Pfizer Jobs

Senior. Manager - AIA Integrations and DevOps Forward Deployed Engineer

Pfizer

Senior. Manager - AIA Integrations and DevOps Forward Deployed Engineer

Posted 2 Days Ago

Be an Early Applicant

San Jose, Escazu, Escazu, CRI

Hybrid

Senior level

Artificial Intelligence • Healthtech • Machine Learning • Natural Language Processing • Biotech • Pharmaceutical

We’re in relentless pursuit of breakthroughs that change patients’ lives.

The Role

Owns Pfizer US Commercial’s AWS infrastructure, cloud architecture, integrations, CI/CD, DevOps, security, reliability, observability, and cost management. Designs multi-account AWS environments, enterprise and SaaS integrations, AI infrastructure, public-facing hosting, and reusable delivery patterns. Leads infrastructure standards, incident response, compliance-aware operations, and technical mentoring while partnering with engineering, security, platform, and business stakeholders.

Summary Generated by Built In

Do you want to make a global impact on patient health? Do you thrive in a fast-paced environment that integrates scientific, clinical, and commercial domains through engineering and AI? Join Pfizer US Commercial AI Acceleration (AIA) team to leverage cutting-edge technology for critical business decisions and enhance customer experiences for colleagues, patients, and physicians. Our team of engineering, data science, and AI professionals is at the forefront of Pfizer's transformation into a digitally driven organization, using data and AI to change patients' lives, leading process and engineering innovations to advance AI and data science applications from prototypes and MVPs to full production.
As an AIA Integrations and DevOps Forward Deployed Engineer (Sr. Manager) on the AIA Full Stack Engineering team, you will be the owner of US Commercial's AWS accounts and the technical lead for everything infrastructure-related across US Commercial. You will architect, govern, and operate the AWS foundations that AIA's AI applications and agents run on-including externally hosted, public-facing solutions for sales and marketing-build the integrations that connect them to Pfizer's enterprise systems, data, and commercial SaaS platforms, and own the CI/CD and DevOps practices that let the team ship secure, reliable solutions from prototype to production at speed.
ROLE RESPONSIBILITIES
1) AWS Cloud Architecture & Infrastructure Engineering

Own the US Commercial AWS accounts end to end: account structure and vending (AWS Organizations, Control Tower, landing zones, SCPs), governance, guardrails, and lifecycle management, acting as the accountable technical owner with AWS and Pfizer cloud platform teams.
Act as the technical lead and authority for all infrastructure decisions in US Commercial: define standards, review architectures, and approve designs for AIA and partner teams.
Own infrastructure-as-code (Terraform, AWS CDK, CloudFormation) and Git-based workflows so every environment is repeatable, auditable, and reviewable.
Design and operate core AWS services including:
- Compute and runtime: ECS/Fargate, EKS, Lambda, and serverless patterns
- Data and storage: S3, RDS/Aurora, DynamoDB, OpenSearch, and vector stores
- Networking: VPC design, subnets, VPC peering, Transit Gateway, PrivateLink, API and NAT/Internet gateways, Direct Connect/VPN, Route 53, and load balancers
Architect and operate external hosting for public-facing solutions (CloudFront, WAF, Shield, ACM, edge security, DNS) in line with Pfizer external-hosting and security standards.
Serve as the expert for AWS AI services: Amazon Bedrock (models, Knowledge Bases, Guardrails, Agents, AgentCore), SageMaker, Amazon Q, and supporting services for RAG (Retrieval-Augmented Generation), agent runtimes, and model access/quota management across accounts.
Drive cloud cost optimization through right-sizing, tagging, budgets, and FinOps reporting, and own the AWS spend for US Commercial accounts.

2) Integrations & Connectivity Enablement

Design and build integrations between AIA solutions and Pfizer enterprise systems and commercial SaaS platforms (Adobe Experience Platform, Salesforce/Veeva CRM, data platforms such as Snowflake and Databricks, SharePoint/Microsoft 365, ServiceNow) using APIs, event-driven patterns, and MCP (Model Context Protocol) connectors.
Own API gateway, service mesh, and messaging patterns (API Gateway, EventBridge, SQS/SNS, Step Functions) that let applications, agents, and data services communicate securely.
Resolve networking and connectivity blockers for the team: firewall and proxy rules, private endpoints, DNS, certificates, and cross-account/cross-region access.
Partner with enterprise platform, network, and identity teams to secure approvals and land integration patterns that other teams can reuse.

