Solution Architect (Cloud Tenants)

Description

The company develops medical technology and runs a global team of more than 72,000 people in over 70 countries.

The DX business is building an informatics SaaS platform for healthcare, and this role supports the cloud tenant for its customers.

You will lead the strategy, architecture and operations of the cloud tenant infrastructure across multi-tenant environments, guiding a team of architects and engineers and driving infrastructure projects with global IT and cybersecurity teams. The role calls for 8-10+ years of cloud architecture and infrastructure leadership, with strong skills in AWS, Azure or GCP, cloud security, automation and enterprise IT operations.

This suits an experienced IT expert ready for the next step in their career. The job is IT Team Lead, Service and Product Ownership (Cloud Tenants) for the DX business.

The team works in a fast-paced setting with a demanding customer base that needs continuous uptime and quick fixes. Work spans several regions and time zones, and the environment is regulated, so infrastructure is qualified and every change needs evidence.

First-year goal: the tenant's policy baseline and subscription vending run unattended with no standing admin rights, and the first assessment under the certification program is complete.

Responsibilities

• Build and own the future DX cloud tenant infrastructure, which hosts a healthcare software platform with regulatory and certification requirements.
• Own the architecture and operation of all cloud-based tenants for the infrastructure organization.
• Operate the tenant using delegated rights and roll out tenant-wide changes in stages.
• Run subscription vending as an unattended pipeline and handle its downstream reporting.
• Produce operating evidence for the tenant's ISO 27001, SOC 2 and HITRUST certifications and support audits.
• Qualify infrastructure and validate tenant automation together with quality and regulatory functions.
• Train and upskill architects and engineers on best practice for building and managing the tenant.
• Produce monthly reports on tenant services: data volumes, users, services, security posture, policy compliance, exemptions, privileged access activity, subscriptions vended and limit management.
• Teach proper change management and demand processes for cloud tenants.
• Support escalations for major incidents affecting DX site infrastructure.
• Manage projects and provide technical oversight for critical DX infrastructure work.
• Keep close working relationships with IT service owners in global infrastructure.
• Work with the Site Management Infrastructure and Onsite Support teams on collaboration, knowledge sharing and problem reporting.
• Work with cybersecurity teams across the organization, including Microsoft Sentinel integration, and keep build, operate and detect duties separate.
• Member of the Site and Support Operations team, helping carry out its leadership strategy.
• Serve as team lead for service and product ownership for DX cloud tenants.

Requirements

• Strong written, verbal and presentation skills, able to translate IT into business terms and business needs into IT terms.
• L3/L4 problem-solving ability and recognised subject matter expertise in IT infrastructure and support.
• Comfort working in global, multi-cultural teams.
• Broad knowledge of SHS IT strategy, industry standards and the current SHS IT landscape tools.
• Deep experience designing IT solutions, implementing them and troubleshooting as needed.
• Sound judgment and problem-solving, with a habit of improving processes continuously.
• Bachelor's degree or equivalent experience.
• 8-10 years minimum in cloud architecture or equivalent technical and leadership roles, including at least 3 years building or operating Azure governance at scale (Microsoft Entra, management groups, Azure Policy, IaC).
• Experience in a regulated industry where independent auditors assess controls.
• Willingness to travel up to 20%.
• Hands-on Azure tenant build and operation: management groups, policy baseline, subscription vending and delegated access for a shared Azure environment serving several software products.
• Deep engineering knowledge of Microsoft Azure and Microsoft Entra ID. AWS or GCP experience is a plus.
• Complex identity federation, role-based access control and tenant-level isolation boundaries.
• Infrastructure as code with HashiCorp Terraform and Bicep, using pipelines and staged rollout.
• Network design: secure VPCs, tenant isolation, private links, cross-tenant connectivity, hub and spoke topologies, private DNS and private endpoints.
• Tenant isolation to prevent cross-tenant data leakage, using logical or physical separation.
• Azure Policy at scale: initiatives, exemptions, remediation and compliance reporting.
• Align tenant structures with GDPR, HIPAA, SOC 2, ISO 27001 and HITRUST, and operate within a certified scope.
• Azure Monitor, Log Analytics, Sentinel and Defender for Cloud.
• Tenant-level billing, cost allocation tags and resource optimisation.
• Onboard multiple AKS clusters to policy and identity in Azure.
• Work with product, security and engineering teams to set and deliver the long-term cloud tenant strategy.
• Guide development teams on cloud tenant build and operating practice.
• Troubleshoot cross-tenant performance issues and dependencies, including platform limits and quotas.
• Export control: the role requires the ability to work with controlled technology under US export control law.

Conditions

Base pay range: $177,780 to $244,453. Starting pay depends on factors such as geography or market, skills, education, experience and other qualifications.

Commission eligibility, if applicable, follows the company's plan and depends on individual and/or company performance.

Work on-site in the company's hiring location or remotely per the posting's setup; travel up to 20%.

Equal-opportunity employer that considers applicants with disabilities and provides reasonable accommodations.

Do not email CVs. Create a profile in the company's talent community to upload your CV.

Beware of recruitment scams. Verify postings on the company's career site.

Benefits

• Medical, dental and vision insurance.
• 401(k) retirement plan.
• Life insurance, and long-term and short-term disability insurance.
• Paid parking or public transportation.
• Paid time off and paid sick and safe time.