Lead Cloud Platform Engineer

At KBI Biopharma, we are advancing science and accelerating breakthroughs. As a global leader in biopharmaceutical development and manufacturing, we empower life science companies to bring new medicines and vaccines to the world faster. Explore your potential at KBI, where innovation meets impact.  Position Summary: To support KBI's Digital transformation, the Lead Cloud Platform Engineer position is a critical role in the Digital group within the Information Technology department. The Digital group is responsible for transforming KBI through delivering and supporting custom digital products (data and applications). These applications are built using services and cloud technologies provided by Amazon Web Services and the cloud platform engineering functions are to collaborate with product teams to build, deploy, monitor, and support these applications. The Lead Cloud Platform Engineer role is expected to own the design, delivery and roadmap, of our Digital Platform product and monitor the technology landscape to constantly increase security, reliability, robustness and speed of development and deployment of new or existing Digital products, so as to maximize the Digital group’s impact on KBI’s business and its clients. Responsibilities: ·       Own and deliver a high-availability Digital platform a to a large portfolio of diverse digital products. Deliver high-availability and minimized cloud infrastructure cost through automations, monitoring, automated alerting, and manual intervention. ·       Design and lead the implementation of all needed pro-active and reactive protection and monitoring measures to keep all company data stored in our Digital cloud infrastructure secure and prevent un-authorized access. ·       Work closely with our dev-ops and development teams to implement their cloud requirements and deploy new and existing applications to our cloud infrastructure (“Digital Platform”). ·       Establish and document standards for how development team must operate to be hosted in the Digital Platform to ensure information security and application reliability. Train development teams to understand and adhere to these standards. ·       Establish, own and execute the Digital platform’s roadmap of enhancements to constantly accelerate product development and ensure best cloud computing practices are followed. ·       Establish, review and maintain our suite of cloud security tools to ensure data and application security in the cloud. Own and ensure close collaboration with the cyber-security team in IT-ops to ensure seamless data security across both on-prem and cloud infrastructures. ·       Design developer access to the needed Digital Platform resources that ensures both data security, and application resilience and reliability. ·       Identify, design and update tooling to support monitoring cloud usage and mimizing operation cost to make sure instances are right sized, resources are used optimally, and spend can be reviewed granularly (by month, by product, by service, ...), understood and reported. ·       Design, develop, automate, maintain, and document cloud configurations and related services. Design and develop automation scripts to support our “Infrastructure as Code” strategy, auditability and robustness. ·       Develop, automate, maintain, and document networking infrastructure in AWS to ensure security, and reliability. ·       Own and ensure close collaboration with IT-ops, IT-cybersecurity and the IT-network teams to ensure smooth operations across our on-prem and Cloud resources. ·       Develop, maintain, and document the various accounts and services, such as development, test, and production environments. Design, deploy and maintain a set of accounts that enable the development of applications both GMP and non-GMP, balancing the different needs for documented state of the first group (GMP) with the need for flexibility and speed of the second group (non-GMP). ·       Manage and quickly respond to Digital Platform end-user issues and support needs while still achieving group, and departmental objectives. ·       Own and lead the monitoring and adoption of advancements in the cloud technology industry to inform our cloud strategy and roadmap, and continuously seek to deliver more robust services. Requirements:  ·       MA/MS degree in a quantitative field (ex. computer science, engineering, math, physics, etc.) and 10 years of proven experience managing cloud infrastructure platforms or BA/BS and 12 years of experience or equivalent. ·       10+ years of experience managing cloud technologies required to develop a robust, secure and scalable platform, leveraging all relevant cloud services: AWS ControlTower, S3, Redshift, EKS, IAM, EC2, ECS... Three or more AWS associate or higher-level certifications a plus. ·       10+ years of infrastructure automation experience such as CloudFormation, Serverless Framework, or Terraform ·       Expert knowledge of cloud networking concepts to support optimized data and resource access control and ensure information security. ·       5+ years of proven ability to develop, debug and maintain automation and monitoring scripts to manage the platform on a day-to-day basis, optimize for cost, ... using scripting tools such as Python, or Bash or Powershell. ·       5+ years of proven experience supporting application deployment and management automation frameworks, e.g. ArgoCD, Docker, ... ·       Experience supporting or executing internal and external security audits and acquiring security certifications (SOC 2, ISO27001, ...). ·       Driven individual with exceptional communication skills, comfortable discussing, and presenting to senior leadership and auditors. ·       Exceptionally effective and creative problem-solver ·       Experience working across technical disciplines and departments to drive business outcomes. Preferred qualifications: ·       5+ years of experience working in an A