3) CI/CD, DevOps & Release Engineering

Own CI/CD (Continuous Integration/Continuous Delivery) pipelines (GitHub Actions, AWS CodePipeline/CodeBuild/CodeDeploy, Azure DevOps) for web, API, data, ML, and native application workloads, automating with the AWS CLI and SDKs.
Build and maintain paved paths including:
- Containerization and image management (Docker, ECR) and container services (ECS/Fargate, EKS) with vulnerability scanning
- Automated testing, quality gates, and deployment verification
- Secrets and configuration management (Secrets Manager, Parameter Store) and environment promotion
Implement GitOps and release practices (blue/green, canary, rollback) aligned to Pfizer change-management processes.
Coach developers on DevOps practices so teams can self-serve safely.

4) Reliability, Observability & Security Operations

Implement observability across services with CloudWatch, OpenTelemetry, Grafana, and application telemetry, and own LLM observability with Langfuse (tracing, evaluations, cost and token usage, prompt management); define SLOs, alerting, and on-call runbooks.
Operate identity and access management: IAM roles and policies, SSO (Single Sign-On) via OIDC (OpenID Connect)/SAML, least-privilege access, and secrets rotation.
Embed DevSecOps: policy-as-code, SAST/DAST and dependency scanning, encryption at rest and in transit, and compliance-aware environments (GxP awareness where applicable).
Lead incident response, root-cause analysis, and disaster-recovery/backup strategies for AIA platforms.

5) Technical Leadership & Delivery Management

Set the technical direction and standards for cloud, integration, and DevOps within AIA; define reference architectures and reusable modules.
Coach and mentor engineers (internal and vendor) on:
- AWS architecture and infrastructure best practices
- Integration patterns and API design
- Reliability, security, and operational ownership
Establish strong delivery discipline through sprint planning, technical design reviews, documentation, and operational runbooks.
Engage directly with AIA customers and stakeholders to unblock delivery, communicate trade-offs, and prioritize the infrastructure roadmap.

BASIC QUALIFICATIONS

15+ years of experience in cloud infrastructure, platform engineering, integrations, or DevOps roles, with 10+ years of deep, hands-on AWS experience in production-scale environments.
AWS Certified Solutions Architect - Professional or AWS Certified DevOps Engineer - Professional (required); AWS Advanced Networking or Security Specialty strongly preferred.
Proven ownership of multi-account AWS environments: AWS Organizations, Control Tower, landing zones, SCPs, IAM Identity Center, and account-level governance and cost management.
Experience working with commercial, sales, and marketing organizations, including externally hosted, public-facing solutions.
Expert knowledge of AWS networking and security: VPC design and peering, PrivateLink, Transit Gateway, API/NAT/Internet gateways, Direct Connect/VPN, Route 53, CloudFront, IAM, KMS, and WAF.
Proven expertise in:
- Infrastructure as Code (Terraform, AWS CDK, or CloudFormation)
- Containers and orchestration (Docker, ECS/Fargate, EKS/Kubernetes)
- AWS-native CI/CD and tooling (CodePipeline/CodeBuild/CodeDeploy, AWS CLI and SDKs) plus GitHub Actions, Azure DevOps, or equivalent
Experience designing and building integrations with SaaS platforms such as Adobe Experience Platform and Salesforce using REST/GraphQL APIs, event-driven architectures (EventBridge, SQS/SNS, Kafka), and API gateways.
Hands-on experience with AWS AI services (Amazon Bedrock, AgentCore, SageMaker) and LLM observability tooling such as Langfuse in production.
Experience implementing observability and reliability practices (CloudWatch, OpenTelemetry, Prometheus/Grafana) and DevSecOps/secure SDLC practices, including secrets management.
Hands-on full stack engineering experience building and operating production applications, including:
- Commercial marketing platforms such as Adobe Experience Manager, Adobe Analytics, Adobe Campaign, and Adobe Workfront
- Frontend frameworks such as Angular and React
- Backend technologies such as Java and Python, including API design and service development
Proficiency in scripting (Python, TypeScript, Bash) to automate infrastructure and operational workflows.
Demonstrated technical leadership: setting infrastructure standards, reviewing architectures, and influencing senior stakeholders across engineering, security, and business teams; proven ability to deliver outcomes through others.

