AWS Cloud Engineer

Roche; Warszawa; Hybrid; PLN 158,000 - 294,000; Full time

Benefits offered by this job

Annual bonus

Dedicated training budget

Recharge Fridays

Job summary

Roche Digital Technology (RDT) is seeking an experienced AWS Cloud Engineer to design, build, and evolve secure, scalable AWS solutions. You will work on EKS environments, Infrastructure as Code, and CI/CD pipelines in a hands-on role, focusing on security and operational excellence.

The role emphasizes AWS Bedrock, cloud networking, and automation, with a hybrid work model requiring in-office presence about two days per week.

Qualifications

• Strong hands-on experience designing and implementing solutions on AWS.
• Deep knowledge of Amazon EKS and Kubernetes in production.
• Experience with AWS Bedrock or building cloud-based generative AI/ML solutions.
• Strong experience with AWS CDK and Infrastructure as Code.
• Solid understanding of AWS networking, including VPCs, routing, DNS and security groups.
• Strong understanding of AWS security and IAM, including least-privilege design.
• Experience with automated CI/CD pipelines (GitLab CI/CD and/or GitHub Actions).
• Experience with logging, monitoring, observability (CloudWatch).
• Good working knowledge of serverless architectures (Lambda).
• Ability to operate and troubleshoot production cloud environments.

Responsibilities

• Design end-to-end AWS solutions translating requirements into secure, scalable architectures.
• Build and operate EKS environments and Kubernetes workloads including networking and security.
• Leverage AWS Bedrock for generative AI workloads with secure integration and scalability.
• Develop infrastructure using AWS CDK and IaC principles.
• Create and maintain CI/CD pipelines for infra and apps using GitLab CI/CD and/or GitHub Actions.
• Design AWS networking architectures (VPCs, subnets, DNS, load balancing).
• Embed security by design: IAM, least-privilege, secrets management, encryption.
• Implement robust logging, monitoring, and observability for production systems.
• Build and integrate services using Lambda, CloudWatch, S3, API Gateway, etc.
• Troubleshoot complex infra, networking, security, Kubernetes, and deployment issues.
• Contribute to engineering standards, reusable patterns, automation, and docs.
• Collaborate with Cloud Engineers, architects, security specialists, and stakeholders.
• Stay hands-on with new AWS capabilities and improve platforms.

Skills

AWS architecture

Amazon EKS

Kubernetes

AWS Bedrock

AWS CDK

Infrastructure as Code

CI/CD pipelines

GitLab CI/CD

GitHub Actions

CloudWatch

IAM least-privilege

Networking (VPC)

Security engineering

Serverless (Lambda)

Production troubleshooting

Tools

GitLab CI/CD

GitHub Actions

AWS CDK

CloudWatch

Job description

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

The Position

AWS Cloud Engineer

Roche Digital Technology (RDT) is where innovation meets purpose. As a global team at the heart of Roche, we are a community of business-minded technologists committed to help shape tomorrow’s digital future of healthcare. Our mission is to power Roche through cutting-edge digital technologies, harnessing the potential of artificial intelligence, data, and scalable tech innovations. Driven by purpose and passion, we’re building a future where digital is a core strength across all of Roche, enabling smarter ways of working, unlocking human potential, and driving breakthroughs that truly matter for millions of patients around the world.

At Roche, we offer a hybrid work model that combines flexibility with in‑person collaboration. For now, we require our employees to be in our offices on average two days per week. The specific office days may vary depending on business needs, such as workshops, conferences, town halls, team meetings, and other collaborative events.

We are looking for an experienced AWS Cloud Engineer to design, build, and evolve secure, scalable, and automated cloud solutions on AWS.

You will work as part of a team of Cloud Engineers, taking ownership of solutions from design through implementation and operation. This is a hands‑on engineering role: we are looking for someone who enjoys staying close to the technology, solving complex technical challenges, and turning architectural concepts into reliable production solutions.

The role has a strong focus on Amazon EKS, AWS Bedrock, Infrastructure as Code and CI/CD, as well as cloud networking and security.

The opportunity

• Design and implement end‑to‑end AWS solutions, translating business and technical requirements into secure, scalable, resilient, and maintainable architectures
• Design, build, and operate Amazon EKS environments and Kubernetes‑based workloads, including cluster architecture, workload deployment, networking, security, observability, and lifecycle management
• Design and implement solutions leveraging AWS Bedrock and related AWS services for generative AI workloads, with particular attention to secure integration, access control, networking, scalability, and operational readiness
• Build cloud infrastructure using AWS CDK, applying Infrastructure as Code principles to create reusable, maintainable, and automated infrastructure components
• Develop and maintain CI/CD pipelines for infrastructure and application deployments using GitLab CI/CD and/or GitHub Actions
• Design and implement AWS networking architectures, including VPCs, subnets, routing, private connectivity, DNS, load balancing, ingress/egress patterns, and integration across cloud environments
• Embed security by design across cloud solutions, including IAM, least‑privilege access, secrets and key management, network security, encryption, and security controls
• Implement robust logging, monitoring, alerting, and observability to ensure production environments are transparent, reliable, and supportable
• Build and integrate solutions using additional AWS services such as Lambda, IAM, CloudWatch, S3, API Gateway, and other services as appropriate
• Troubleshoot complex infrastructure, networking, security, Kubernetes, and deployment issues across the technology stack
• Contribute to engineering standards, reusable patterns, automation, technical documentation, and cloud best practices
• Collaborate closely with other Cloud Engineers, application teams, architects, security specialists, and other stakeholders
• Remain hands‑on and close to the technology, continuously evaluating new AWS capabilities and improving existing platforms and engineering practices

Who you are

You are an engineer who combines strong architectural thinking with hands‑on implementation skills. You are comfortable designing an end‑to‑end solution, but equally comfortable opening an IDE, writing CDK code, configuring an EKS workload, building a deployment pipeline, or troubleshooting a networking issue.

You enjoy working collaboratively within a team of Cloud Engineers, sharing knowledge and challenging technical decisions constructively. You take ownership of the solutions you build and care about their security, reliability, maintainability, and operational quality.

Most importantly, you remain curious and close to the technology, continuously learning and applying new capabilities across the AWS ecosystem.

You have

• Strong hands‑on experience designing and implementing solutions on AWS
• Deep practical knowledge of Amazon EKS and Kubernetes, including production‑grade cluster and workload architectures
• Experience with AWS Bedrock or strong experience building cloud‑based generative AI/ML solutions with the ability to quickly develop deep Bedrock expertise
• Strong experience with AWS CDK and Infrastructure as Code
• Strong understanding of AWS networking, including VPC architecture, routing, private/public connectivity, DNS, security groups, load balancing, and related networking concepts
• Strong understanding of AWS security and IAM, including least‑privilege design and secure cloud architecture
• Experience designing and implementing automated CI/CD pipelines, ideally with GitLab CI/CD and/or GitHub Actions
• Experience with AWS logging, monitoring, and observability, particularly CloudWatch and related services
• Good working knowledge of serverless and event‑driven AWS architectures, including services such as AWS Lambda
• Experience operating and troubleshooting production cloud environments
• Ability to work across the full engineering lifecycle, from solution design and architecture through hands‑on implementation and operation

What you get

• Salary range 14,175 - 26,325 PLN gross based on the employment contract
• Annual bonus payment based on your performance
• Dedicated training budget (training, certifications, conferences, diversified career paths etc.)
• Recharge Fridays (2