Principal Cloud Engineer

About Generate:Biomedicines

Generate:Biomedicines is a new kind of therapeutics company – existing at the intersection of machine learning, biological engineering, and medicine – pioneering Generative Biology™ to create breakthrough medicines where novel therapeutics are computationally generated, instead of being discovered. The Company has built a machine learning-powered biomedicines platform with the potential to generate new drugs across a wide range of biologic modalities. This platform represents a potentially fundamental shift in what is possible in the field of biotherapeutic development.

We pursue this audacious vision because we believe in the unique and revolutionary power of generative biology to radically transform the lives of billions, with an outsized opportunity for patients in need. We are seeking collaborative, relentless problem solvers that share our passion for impact to join us!

Generate:Biomedicines was founded in 2018 by Flagship Pioneering and has received nearly $700 million in funding, providing the resources to rapidly scale the organization. The Company has offices in Somerville and Andover, Massachusetts with 300+ employees.

The Role: 

We are seeking a highly skilled and experienced cloud engineer to design, develop, integrate, and maintain business focused, hybrid technology platforms.  In this role, you will collaborate with cross-functional teams to ensure seamless integration, delivery, and ongoing support of cloud services with on-premises systems, applications, and SaaS resources.  The ideal candidate will have a strong hands-on background in cloud platforms and integration technologies, combined with excellent problem-solving and communication skills. 

 This position will be onsite in Somerville, MA with a flexible hybrid schedule. 

Here's how you will contribute:

• Capture product and security requirements and translate them within integrated application and platform components — defining network boundaries, least-privilege IAM trust/policies in a multi-account environment, Terraform modules with Terragrunt supplied inputs, data access patterns, and GitOps promotion — while documenting and communicating trade-offs, SLOs, and compliance constraints.
• Design, build, and maintain GitLab CI/CD with OIDC to build and push containers, deploy using Helm and Argo CD, while implementing end-to-end identity and secret flows (GitLab → AWS IAM → Kubernetes IRSA/ServiceAccounts → AWS Secrets Manager) for cross-account, auditable deployments with safe promotion/rollback to deliver applied architecture.
• Capture product and security requirements and translate them within integrated application and platform components — defining network boundaries, least-privilege IAM trust/policies in a multi-account environment, Terraform modules with Terragrunt supplied inputs, data access patterns, and GitOps promotion — while documenting and communicating trade-offs, SLOs, and compliance constraints.
• As an ongoing product and service owner-- capture, measure, analyze, and monitor platform resource efficiency and reliability using tools like OTEL, DataDog, and CloudWatch, and apply creative solutions for continual evolution and efficiency improvements.
• Create and iterate technical solutions leveraging organization-wide best practices and policies covering reusable Terraform modules, Helm chart templates, GitLab CI !include jobs, and other high level application deployment patterns that streamline developer experiences at scale while enforcing security and consistency in a highly autonomous, distributed environment.
• Coordinate effective integration and deployment of emerging solutions, leading design and development of extensible integration paths between SaaS platforms, databases, and legacy applications, including API management and middleware solutions. 
• Identify and resolve integration related issues, including data inconsistencies, communication failures, and performance bottlenecks. 
• Work closely with development teams, system architects, and business stakeholders to ensure integration solutions meet the organization's "best fit" collective outcome requirements. 
• Test and validate emerging solutions and integrations to ensure they function as expected and meet performance, quality, and security standards. 
• Create and maintain detailed technical documentation, including system architecture, design specifications, and integration workflows. 

The Ideal Candidate will have:

• Bachelor’s degree in Computer Science, Information Technology, or a related field. Related Master’s degree a positive.
• 10+ years of experience in application integration, middleware development, or API management. 
• Extensive knowledge of and integration / engineering experience leveraging major cloud providers such as AWS, Azure, or Google Cloud, including integration design with prevailing SaaS platforms and practices.  
• Strong working knowledge around security best practices for cloud environments, including identity and access management, encryption, and vulnerability management 
• Applied experience in integrating, deploying, and maintaining Enterprise Finance and G&A related solutions, including data flows, data source objects, and prevailing SaaS platforms (such as Netsuite, Coupa, Oracle, SAP). 
• Experience with version control systems (e.g., Git) and CI/CD pipelines. 
• Strong problem-solving skills, attention to detail, and ability to work in a fast-paced environment. 
• Excellent communication and collaboration skills to work effectively with cross-functional teams. 
• History of skillsets applied within biotech or life sciences preferred.  

#LI-HM1

Generate:Biomedicines is committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status.

Recruitment & Staffing Agencies: Generate:Biomedicines does not accept unsolicited resumes from any source other than candidates. The submission of unsolicited resumes by recruitment or staffing agencies to Generate:Biomedicines or its employees is strictly prohibited unless contacted directly by the Company’s internal Talent Acquisition team. Any resume submitted by an agency in the absence of a signed agreement will automatically become the property of Generate:Biomedicines and the Company will not owe any referral or other fees with respect thereto.