Job description

Location: Hybrid, Iselin Medidata follows a hybrid office policy in which employees who are hired for an in-person position are expected to work on site a certain number of days per week in accordance with Company policy. About our Company: Medidata is powering smarter treatments and healthier people through digital solutions to support clinical trials. Celebrating 25 years of ground-breaking technological innovation across more than 36,000 trials and 11 million patients, Medidata offers industry-leading expertise, analytics-powered insights, and one of the largest clinical trial data sets in the industry. More than 1 million users trust Medidata's seamless, end-to-end platform to improve patient experiences, accelerate clinical breakthroughs, and bring therapies to market faster. Discover more at www.medidata.com . About the Team: As a Senior Cloud Platform Engineer, you will be the primary architect and operator of our multi-cloud ecosystem. This is a high-impact, generalist role that requires a deep understanding of the entire technology stack—from the underlying operating systems and networking to container orchestration and automated governance. You will design, secure, and scale the infrastructure that powers our global applications while mentoring engineering teams on cloud-native best practices. Responsibilities: • Design and implement secure, multi-account structures and landing zones across AWS, GCP, and Azure. • Manage and evolve multi-cloud IAM, SSO, and Role-Based Access Controls (RBAC) to ensure least-privilege access. • Enforce tagging standards, resource hierarchies, and cost-optimization strategies (rightsizing, idle resource elimination) to maintain fiscal accountability. • Lead the deployment, scaling, and management of Kubernetes clusters (EKS, GKE, or self-managed). Manage CNI plugins, ingress controllers, and service meshes (Istio/Linkerd). • Administer and optimize Linux (Ubuntu, Amazon Linux, RHEL) and Windows Server environments, ensuring hardened configurations and automated patching. • Manage the intersection of cloud services and traditional OS-level dependencies, including Active Directory integration and file system performance tuning. • Develop and maintain modular templates using Terraform, CloudFormation, or Pulumi. • Build and optimize deployment pipelines using GitHub Actions, GitLab CI, Flux, or ArgoCD to enable "GitOps" workflows. • Design security controls including encryption at rest/transit (KMS), VPC Service Controls, and audit logging to meet SOC2, HIPAA, or FedRAMP standards. • Leverage AI-native development tools (e.g., Cursor, GitHub Copilot) and LLM-powered agents to accelerate Infrastructure-as-Code (IaC) authoring, automate complex root-cause analysis, and proactively optimize cloud utilization through predictive anomaly detection. Qualifications: • Bachelor’s or Master’s degree in Computer Science, Information Technology, or a related field. • 5+ years of experience in Cloud Engineering, SRE, or DevOps, with deep proficiency in AWS and/or GCP. • Expert-level experience administering Linux (shell scripting, kernel tuning) and Windows Server (Active Directory, Group Policy, PowerShell). • Proven track record of running production-grade Kubernetes workloads at scale, including experience with Helm and container security. • Strong proficiency in Python, Go, or Bash for infrastructure automation and tool development. • Solid understanding of VPC/VNet design, peering, Transit Gateways, and zero-trust security models. Preferred Qualifications • Experience with "Cloud-Native" monitoring stacks (Prometheus, Grafana, ELK). • Background in migrating legacy Windows/Linux monolithic applications into containerized microservices. • Relevant certifications: AWS Solutions Architect Professional, Google Professional Cloud Architect, or Certified Kubernetes Administrator (CKA). As with all roles, Medidata sets ranges based on a number of factors including function, level, candidate expertise and experience, and geographic location. Pay ranges for candidates in locations other than New York City, may differ based on the local market data in that region. The salary range for positions that will be physically based in the NYC/ NJ Metro Area is $114,750-$153,000. Base pay is one part of the Total Rewards that Medidata provides to compensate and recognize employees for their work. Most sales positions are eligible for a commission on the terms of applicable plan documents, and many of Medidata's non-sales positions are eligible for annual bonuses. Medidata believes that benefits should connect you to the support you need when it matters most and provides best-in-class benefits, including medical, dental, life and disability insurance; 401(k) matching; flexible paid time off; and 10 paid holidays per year. Equal Employment Opportunity: In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Medidata are based on merit, qualifications and abilities. Medidata is committed to a policy of non-discrimination and equal opportunity for all employees and qualified applicants without regard to race, color, religion, gender, sex (including pregnancy, childbirth or medical or common conditions related to pregnancy or childbirth), sexual orientation, gender identity, gender expression, marital status, familial status, national origin, ancestry, age, disability, veteran status, military service, application for military service, genetic information, receipt of free medical care, or any other characteristic protected under applicable law. Medidata will make reasonable accommodations for qualified individuals with known disabilities, in accordance with applicable law. Applications will be accepted on an ongoing basis until the position is filled. #LI-Hybrid #LI-MM1 Inclusion statement In order to provide equal employment and advancement opportunities to all individuals, employment decisions at 3DS are based on merit, qualifications and abilities. 3DS is committed to a policy of non-discrimination and equal opportunity for all employees and qualified applicants without regard to race, color, religion, gender, sex (including pregnancy, childbirth or medical or common conditions related to pregnancy or childbirth), sexual orientation, gender identity, gender expression, marital status, familial status, national origin, ancestry, age (40 and above), disability, veteran status, military service, application for military service, genetic information, receipt of free medical care, or any other characteristic protected under applicable law. 3DS will make reasonable accommodations for qualified individuals with known disabilities, in accordance with applicable law. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable state laws and local ordinances. We are committed to fair employment practices and will evaluate all candidates based on their qualifications, regardless of past arrest or conviction history. Salary Pay Transparency Compensation for the role will be commensurate with experience. The total expected compensation range will be between $114750 and $153000, representing the base salary (or annualized salary based on estimated hourly compensation) and target bonus.

