, DAST, SCA
• Kubernetes hardening, network policies
• Secret vaulting solutions
• AIOps for security automation