Senior lead Cloud DevOps Engineer

About the Team: Enterprise Systems is the backbone of GSK’s internal operations in Digital & Tech, enabling GSK Global Functions teams such as Finance, Procurement, HR, Legal, Compliance, WREF, CGA and Corporate Secretariat to run seamlessly. This team designs and delivers cutting-edge digital platforms that power critical processes, ensuring efficiency, compliance, and scalability across the enterprise. Enterprise Systems Management & Business Operations delivers digital solutions that support Enterprise Systems running as a high-performing organisation. This team drives financial discipline, operational rigour and strategic alignment across the ES portfolio that safeguard GSK’s integrity and reputation globally. By joining this team, you’ll help shape systems that support thousands of employees worldwide, driving innovation and reliability in the tools that keep GSK moving forward. Job Purpose The Cloud DevOps Engineer designs, builds, automates and maintains secure cloud infrastructure, CI/CD (Continuous Integration / Continuous Delivery) pipelines and environment promotion processes for technology products and digital platforms. The role independently delivers complex cloud and deployment automation within approved enterprise architecture, cyber security, DevSecOps (Development, Security, and Operations) and quality guardrails. The role ensures that cloud infrastructure, application deployments and environment configurations are repeatable, scalable, traceable and aligned with approved Validation Plans. It supports reliable movement of software and configuration across DEV, TEST, VAL (Validation environment) and PROD environments while maintaining appropriate segregation, approvals, evidence and rollback capabilities. The Cloud DevOps Engineer works closely with Product Owners, Software Engineers, Platform Engineers, Test Engineers, Architects, Cyber Security, Quality, Validation and Service teams. The role supports cloud releases, platform integrations, infrastructure management and operational readiness and resolves complex technical issues affecting delivery or service continuity. Key Responsibilities Cloud Infrastructure and Automation Design, deploy and maintain secure cloud infrastructure supporting digital products, applications, data services and integration platforms. Develop and maintain infrastructure-as-code modules, configuration templates and deployment automation. Automate repeatable infrastructure provisioning, configuration, scaling, patching and environment-management activities. Apply reusable patterns and approved reference architectures to improve consistency across cloud environments. Support cloud connectivity, identity, networking, compute, storage and platform-service configurations within approved architecture boundaries. Ensure infrastructure changes are version-controlled, peer-reviewed, tested and deployed through approved workflows. CI/CD Pipeline Engineering Design, implement and maintain secure CI/CD pipelines, branching strategies and automated testing. Configure pipeline stages, quality gates, approval controls, security checks and deployment workflows. Own the secure configuration of pipelines, repositories, build agents, deployment agents and platform integrations. Integrate automated functional, security, configuration and infrastructure testing into delivery pipelines. Maintain artefact repositories and ensure software, infrastructure and configuration artefacts are controlled and traceable. Improve pipeline performance, reliability, maintainability and reuse across technology products. Environment and Release Management Define environment promotion flows across DEV, TEST, VAL and PROD in collaboration with Product Owners, Engineers, Quality and Validation teams. Coordinate release execution and environment promotion, ensuring that required approvals, evidence and rollback arrangements are complete. Automate software, infrastructure and configuration deployments to reduce manual intervention and deployment risk. Support application releases, cloud migrations, platform upgrades and integration deployments. Maintain deployment records, release evidence and environment baselines in accordance with approved Validation Plans. Ensure appropriate segregation of duties, access controls and approval checkpoints across controlled environments. Support release readiness assessments and post-deployment verification. Cloud Security and DevSecOps Apply DevSecOps principles throughout cloud infrastructure and application delivery processes. Manage pipeline permissions, service identities, secrets, certificates and deployment credentials according to approved controls. Embed security scanning and automated compliance checks into infrastructure and software delivery pipelines. Support remediation of identified cloud configuration, infrastructure and software-delivery vulnerabilities. Implement least-privilege access and secure configuration for repositories, pipelines, agents and cloud resources. Maintain audit traceability for infrastructure changes, pipeline execution, deployments and approvals. Work with Cyber Security and Architecture teams to implement approved cloud security patterns. Monitoring, Reliability and Troubleshooting Implement and maintain appropriate logging, monitoring, alerting and operational telemetry for cloud infrastructure and deployment services. Diagnose complex pipeline, infrastructure and deployment failures using logs, metrics, traces and dependency information. Investigate environment inconsistencies, configuration drift, capacity constraints and integration failures. Resolve technical issues without compromising security, validation status or release integrity. Contribute to root-cause analysis and corrective and preventive actions for recurring cloud or deployment issues. Identify opportunities to improve platform resilience, deployment reliability and operational supportability. Support technical recovery and service-restoration activities when required. Documentation, Validation and Operational Readiness Create and maintain technical documentation, infrastructure diagrams, configuration standards, support procedures and operational runbooks. Maintain validation evidence, deployment records and technical information required to demonstrate release traceability. Ensure cloud infrastructure and deployment processes are aligned with approved quality and