Requirements

Must-haves

Location: Hybrid, Iselin
Medidata follows a hybrid office policy in which employees who are hired for an in-person position are expected to work on site a certain number of days per week in accordance with Company policy.
Design and implement secure, multi-account structures and landing zones across AWS, GCP, and Azure.
Manage and evolve multi-cloud IAM, SSO, and Role-Based Access Controls (RBAC) to ensure least-privilege access.
Enforce tagging standards, resource hierarchies, and cost-optimization strategies (rightsizing, idle resource elimination) to maintain fiscal accountability.
Lead the deployment, scaling, and management of Kubernetes clusters (EKS, GKE, or self-managed). Manage CNI plugins, ingress controllers, and service meshes (Istio/Linkerd).
Administer and optimize Linux (Ubuntu, Amazon Linux, RHEL) and Windows Server environments, ensuring hardened configurations and automated patching.
Manage the intersection of cloud services and traditional OS-level dependencies, including Active Directory integration and file system performance tuning.
Develop and maintain modular templates using Terraform, CloudFormation, or Pulumi.
Build and optimize deployment pipelines using GitHub Actions, GitLab CI, Flux, or ArgoCD to enable "GitOps" workflows.
Design security controls including encryption at rest/transit (KMS), VPC Service Controls, and audit logging to meet SOC2, HIPAA, or FedRAMP standards.
Bachelor’s or Master’s degree in Computer Science, Information Technology, or a related field.
5+ years of experience in Cloud Engineering, SRE, or DevOps, with deep proficiency in AWS and/or GCP.
Expert-level experience administering Linux (shell scripting, kernel tuning) and Windows Server (Active Directory, Group Policy, PowerShell).
Proven track record of running production-grade Kubernetes workloads at scale, including experience with Helm and container security.
Strong proficiency in Python, Go, or Bash for infrastructure automation and tool development.
Solid understanding of VPC/VNet design, peering, Transit Gateways, and zero-trust security models.
Inclusion statement
Salary Pay Transparency

Nice-to-haves

Experience with "Cloud-Native" monitoring stacks (Prometheus, Grafana, ELK).
Background in migrating legacy Windows/Linux monolithic applications into containerized microservices.
Relevant certifications: AWS Solutions Architect Professional, Google Professional Cloud Architect, or Certified Kubernetes Administrator (CKA).

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsgcpazurekubernetesrestaillmpythongo

Platform: careers-html
Effort: medium

Benefits

Benefits detected in the listing.

Dental

401(K)

Paid Time Off