Senior Infrastructure Engineer AWS - uMed

About us

uMed is a healthtech and data platform transforming clinical research through real-world and patient-generated data. Our platform enables rapid, decentralized research and high-quality data generation across a global healthcare network.

As we scale our next-generation data platform, we are investing in strong infrastructure foundations to support secure, reliable, and compliant data and application workflows.

Role Overview

We are looking for a Senior Infrastructure Engineer (AWS) to take ownership of our cloud and hybrid infrastructure.

This role is responsible for designing, securing, and operating our AWS environment, managing access and identity across teams, and supporting integration with third-party and on-premise systems (e.g., TPP).

A key part of this role is reducing operational overhead by improving infrastructure design, access models, and system standardization. You will play a critical role in moving us from reactive infrastructure management to a scalable, well-governed platform.

You will act as the primary owner of infrastructure-related decisions and best practices across the organization.

Requirements

AWS Infrastructure Ownership

• Own and manage uMed ’s AWS environment across dev, staging, and production
• Design and maintain VPCs, networking, and environment isolation
• Manage core services including EC2, ECS/Fargate, RDS, S3, and Redshift
• Implement and maintain Infrastructure-as-Code (Terraform or equivalent)
• Manage cloud-hosted databases (e.g., RDS), including provisioning, access control, backup/restore, and security configuration

Access & Identity Management (High Priority)

• Design and manage IAM roles, policies, and permission models
• Provision secure access for internal teams, external collaborators, and offshore teams
• Enable secure connectivity via:
• IAM / AWS Identity Center
• Role-based access
• Bastion hosts / tunnel servers where required
• Improve and standardize access models and patterns to reduce manual provisioning

Hybrid & Third-Party System Management

• Lead setup and ongoing management of third-party/on-premise systems (e.g., TPP Hub/Reporting Unit)
• Provision and manage VM-based environments (Linux/Windows)
• Configure networking and connectivity (VPNs, IP whitelisting, firewall rules)
• Troubleshoot and resolve issues across AWS and vendor-managed systems
• Work directly with external vendors to support deployment and maintenance
• Document setup, dependencies, and recovery processes
• Provide occasional support for issues in third-party systems deployed in external environments (e.g., GP practice systems), including troubleshooting installation or connectivity issues in collaboration wit