Principal Cloud Development Security and Operations Engineer

Scorpion Therapeutics; Village of Tarrytown (NY); On-site; USD 150,000 - 190,000; Full time

Job summary

Scorpion Therapeutics in New York is seeking an experienced cloud infrastructure & security lead to design and operate scalable AWS-based systems for data-intensive workloads, HPC, AI, and microservices.

The role emphasizes implementing IaC, CI/CD, security-by-design, and robust monitoring while collaborating with research teams to meet audit and compliance requirements.

Qualifications

• Bachelor’s degree in Computer Science or related field is required.
• 8+ years of hands-on AWS experience and security certifications are expected.
• Hands-on experience with cloud infrastructure automation, CI/CD, infrastructure-as-code, and security controls is required.
• Solid cloud security posture knowledge (IAM, network segmentation, secrets management, compliance validation, security-by-design) is expected.
• Experience supporting data, HPC, AI, or microservice platforms (technical or user-facing) is preferred.
• Knowledge of core AWS services (EC2, EBS, S3, ELB, RDS, EKS, IAM) is essential.
• Linux administration experience; ability to automate security controls and compliance validation.
• Monitoring tools experience (Splunk, Grafana, Prometheus) is beneficial.

Responsibilities

• Design and implement infrastructure-as-code, automation scripts, and CI/CD pipelines on AWS for data, HPC, AI, and microservice platforms.
• Embed security controls into system design/implementation (IAM policies, network segmentation, secrets management, compliance validation pipelines).
• Build tools to automate operational processes across cloud and systems engineering platforms.
• Support audit-related activities (provide evidence and remediate findings) for the cloud platform.
• Develop and implement delivery and CI/CD methodologies using AWS services, GitHub Actions, and self-hosted runners on Elastic Kubernetes Service; integrate SAST/DAST.
• Recommend and deploy monitoring, metrics, and logging.
• Implement highly available, scalable, self-healing systems.
• Develop SOPs and configure cloud services to support compliance validation.
• Provide technical support, training, and documentation to end users and research teams.

Skills

Bachelor’s degree in Computer Science

AWS experience

Security certifications

CI/CD automation

Infrastructure as Code

Security controls

Cloud security posture

IAM

Network segmentation

Secrets management

Compliance validation

Security-by-design

Data/HPC/AI platforms

AWS core services

Linux administration

Education

Bachelor’s degree in Computer Science or related field

Tools

Splunk

Grafana

Prometheus

GitHub Actions

Job description

Responsibilities:

• Design and implement infrastructure-as-code, automation scripts, and CI/CD pipelines on AWS for data, High-Performance Computing (HPC), Artificial Intelligence (AI), and microservice platforms.


• Embed security controls into system design/implementation (IAM policies, network segmentation, secrets management, compliance validation pipelines).


• Build tools to automate operational processes across cloud and systems engineering platforms.


• Support audit-related activities (provide evidence and remediate findings) for the cloud platform.


• Develop and implement delivery and CI/CD methodologies using AWS services, GitHub Actions, and Actions Runner Controller self-hosted runners on Elastic Kubernetes Service; integrate SAST/DAST.


• Recommend and deploy monitoring, metrics, and logging.


• Implement highly available, scalable, self-healing systems.


• Develop SOPs and configure cloud services to support compliance validation.


• Provide technical support, training, and documentation to end users and research teams.

Qualifications/Requirements:

• Bachelor’s degree in Computer Science or related field.


• 8+ years of in-depth AWS experience and relevant security certifications.


• Hands‑on experience with cloud infrastructure automation, CI/CD, infrastructure-as-code, and security controls.


• Solid cloud security posture knowledge (IAM, network segmentation, secrets management, compliance validation, security‑by‑design).


• Experience supporting data, HPC, AI, or microservice platforms (technical or user‑facing).


• Knowledge of core AWS services (EC2, EBS, S3, ELB, RDS, EKS, IAM).


• Linux administration experience; automation of security controls and compliance validation.


• Monitoring tools experience (Splunk, Grafana, Prometheus).