PREFERRED QUALIFICATIONS

Bachelor's or Master's degree in Computer Science, Engineering, or related field.
Experience as a named AWS account owner or cloud lead in a pharmaceutical or other regulated enterprise, including audit and compliance interactions.
Experience with MLOps/LLMOps tooling, vector databases (OpenSearch, pgvector), and evaluation pipelines for LLM (Large Language Model) applications.
Experience with Model Context Protocol (MCP) servers, agent platforms, and securing AI integrations.
Experience with multi-cloud or hybrid environments (Azure, Cloudflare) and enterprise identity providers (PingFederate, Microsoft Entra ID).
Familiarity with Pfizer's commercial domain (HCP (Healthcare Professional) engagement, omnichannel marketing, Veeva) or other regulated/healthcare environments..
Background in SRE practices, FinOps, or cloudcost optimization at scale.

Work Location Assignment: Hybrid
EEO (Equal Employment Opportunity) & Employment Eligibility
Pfizer is committed to equal opportunity in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, or disability.
To learn more about acceptable and prohibited uses of AI during the recruitment process, please review our candidate AI-use guidelines available on Pfizer Careers .
Information & Business Tech
#BI-Hybrid

Skills Required

15+ years of experience in cloud infrastructure, platform engineering, integrations, or DevOps roles
10+ years of hands-on AWS experience in production-scale environments
AWS Certified Solutions Architect Professional or AWS Certified DevOps Engineer Professional certification
Experience owning multi-account AWS environments, including AWS Organizations, Control Tower, landing zones, SCPs, IAM Identity Center, governance, and cost management
Experience supporting commercial, sales, and marketing organizations and externally hosted public-facing solutions
Expertise in AWS networking and security, including VPC, PrivateLink, Transit Gateway, Direct Connect or VPN, Route 53, CloudFront, IAM, KMS, and WAF
Expertise with infrastructure as code using Terraform, AWS CDK, or CloudFormation
Experience with Docker, ECS/Fargate, EKS, and Kubernetes
Experience with AWS CI/CD tools, AWS CLI and SDKs, and GitHub Actions, Azure DevOps, or equivalent
Experience designing SaaS integrations using REST or GraphQL APIs, event-driven architectures, messaging systems, and API gateways
Hands-on production experience with Amazon Bedrock, AgentCore, or SageMaker and LLM observability tools such as Langfuse
Experience with observability, reliability engineering, DevSecOps, secure SDLC, and secrets management
Full-stack experience building and operating production applications using Adobe platforms, Angular or React, and Java or Python
Proficiency in Python, TypeScript, and Bash scripting
Demonstrated technical leadership, architecture review, stakeholder influence, and delivery through others
Bachelor’s or Master’s degree in Computer Science, Engineering, or a related field
AWS Advanced Networking or Security Specialty certification
Experience as an AWS account owner or cloud lead in a pharmaceutical or regulated enterprise
Experience with MLOps or LLMOps, vector databases, and LLM evaluation pipelines
Experience with MCP servers, agent platforms, and secure AI integrations
Experience with multi-cloud or hybrid environments, Cloudflare, PingFederate, or Microsoft Entra ID
Familiarity with Pfizer commercial operations, HCP engagement, omnichannel marketing, Veeva, or regulated healthcare environments
Background in SRE practices, FinOps, or large-scale cloud cost optimization

What the Team is Saying

View all jobs at Pfizer

View Pfizer Profile

Report Job

Am I A Good Fit?

beta

Get Personalized Job Insights.

Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company

HQ: New York, NY

121,990 Employees

Year Founded: 1848

What We Do

Our purpose ensures that patients remain at the center of all we do. We live our purpose by sourcing the best science in the world; partnering with others in the healthcare system to improve access to our medicines; using digital technologies to enhance our drug discovery and development, as well as patient outcomes; and leading the conversation to advocate for pro-innovation/pro-patient policies.

Why Work With Us

We are the inventors, the problem solvers, the big thinkers — those who surmount any hurdle to deliver breakthrough medicines to the people who are counting on them the most.