DevOps Infrastructure Engineer

Position:
DevOps Infrastructure Engineer - RDT

Company:
Roche

Location:
China, Shanghai

Employment type:
Full time

Short Summary:
As a DevOps Infrastructure Engineer at the SE7 level, you will be responsible for solving complex business problems with innovative DevOps and cloud infrastructure solutions across the entire platform landscape. You will establish the technical direction for the lifecycle of our platforms, build a secure Internal Developer Platform (IDP), and enforce compliance and security measures.

Responsibilities:
- Drive continuous monitoring of cloud server OS vulnerabilities and design automated OS patching pipelines.
- Author and maintain gold-standard cloud server AMIs utilizing an Infrastructure-as-Code (IaC) approach.
- Manage and optimize Cloud Security Hub and Security Center platforms.
- Lead the adoption and integration of the DevOps toolchain across automated CI/CD pipelines.
- Establish and enforce unified secret management protocols across application environments.
- Design and implement robust Identity and Access Management (IAM) frameworks for AI agents.
- Architect and maintain continuous agent guardrails and runtime monitoring systems.
- Lead automation tools design and implementation to optimize Cloud security operations.
- Ensure compliance with enterprise Quality/Regulatory standards and lead audit exercises.

Requirement:
- 5+ years of experience as an Infrastructure, DevOps, or Security Engineer, with at least 2+ years in secure AI architectures.
- Proven experience with agent runtimes, prompt security, and managing credentials for plugins.
- In-depth knowledge of security toolchains, Kubernetes hardening, and credential vaulting solutions.
- Mastery of Infrastructure-as-Code (Terraform, CloudFormation) for managing cloud environments.
- Proficient in at least one backend development or scripting language (e.g., Python, Go).
- Fluent in both English and Mandarin.

Benefits:
- Opportunity to work in a culture that encourages personal expression and open dialogue.
- Be part of a global team dedicated to advancing science and healthcare solutions.