DevOps Infrastructure Engineer - RDT China Enterprise Technologies

在罗氏，我们鼓励每位同事展现真实的自己；我们欣赏独特且出众的品质。罗氏的文化鼓励积极的表达、开放的对话和真诚的连结，在这里，你将因为做自己而被重视、接纳和尊重，并得到个人的提升和职业的发展。所有的这一切，都是为了更好地预防、阻止和治愈疾病，并确保医疗资源的可及性和可持续性。欢迎加入罗氏，一个重视每种声音的地方。

职位

Job Description

As a DevOps Infrastructure Engineer at the SE7 level, you will be responsible for solving unusually complex business problems with innovative DevOps and cloud infrastructure solutions across the entire platform landscape . Operating with considerable independence, you will establish the technical direction for the entire lifecycle of our platforms—from inception and design through deployment, operations, security, and retirement.

In this role, you will build a secure, self-service Internal Developer Platform (IDP) that abstracts away infrastructure complexity while enforcing rigorous compliance, cloud security AIOps, and proactive threat mitigation across both cloud-native environments and AI agent platforms.

Key Responsibilities

1. Cloud Security Operations & AIOps

Vulnerability & Patch Automation: Drive continuous monitoring of cloud server OS vulnerabilities and design fully automated OS patching pipelines/toolsets to rapidly mitigate risks across the infrastructure landscape.

Hardened Image Lifecycle: Author and maintain gold-standard cloud server AMIs (OS) utilizing an Infrastructure-as-Code (IaC) approach (e.g., Terraform, Ansible, Packer) .

Continuous Security Monitoring: Manage and optimize Cloud Security Hub and Security Center platforms. Take responsibility for landing zone security alert handling, triaging, and remediation.

Endpoint & Key Security: Oversee the deployment and continuous maintenance of endpoint security agents (including Cortex XDR and Nessus agents), and optimize Cloud Key Management Services (KMS) for robust data encryption.

AIOps & Security Assessments: Pioneer cloud security AIOps to predict, detect, and automatically remediate security anomalies. Lead comprehensive cloud platform security assessments and continuous refinement strategies.

2. DevOps Engineering & Adoption

Secure Software Supply Chain: Lead the adoption, support, and integration of the DevOps toolchain across all automated CI/CD pipelines , spanning threat modeling, SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), SCA (Software Composition Analysis), and runtime security monitoring.

Container & Orchestration Security: Lead Kubernetes cluster hardening, establishing fine-grained network policies, container runtime security, and secure configuration baselines.

Centralized Secret Vaulting: Establish and enforce unified secret management protocols across all application environments using centralized secret and credential vaulting solutions.

3. AI Agent Security & Safeguards

Agent IAM & Identity Management: Design and implement robust Identity and Access Management (IAM) frameworks specifically tailored for autonomous AI agents, including identity and secret management for agent plugins and external tools.

Continuous Guardrails & Monitoring: Architect and maintain continuous agent guardrails and runtime monitoring systems to trace, evaluate, and restrict agent reasoning and actions within safe boundaries.

Model & Database Safeguards: Ensure model artifact security and establish strict integration safeguards for databases, ADP, and Vector/Graph Databases (VectorDB) to prevent data exfiltration and unauthorized access.

Active Defense & Hardening: Implement automated prompt red-teaming pipelines to proactively discover LLM vulnerabilities, and lead code execution sandbox hardening to run agent-generated code safely.

4. Platform Engineering & Excellence

Platform Engineering: Lead automation tools design and implementation to optimize the Cloud security operation. You will turn security requirements into technical design and lead the development team to deliver it.

Audit,Compliance : Ensure all cloud and AI environments strictly adhere to enterprise Quality/Regulatory standards . Lead complex audit exercises, provide audit evidence, author remediation plans, and design end-to-end disaster recovery (DR) strategies

Qualifications & Technical Skills

Experience: 5+ years of experience as an Infrastructure, DevOps, or Security Engineer , with at least 2+ years of hands-on experience designing secure AI architectures or Agentic platforms. Experience in the pharmaceutical, life sciences, or top-tier tech industries is highly preferred.

AI Agent Security Mastery: Proven experience with agent runtimes, prompt security, sandbox design, VectorDB integrations, and managing credentials/identities for plugins and external MCPs/APIs.

DevOps & Kubernetes Hardening: In-depth technical knowledge of security toolchains (SAST/DAST/SCA), Kubernetes cluster hardening, container runtime security, and credential vaulting solutions.

Cloud Operations & IaC: Mastery of Infrastructure-as-Code (Terraform, CloudFormation) for managing cloud environments . Proven track record of OS hardening, AMI baking, endpoint agent maintenance (Cortex XDR, Nessus), and Cloud Security Hub automation.

Hands-on Engineering: Highly proficient in at least one backend development or scripting language (e.g., Python, Go) with deep expertise building automated, secure CI/CD pipelines (GitLab/GitHub, JFrog) .

Compliance & Audit Leadership: Strong ability to translate complex corporate policies and regulatory standards into technical controls, lead audit exercises, and manage incident responses .

Language: Fluent bilingual capabilities in both English and Mandarin, enabling seamless collaboration across global and local cross-functional teams.

#RDT 2026

我们是谁

打造更健康的未来是促使我们创新的动力。全球超过100,000名员工共同致力于推进科学，确保今天和明天的人们，都能获得高质量的医疗资源。我们的努力帮助了2600多万人使用我们的药物进行治疗，我们的诊断产品运行超过300亿次检测。罗氏通过赋能探索新的可能、激发创造力并保持高标准以提供突破传统的医疗解决方案，对全球的医疗环境带去推动和影响。

让我们一起，构建更健康的未来。

罗氏提供平等的职业发展机会。