Cloud Platform Engineer

Location:

Hybrid, New Jersey

Medidata follows a hybrid office policy in which employees who are hired for an in-person position are expected to work on site a certain number of days per week following Company policy.

Medidata is powering smarter treatments and healthier people through digital solutions to support clinical trials. Celebrating over 25 years of ground-breaking technological innovation across more than 38,000 trials and 12 million patients, Medidata offers industry-leading expertise, analytics-powered insights, and one of the largest clinical trial data sets in the industry. More than 1 million registered users across approximately 2,300 customers trust Medidata's seamless, end-to-end platform to improve patient experiences, accelerate clinical breakthroughs, and bring therapies to market faster.

A Dassault Systèmes brand (Euronext Paris: FR0014003TT8, DSY.PA), Medidata is headquartered in New York City and has been recognized as a Leader by Everest Group and IDC. Discover more at  Listen to our latest podcast, from Dreamers to Disruptors, and follow us at @Medidata.

As a Staff Cloud Platform Engineer, you will be the primary architect and operator of our multi-cloud ecosystem. This is a high-impact, generalist role that requires a deep understanding of the entire technology stack—from the underlying operating systems and networking to container orchestration and automated governance. You will design, secure, and scale the infrastructure that powers our global applications while mentoring engineering teams on cloud-native best practices.

• Design and implement secure, multi-account structures and landing zones across AWS, GCP, and Azure.
• Manage and evolve multi-cloud IAM, SSO, and Role-Based Access Controls (RBAC) to ensure least-privilege access.
• Enforce tagging standards, resource hierarchies, and cost-optimization strategies (rightsizing, idle resource elimination) to maintain fiscal accountability.
• Lead the deployment, scaling, and management of Kubernetes clusters (EKS, GKE, or self-managed). Manage CNI plugins, ingress controllers, and service meshes (Istio/Linkerd).
• Administer and optimize Linux (Ubuntu, Amazon Linux, RHEL) and Windows Server environments, ensuring hardened configurations and automated patching.
• Manage the intersection of cloud services and traditional OS-level dependencies, including Active Directory integration and file system performance tuning.
• Develop and maintain modular templates using Terraform, Cloud Formation, or Pulumi.
• Build and optimize deployment pipelines using Git Hub Actions, Git Lab CI, Flux, or ArgoCD to enable "Git Ops" workflows.
• Design security controls including encryption at rest/transit (KMS), VPC Service Controls, and audit logging to meet SOC2, HIPAA, or FedRAMP standards.
• Leverage AI-native development tools (e.g., Cursor, Git Hub Copilot) and LLM-powered agents to accelerate Infrastructure-as-Code (IaC) authoring, automate complex root-cause analysis, and proactively optimize cloud utilization through predictive anomaly detection.

• Bachelor's or Master's degree in Computer Science, Information Technology, or a related field.
• 5+ years of experience in Cloud Engineering, SRE, or Dev Ops, with deep proficiency in AWS and/or GCP.
• Expert-level experience administering Linux (shell scripting, kernel tuning) and Windows Server (Active Directory, Group Policy, Power Shell).
• Proven track record of running production-grade Kubernetes workloads at scale, including experience with Helm and container security.
• Strong proficiency in Python, Go, or Bash for infrastructure automation and tool development.
• Solid understanding of VPC/VNet design, peering, Transit Gateways, and zero-trust…