Technical Leader - Digital Health Platform, Secure Cloud

Roche; Poznań; Hybrid; PLN 223,200 - 390,600; Full time

Benefits offered by this job

Flexible location

Private healthcare

Recharge Fridays

Annual bonus

Job summary

Roche is looking for a Technical Leader for its Digital Health Platform in Poznań. In this role, you will own technical architecture decisions and lead a team focused on securing cloud infrastructure. Candidates should possess at least 8 years of IT experience, with deep expertise in AWS and cloud security.

This position supports a hybrid work model and offers numerous benefits including training budgets, flexible working locations, and a strong focus on work-life balance.

Qualifications

• Minimum 8 years of IT experience, with 4+ years in a technical role.
• Proficient in cloud security services and AWS.
• Strong experience in software development and monitoring tools.

Responsibilities

• Own technical architecture for the Secure Account Management team.
• Mentor engineers and promote best practices.
• Drive automation-first engineering principles.

Skills

AWS

Terraform

DevSecOps

CI/CD

Python

Cloud Security

Bash

PowerShell

Education

8+ years of experience in IT

Tools

GitHub Actions

GitLab Pipelines

AWS Cloud Services

Job description

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.

Position

Technical Leader - Digital Health Platform, Secure Cloud

Roche Digital Technology (RDT) is a global team at the heart of Roche, committed to shaping the digital future of healthcare. Our mission is to power Roche through cutting‑edge digital technologies, harnessing artificial intelligence, data, and scalable tech innovations. We build, secure, and operate infrastructure platforms – cloud and on‑prem – for our digital products while ensuring cybersecurity, compliance, and infrastructure excellence.

We offer a hybrid work model that combines flexibility with in‑person collaboration. Employees are expected to work in office on average two days per week, with specific days varying by business needs such as workshops, conferences, and team meetings.

Responsibilities

• Own technical architecture and design decisions for the Secure Account Management (SAM) team: landing zone design, account vending, IAM governance, and identity management (AWS Identity Center).
• Translate the Security Architect’s guardrail requirements and security standards into implementable engineering work – Terraform modules, automation pipelines, and detection/remediation patterns.
• Design reusable, self‑service modules and APIs for more than 200 product teams to adopt without contacting SAM for every change.
• Drive automation‑first engineering: replace manual, ticket‑driven workflows with programmatic access, IaC‑managed configuration, and self‑service tooling.
• Set and enforce technical standards: code review expectations, Terraform module structure, CI/CD pipeline design, testing practices, and documentation‑as‑code.
• Lead incident response for platform‑level issues: coordinate resolution, run post‑incident reviews, and drive reliability improvements into the engineering backlog.
• Mentor and grow engineers: conduct design reviews, pair on complex problems, provide constructive PR feedback, and foster continuous technical capability improvement.
• Evaluate and introduce new technologies, patterns, and AWS services.

Qualifications

• Total minimum 8 years of experience in IT split between:
  • Technical Experience, minimum 4 years
    • Experience with architecture, software development, or operations of internet‑scale SaaS products. Previous roles may include DevOps Engineer, Cloud Engineer, System Reliability Engineer, Technical Leader, or Architect.
    • Very good understanding and hands‑on working experience in AWS.
    • Experience in cloud security services.
    • Experience with AWS cloud infrastructure in medium to large global enterprises with global geographical topologies.
    • Hands‑on knowledge of AWS services (IAM, Organization, Identity Center), GitLab Pipelines, Terraform.
    • Experience with Terraform / Terragrunt / GitLab Pipelines, GitHub Actions.
    • Knowledgeable in DevSecOps and integrating security into the development pipeline.
    • Understanding of modern software development processes and release cycles (CI/CD, GitOps).
    • Proficient in Bash / PowerShell / Git.
    • Experience in at least one of: Python, Go, Java, C, Ruby.
  • Technical deep expertise and leadership, minimum 4 years
    • Experience in Cloud Security and Serverless Architectures (Lambda, DynamoDB, API Gateways, Step Functions, ECS, EKS).
    • Proficiency with CI/CD, Infrastructure as Code, containerization, orchestration, DevOps toolchains, and process automation.
    • A DevOps mindset focused on quality, consistency, and best practices across all automation phases.
    • Strong understanding of current DevOps and Cloud Infrastructure trends, tools, and practices.
    • Python design patterns, object‑oriented programming.
    • Knowledge of standards and application of best practices in IT solution architecture.
    • Effective and inclusive communication with diverse team members and stakeholders.
    • Experience in the software development lifecycle with cross‑functional teams and a desire to learn and grow.
  • Nice to have
    • AWS certifications (Developer, Solution Architect Associate / Professional, SysOps).
    • Experience with log/event/metric collector and visualization tools (Grafana, ELK, Prometheus).

Benefits

• Salary range xx‑xx PLN gross based on employment contract.
• Annual bonus payment based on performance.
• Dedicated training budget for certifications and conferences.
• Recharge Fridays (2 Fridays off per quarter).
• Take‑time Program (up to 3 months of leave for any purpose).
• Vacation subsidy available.
• Flexible location – possibility to work from various places worldwide for a limited period.
• Take Time for Charity (maximum 2 weeks of paid leave to engage in chosen charity).
• Private healthcare (LuxMed packages), group life insurance (UNUM), and Multisport.
• Stock share purchase additions.
• Yearly sales of company laptops and cars.

This role is open locally in Warsaw and Poznań; there are no relocation options. Only local candidates will be considered.

Roche is an Equal Opportunity Employer.