Cloud Engineer and Architect - Architecture & Components

At Bristol Myers Squibb, our employees often ask, “Who are you working for?”—a question that fuels collaboration, accountability, and urgency in our work. Our purpose-driven culture inspires us to discover, develop, and deliver innovative medicines to prevail over serious diseases. We offer uniquely interesting and meaningful work, opportunities for growth, and a supportive environment that values inclusion, wellbeing, flexibility, and comprehensive benefits. This is work that transforms the lives of patients, and the careers of those who do it.

The Opportunity

At BMS, we're building the cloud foundations that will underpin an entire organisation's AI ambitions through to 2030 and beyond. As a Cloud Engineer and Architect within our Analytics & AI Enablement Architecture & Components team, you'll be the technical authority that ensures our platform is scalable, secure, and built to last.

This is a hands-on, individual-contributor role — you won't manage people, but you will set the standards that teams across our globally distributed Product Development & Supply (PDS) organisation depend on. Working alongside a multidisciplinary team of UI, UX, AI, Full Stack, and Analytics engineers, you'll design the reusable cloud foundations that make consistent, high-quality execution possible at scale — so solution teams can build on proven patterns rather than reinvent from scratch.

What You'll Do

Architect Cloud Foundations at Enterprise Scale

• Design end-to-end cloud architectures across AWS and Azure, spanning compute, containers, messaging, data, storage, networking, and edge services
• Define platform-wide patterns for services, networking, identity, and connectivity across multi-account and multi-subscription estates
• Create reference architectures, CloudFormation/Terraform templates, and reusable infrastructure-as-code modules that solution teams consume rather than rebuild
• Design secure, repeatable environment provisioning and self-service deployment paths

Enable Scalable, Reusable Services

• Design and operate the cloud foundations for shared services — including containerised workloads, APIs, and event-driven integration — with consistent patterns for deployment, scaling, and reuse
• Architect secure real-time and batch integration patterns across cloud services, including service-to-service connectivity and managed LLM and AI/ML services
• Establish cross-account and cross-subscription access patterns using IAM, networking, and policy-as-code
• Support the scalable delivery of services that underpin analytics and AI use cases across the organisation

Enforce Security & Compliance by Design

• Embed GDPR, PII, and Part 11 security standards across all cloud infrastructure and data flows
• Review and strengthen IAM/RBAC, network segmentation, encryption (TLS/KMS), and audit readiness
• Implement guardrails and policy-as-code (AWS SCPs, Azure Policy, OPA) to ensure consistent, compliant cloud usage across teams

Lead Through Technical Authority

• Act as the go-to authority in cloud design reviews — making, documenting, and communicating key architectural trade-offs
• Establish observability and operations practices across monitoring, logging, tracing, and incident response (Prometheus, Grafana, Loki)
• Drive cloud cost visibility and optimisation across the platform
• Mentor engineers on cloud-native practices, infrastructure-as-code, and performance optimisation — and deliver the documentation and patterns that enable genuine self-service

What You'll Bring

Education

• Bachelor's or Master's degree in Computer Science, Engineering, AI, Data Science, or a related field

Experience — Required

• 4+ years in Cloud Engineering, Cloud/Solutions Architecture, or senior infrastructure roles
• Deep, hands-on expertise across AWS compute, networking, data, and security services (Azure and/or GCP a strong plus)
• Experience with distributed systems, multi-account/multi-subscription design, and event-driven architectures
• Strong infrastructure-as-code skills — CloudFormation primary, Terraform a strong complement — and CI/CD automation experience (e.g., CodeBuild)
• Strong scripting and programming ability (Python, Bash, PowerShell) for infrastructure automation
• Solid grounding in cloud security, networking, observability, and cost management
• Excellent communication skills and the ability to influence technical decisions without direct authority

Preferred Skills & Experience

• Deep, hands-on Kubernetes/Amazon EKS expertise — including autoscaling (Karpenter), cluster lifecycle and upgrades, ingress and Gateway API, service mesh (Istio), CoreDNS, and workload isolation
• Experience owning platform governance and self-service onboarding — reviewing other teams' infrastructure, managing onboarding changes, and enforcing policy-as-code as a technical gatekeeper
• Experience with Docker, Helm, service mesh, and container security
• Experience supporting data and AI/ML workloads, including managed LLM and agent services (e.g., Bedrock, LangGraph-based agents) and onboarding GenAI frameworks for solution teams
• Multi-cloud experience (AWS primary; GCP and/or Azure a plus)
• Relevant certifications (e.g., AWS Solutions Architect, AWS DevOps, Azure Administrator, Azure Solutions Architect)
• Prior experience in regulated environments (GxP, GDPR, PII)
• Background in biotech, pharma, or global supply chain is highly desirable

Why This Role?

This is a rare opportunity to operate as a cloud authority at a company investing seriously in AI at enterprise scale. You'll have the freedom to define architectural standards from first principles, shape the infrastructure that autonomous AI workflows will run on for years to come, and directly influence how a globally distributed organisation builds digital products.

If you're a cloud engineer with a platform mindset, a passion for building things that last, and the technical depth to lead through influence rather than hierarchy — this is the role built for you.

We hire for skills and capabilities, not just credentials – if this role excites you, but doesn’t perfectly match your resume, we encourage you to apply anyway.

How We Work

Where you work matters – because collaboration, innovation and patient impact happen in many settings. Our roles are structured across four work models: site-essential, site-by-design, field-based and remote-by-design. The model assigned to this role is based on its core responsibilities. Learn more at https://careers.bms.com/ways-of-working.

Supporting People with Disabilities

BMS is dedicated to ensuring that people with disabilities can excel through a transparent recruitment process, reasonable workplace accommodations/adjustments and ongoing support in their roles. Applicants can request a reasonable workplace accommodation/adjustment prior to accepting a job offer. If you require reasonable accommodations/adjustments in completing this application, or in any part of the recruitment process, direct your inquiries to [email protected]. Visit careers.bms.com/eeo-accessibility to access our complete Equal Employment Opportunity statement.

Candidate Rights

BMS will consider qualified applicants with arrest and conviction records, pursuant to applicable laws in your area.

For roles based in Los Angeles County only:  If you live in or expect to work from Los Angeles County if hired for this position, please visit this page for important additional information: https://careers.bms.com/california-residents/

For roles based in Washington State only: If you live in or expect to work from Washington State if hired for this position, please visit this page for important information about the Washington Fair Chance Act.

Data Protection

We will never request payments, financial information, or social security numbers during our application or recruitment process. Learn more about protecting yourself at https://careers.bms.com/fraud-protection.

Any data processed in connection with role applications will be treated in accordance with applicable data privacy policies and regulations.

If this posting is missing required information required by local law or incorrect, contact BMS at [email protected] with the Job Title and Requisition number. Do not send application-related inquiries to this email. To check your application status, please login to your Candidate Home Account.

R1604338 : Manager, Architecture & Components