高级云工程师-上海

Work Your Magic with us!  

Ready to explore, break barriers, and discover more? We know you’ve got big plans – so do we! Our colleagues across the globe love innovating with science and technology to enrich people’s lives with our solutions in Healthcare, Life Science, and Electronics. Together, we dream big and are passionate about caring for our rich mix of people, customers, patients, and planet. That's why we are always looking for curious minds that see themselves imagining the unimaginable with us.  

About the Role
We are building a new cloud landing zone on Tencent Cloud (Domestic China) within a GxP-regulated environment. As a Cloud Infrastructure DevOps Engineer, you are the hands-on expert who builds, automates, and operates our cloud infrastructure day-to-day. You own the CI/CD pipelines, ensure platform reliability, and drive operational excellence through automation and observability.
You will be part of a global team responsible for multi-cloud infrastructure across AWS, GCP, and Azure, while your primary focus will be the Tencent Cloud platform in China.
 
What You'll Do
● Build and maintain the Tencent Cloud landing zone infrastructure using Infrastructure as Code – no manual changes, ever
● Deploy, operate, and troubleshoot TKE clusters (Tencent Kubernetes Engine) including networking, ingress controllers, service mesh, RBAC, pod security, scaling, and monitoring
● Own CI/CD pipelines for infrastructure deployment using GitHub Actions and GitOps workflows
● Automate everything – provisioning, configuration, testing, compliance checks, and drift detection
● Monitor and respond to infrastructure incidents, ensuring high availability and rapid resolution
● Collaborate with the Infrastructure Architect to implement designs and provide operational feedback
● Implement and maintain network security controls: firewall rules, security groups, WAF configurations, VPN/SD-WAN connectivity
● Leverage AI-powered tooling at the infrastructure level to improve automation, monitoring, alerting, and incident response
● Act as Qualification Owner for infrastructure components in the GxP-regulated environment
● Participate in on-call rotations covering the global multi-cloud environment (AWS, GCP, Azure)

What You Bring
Must Have
● 5+ years of experience in cloud infrastructure engineering / DevOps (Level 3 / Senior)
● Deep hands-on expertise in Tencent Cloud services (VPC, CCN, CVM, CLB, COS, Security Groups, Cloud Firewall)
● In-depth knowledge of TKE (Tencent Kubernetes Engine) – cluster operations, CNI networking, troubleshooting, scaling, monitoring, and upgrades
● Strong experience with Infrastructure as Code (Terraform) – writing, testing, and maintaining modules
● Expert-level proficiency with GitHub (Actions, workflows, branch strategies) and GitOps practices
● Hands-on experience with CI/CD pipeline design for infrastructure (testing, validation, promotion across environments)
● Experience with network security operations: firewall management, segmentation, traffic inspection
● Understanding of GxP/regulated environments and willingness to take on the role of Qualification Owner
● Automation-first mindset – you actively eliminate manual toil and build self-healing systems
● Basic knowledge in scripting, e.g. bash, Python or PowerShell
● Experience with at least one additional cloud platform: AWS, GCP, or Azure
● Strong troubleshooting and incident response skills
● Willingness to participate in global on-call rotations
● Fluent in English (written and spoken) – our team language is English
● Professional-Level Certificate (e.g. AWS Certified Solutions Architect – Associate/Professional; Tencent Cloud Certified Professional – Solutions Architect)
 
Nice to Have
● Experience with PaloAlto firewalls
● Knowledge of Tencent EdgeOne or Tencent WAF
● Familiarity with SD-WAN solutions
● Experience with observability stacks (Prometheus, Grafana, Loki, or Tencent Cloud Monitor)
● Experience with AI/ML tools for operations (AIOps, intelligent alerting, Copilot for IaC, automated remediation)
● Container security tools
● Experience with compliance frameworks (GxP, GAMP5)
● Mandarin language skills (beneficial for local vendor interactions)
 
What We Offer
● Hybrid working model 
● Work in a global, diverse team with colleagues across multiple regions
● Opportunity to build a greenfield landing zone from the ground up
● Access to cutting-edge AI tooling for infrastructure automation
● Career development in a regulated, enterprise-scale cloud environment
● Competitive compensation package

What we offer: We are curious minds that come from a broad range of backgrounds, perspectives, and life experiences. We believe that this variety drives excellence and innovation, strengthening our ability to lead in science and technology. We are committed to creating access and opportunities for all to develop and grow at your own pace. Join us in building a culture of inclusion and belonging that impacts millions and empowers everyone to work their magic and champion human progress!

Apply now and become a part of a team that is dedicated to Sparking Discovery and Elevating Humanity!