{"id":45504,"url":"https://alion.io/job/roche-devops-infrastructure-engineer-rdt-china-enterprise-technologies","title":"DevOps Infrastructure Engineer - RDT China Enterprise Technologies","company":{"id":13531,"name":"Roche","domain":"roche.com","url":"https://alion.io/company/roche","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":88,"open_postings":226,"ghost_share":0.022,"stale_share":0.584,"repost_share":0.084,"time_to_fill_p50_days":14,"computed_at":"2026-10-17T05:46:00Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Shanghai, China"],"countries":["CN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":33000,"max_usd":93000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":3074},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AIOps","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"Cortex","optional":false},{"name":"Cortex XDR","optional":false},{"name":"GitHub","optional":false},{"name":"GitLab","optional":false},{"name":"Go","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Nessus","optional":false},{"name":"Packer","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Prometheus","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-08-07T00:00:00Z","employer_posted_date":"2026-08-07","last_verified_at":"2026-10-17T14:41:41Z","board_verified":true,"closed_at":null,"days_open":71,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":71},"description":"At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters.\nThe Position\nJob Description\nAs a DevOps Infrastructure Engineer at the SE7 level, you will be responsible for solving unusually complex business problems with innovative DevOps and cloud infrastructure solutions across the entire platform landscape . Operating with considerable independence, you will establish the technical direction for the entire lifecycle of our platforms-from inception and design through deployment, operations, security, and retirement.\nIn this role, you will build a secure, self-service Internal Developer Platform (IDP) that abstracts away infrastructure complexity while enforcing rigorous compliance, cloud security AIOps, and proactive threat mitigation across both cloud-native environments and AI agent platforms.\nKey Responsibilities\n1. Cloud Security Operations & AIOps\nVulnerability & Patch Automation: Drive continuous monitoring of cloud server OS vulnerabilities and design fully automated OS patching pipelines/toolsets to rapidly mitigate risks across the infrastructure landscape.\nHardened Image Lifecycle: Author and maintain gold-standard cloud server AMIs (OS) utilizing an Infrastructure-as-Code (IaC) approach (e.g., Terraform, Ansible, Packer) .\nContinuous Security Monitoring: Manage and optimize Cloud Security Hub and Security Center platforms. Take responsibility for landing zone security alert handling, triaging, and remediation.\nEndpoint & Key Security: Oversee the deployment and continuous maintenance of endpoint security agents (including Cortex XDR and Nessus agents), and optimize Cloud Key Management Services (KMS) for robust data encryption.\nAIOps & Security Assessments: Pioneer cloud security AIOps to predict, detect, and automatically remediate security anomalies. Lead comprehensive cloud platform security assessments and continuous refinement strategies.\n2. DevOps Engineering & Adoption\nSecure Software Supply Chain: Lead the adoption, support, and integration of the DevOps toolchain across all automated CI/CD pipelines , spanning threat modeling, SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), SCA (Software Composition Analysis), and runtime security monitoring.\nContainer & Orchestration Security: Lead Kubernetes cluster hardening, establishing fine-grained network policies, container runtime security, and secure configuration baselines.\nCentralized Secret Vaulting: Establish and enforce unified secret management protocols across all application environments using centralized secret and credential vaulting solutions.\n3. AI Agent Security & Safeguards\nAgent IAM & Identity Management: Design and implement robust Identity and Access Management (IAM) frameworks specifically tailored for autonomous AI agents, including identity and secret management for agent plugins and external tools.\nContinuous Guardrails & Monitoring: Architect and maintain continuous agent guardrails and runtime monitoring systems to trace, evaluate, and restrict agent reasoning and actions within safe boundaries.\nModel & Database Safeguards: Ensure model artifact security and establish strict integration safeguards for databases, ADP, and Vector/Graph Databases (VectorDB) to prevent data exfiltration and unauthorized access.\nActive Defense & Hardening: Implement automated prompt red-teaming pipelines to proactively discover LLM vulnerabilities, and lead code execution sandbox hardening to run agent-generated code safely.\n4. Platform Engineering & Excellence\nPlatform Engineering: Lead automation tools design and implementation to optimize the Cloud security operation. You will turn security requirements into technical design and lead the development team to deliver it.\nAudit,Compliance : Ensure all cloud and AI environments strictly adhere to enterprise Quality/Regulatory standards . Lead complex audit exercises, provide audit evidence, author remediation plans, and design end-to-end disaster recovery (DR) strategies\nQualifications & Technical Skills\nExperience: 5+ years of experience as an Infrastructure, DevOps, or Security Engineer , with at least 2+ years of hands-on experience designing secure AI architectures or Agentic platforms. Experience in the pharmaceutical, life sciences, or top-tier tech industries is highly preferred.\nAI Agent Security Mastery: Proven experience with agent runtimes, prompt security, sandbox design, VectorDB integrations, and managing credentials/identities for plugins and external MCPs/APIs.\nDevOps & Kubernetes Hardening: In-depth technical knowledge of security toolchains (SAST/DAST/SCA), Kubernetes cluster hardening, container runtime security, and credential vaulting solutions.\nCloud Operations & IaC: Mastery of Infrastructure-as-Code (Terraform, CloudFormation) for managing cloud environments . Proven track record of OS hardening, AMI baking, endpoint agent maintenance (Cortex XDR, Nessus), and Cloud Security Hub automation.\nHands-on Engineering: Highly proficient in at least one backend development or scripting language (e.g., Python, Go) with deep expertise building automated, secure CI/CD pipelines (GitLab/GitHub, JFrog) .\nCompliance & Audit Leadership: Strong ability to translate complex corporate policies and regulatory standards into technical controls, lead audit exercises, and manage incident responses .\nLanguage: Fluent bilingual capabilities in both English and Mandarin, enabling seamless collaboration across global and local cross-functional teams.\n#RDT 2026\nWho we are\nA healthier future drives us to innovate. Together, more than 100’000 employees across the globe are dedicated to advance science, ensuring everyone has access to healthcare today and for generations to come. Our efforts result in more than 26 million people treated with our medicines and over 30 billion tests conducted using our Diagnostics products. We empower each other to explore new possibilities, foster creativity, and keep our ambitions high, so we can deliver life-changing healthcare solutions that make a global impact.\nLet’s build a healthier future, together.\nRoche is an Equal Opportunity Employer.","description_format":"text","description_chars":6543,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Prescription Drugs","Diagnostic Tests & IVD","Biologics & Biosimilars","Oncology Therapeutics"],"lifecycle":[{"event":"open","at":"2026-08-07T00:00:00Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":1,"p_active":0.215,"p_room":0.28,"age_days":71,"expected_fill_days":14,"reasons":["conf:4","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/roche-devops-infrastructure-engineer-rdt-china-enterprise-technologies","json_url":"https://alion.io/job/roche-devops-infrastructure-engineer-rdt-china-enterprise-technologies.json","meta":{"generated_at":"2026-10-17T14:51:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20101,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":13531},"rest":"https://alion.io/mcp/rest/get_company?id=13531"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Froche-devops-infrastructure-engineer-rdt-china-enterprise-technologies"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Froche-devops-infrastructure-engineer-rdt-china-enterprise-technologies"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Froche-devops-infrastructure-engineer-rdt-china-enterprise-technologies"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/roche-devops-infrastructure-engineer-rdt-china-enterprise-technologies\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Froche-devops-infrastructure-engineer-rdt-china-enterprise-technologies"}]}