Senior Software Engineer, AWS Cloud Infrastructure

Description

The company is a clinical-stage biopharmaceutical business developing treatments for central nervous system disorders linked to neuronal imbalance, approached through genetic findings.

This role centres on the company's AWS estate, from account layout and identity through to the platforms and applications that run on them. You will build hands-on, combining cloud infrastructure and software engineering to create secure, dependable systems that help teams ship faster.

Your work sits where software engineering, cloud infrastructure, security and operations meet. Day to day you will use TypeScript and Python, apply current AI tools in your engineering routine, and own production operations, on-call included.

You will take problems from first sign through to resolution, make small controlled changes, challenge assumptions when a better route exists, and turn operational lessons into lasting fixes. You will also lift the people around you by sharing knowledge and communicating clearly.

Responsibilities

• Design and evolve AWS architecture for enterprise workloads: multi-account foundations, landing zone or Control Tower patterns, networking, security baselines and shared platforms.
• Set up and keep improving AWS governance: organisational structure, SCPs, tagging, cost controls, compliance, audit readiness and standards that hold up over time.
• Design and run identity and access on AWS, covering IAM, IAM Identity Center and Microsoft Entra ID integration for SSO, federation, role mapping, access reviews and least privilege.
• Build, harden and run AWS platforms and full-stack services in TypeScript and Python, across compute, containers, serverless, data stores, messaging and automation where needed.
• Raise operational standards with monitoring, alerting, dashboards, SLOs and SLIs, runbooks and incident practice, plus permanent fixes for repeat problems. Take part in the on-call rotation and own incidents through to resolution and review.
• Automate infrastructure and delivery with Infrastructure as Code, preferably Pulumi and/or SST, and CI/CD on Bitbucket Pipelines and/or GitHub Actions, favouring safe incremental releases with a small blast radius.
• Work with engineering and IT to turn needs into secure, maintainable solutions, improve production readiness, mentor engineers and balance speed against risk.

Requirements

• Senior software engineering background, with substantial hands-on time building and running production systems on AWS.
• Strong full-stack skills in TypeScript and Python, covering APIs, services, tooling and cloud automation.
• Deep working knowledge of core enterprise AWS services: IAM, Organizations, VPC, EC2, ECS or EKS or Lambda, S3, RDS or DynamoDB, CloudWatch, KMS, Config and GuardDuty.
• Proven record of designing and running AWS governance at scale, including multi-account strategy, policy guardrails, access control, security standards and operational controls.
• Solid AWS networking fundamentals: VPNs, peering, Transit Gateway, routing, DNS and hybrid connectivity.
• Enterprise SSO experience. Microsoft Entra ID (Azure AD) federation into AWS is strongly preferred, including SAML or OIDC, IAM Identity Center, application and role mapping and access lifecycle practice.
• Experience in regulated or audit-ready settings, with disciplined change control, evidence and traceability, least privilege and durable controls.
• Demonstrated operational ownership: you set useful alerts and monitors, cut noise, improve reliability, handle incidents and turn lessons into engineering work.
• Strong Infrastructure as Code experience. Pulumi and/or SST is strongly preferred. Terraform or AWS CDK experience transfers and is welcome.
• Experience with Bitbucket Pipelines and/or GitHub Actions.
• Proficient with modern AI coding and productivity tools, and able to check outputs, test changes, manage risk and keep production quality high.

Conditions

Annualised base salary of $125,000 to $150,000 USD.

The role may be performed remotely but requires flexibility and willingness to travel as needed.

Role demands include regular screen work, clear communication, occasional movement, hand coordination and focus; reasonable accommodations are available for people with disabilities.

Benefits

• The company pays 99% of the premium for medical, dental and vision plans, plus company-paid life insurance, AD&D and disability benefits, with optional voluntary plans to tailor your cover.
• 401(k) with dollar-for-dollar matching up to 6% of eligible contributions.
• Long-term stock incentives and an ESPP.
• Discretionary quarterly bonus.
• Flexible wellness benefit, generous PTO, paid holidays and company-wide shutdowns.