Technical Leader - Digital Health Platform, Secure Cloud

Roche Digital Technology (RDT) is a global team at Roche focused on innovation in healthcare technology. The Secure Account Management (SAM) team within RDT manages cloud infrastructure, security, and governance for Roche's digital product portfolio, including over 650 AWS accounts used by more than 200 product teams globally. The team operates in a self-organized setup addressing cybersecurity, compliance, and infrastructure challenges in healthcare.

• Minimum 8 years of IT experience, including at least 4 years of technical experience with architecture, software development, or operations of internet-scale SaaS products.
• Hands-on experience with AWS cloud services including AWS IAM, AWS Organization, AWS Identity Center.
• Experience with cloud security services and managing cloud infrastructure in medium to large global enterprises.
• Proficiency with Infrastructure as Code tools such as Terraform, Terragrunt, GitLab pipelines, GitHub Actions.
• Knowledge of DevSecOps practices and integration of security into development pipelines.
• Familiarity with modern software development processes including CI/CD and GitOps.
• Proficient in Bash, PowerShell, and Git.
• Experience in one or more programming languages: Python, GoLang, Java, C, Ruby.
• Minimum 4 years of technical leadership including expertise in Cloud Security and Serverless architectures (Lambda, DynamoDB, API Gateway, Step-Functions, ECS, EKS).
• Proficiency with CI/CD, containerization, orchestration, DevOps toolchains, and automation.
• Strong understanding of DevOps and cloud infrastructure trends and best practices.
• Experience with Python design patterns and Object-Oriented programming.
• Knowledge of IT solution architecture standards and good practices.
• Effective communication skills with diverse teams and stakeholders.

Nice to have:

• AWS Certifications (Developer, Solution Architect Associate/Professional, SysOps).
• Experience with log/event/metric collection and visualization tools such as Grafana, ELK, Prometheus.

• Own technical architecture and design decisions for SAM, including landing zone design, account vending, IAM governance, and identity management (AWS Identity Center).
• Translate Security Architect's requirements into implementable engineering work such as Terraform modules, pipelines, and automation.
• Build reusable, self-service modules and APIs for platform consumers.
• Drive automation-first engineering, replacing manual workflows with programmatic access and Infrastructure as Code (IaC).
• Set and enforce technical standards including code review, Terraform module structure, CI/CD design, testing practices, and documentation.
• Lead incident response for platform-level issues, coordinate resolution, and execute post-incident reviews.
• Mentor engineers through design reviews, pairing, PR feedback, and fostering technical growth.
• Evaluate and introduce new technologies, patterns, and AWS services.

This role is open locally in Warsaw and Poznan with no relocation options included. Only local candidates will be considered.

The controller of personal data is Roche Polska Sp. z o.o. with data processing compliant with applicable laws. Roche Polska Sp. z o.o. operates in full compliance with the law and has a Procedure for Reporting Violations of Law.