validation requirements. Maintain operational knowledge to support effective transition into service. Contribute to technical design reviews, validation planning, risk assessments and operational-readiness reviews. Support internal reviews and audits by providing accurate technical and deployment evidence. Share knowledge and reusable cloud engineering practices across product and platform teams. Continuous Improvement Use approved AI (Artificial Intelligence) tools in your day-to-day work to improve your own productivity and your team’s ways of working, sharing what works and applying sound judgement, including validating outputs and following GSK’s Responsible AI, privacy and security requirements. Deliver faster, safer releases for the manufacturing product teams, measured by deployment frequency, failed change rate, environment availability and release lead time Identify manual, repetitive or error-prone activities and replace them with controlled automation. Develop reusable infrastructure, pipeline and deployment components that can be adopted across multiple products. Monitor engineering practices and recommend improvements within approved architectural and security standards. Contribute to cloud engineering communities of practice and shared technical standards. Evaluate new cloud and DevOps capabilities and provide evidence-based recommendations for their controlled adoption. Key Relationships / Customers Product Owners and Product Managers Software, cloud, platform, integration, data and test engineers Solution, Cloud, Security and Enterprise Architects Cyber Security, Quality and Validation teams Service Managers and operations teams Cloud, infrastructure, network and environment teams Manufacturing technology and site engineering teams Technology vendors, cloud service providers and delivery partners Area of Specialisation Cloud infrastructure engineering and automation Infrastructure as code and configuration management CI/CD pipeline engineering Source control, repositories and branching strategies Automated build, testing and deployment Cloud networking, identity, compute and storage concepts Environment promotion across DEV, TEST, VAL and PROD DevSecOps, identity, secrets and permissions Release traceability and validation evidence Monitoring, logging, alerting and troubleshooting Cloud reliability, resilience and operational readiness Other Job-Related Skills / Background Strong analytical, diagnostic and technical troubleshooting skills. Strong understanding of cloud infrastructure, deployment automation and environment-management principles. Clear technical writing and disciplined documentation practices. Understanding of secure configuration, least privilege, secrets management and audit traceability. Understanding of networking, identity, certificates, access controls and service-to-service connectivity. Ability to interpret technical designs, security requirements, Validation Plans and operational standards. Ability to work independently while remaining aligned with approved architecture and engineering guardrails. Ability to collaborate across global product, engineering, quality, cyber security and service teams. Ability to manage multiple technical priorities and support-controlled releases. Continuous-improvement mindset focused on automation, standardisation, reuse and reliable delivery. Ability to communicate complex technical issues clearly to both technical and non-technical stakeholders. Basic Qualifications: Bachelor’s or Master’s degree in Computer Science, Information Technology, Software Engineering, Cloud Engineering, or a related technical discipline. Minimum 4+ years of experience in cloud engineering, DevOps, platform engineering, software engineering, site reliability engineering, or deployment automation. Experience in building and maintaining cloud infrastructure using Infrastructure as Code (IaC) and automated configuration approaches. Experience designing, implementing, and maintaining CI/CD pipelines, including automated testing, quality gates, security controls, approval controls, and deployment workflows. Experience with source-code repositories, artefact repositories, branching strategies, build/deployment agents, integrations, secrets, and environment controls. Experience supporting environment promotion across DEV, TEST, VAL, and PROD, including controlled approvals, deployment evidence, segregation of duties, and rollback arrangements. Experience coordinating and supporting controlled software and infrastructure releases, including application releases, cloud migrations, platform upgrades, and integration deployments. Experience with cloud networking, identity, compute, storage, access controls, certificates, secrets management, and service-to-service connectivity. Experience applying DevSecOps practices, including security scanning, automated compliance checks, least-privilege access, secure configuration, and audit traceability. Experience implementing and supporting cloud monitoring, logging, alerting, and operational telemetry. Experience troubleshooting cloud infrastructure, CI/CD pipeline, integration, deployment, configuration-drift, and environment issues using logs, metrics, traces, and dependency information. Experience maintaining version-controlled infrastructure, configuration, deployment artefacts, technical documentation, release records, and environment baselines. Experience working within cybersecurity, architecture, access-control, quality, and operational standards. Experience with release processes, operational readiness, root-cause analysis, recovery, and service-restoration activities. Preferred Qualifications: Experience working in a regulated, validated, or highly controlled environment. Experience supporting validation requirements and maintaining validation evidence and release traceability for controlled cloud infrastructure and deployments. Relevant certifications in cloud, DevOps, Infrastructure as Code, cybersecurity, source control, Site Reliability Engineering (SRE), or Agile. Experience developing reusable Infrastructure as Code modules, configuration templates, pipeline components, and deployment automation that can be adopted across multiple products. Experience supporting cloud reliability, resilience, scalability, environment availability, and operational readiness. Experience contributing to technical design reviews, validation planning, technical risk assessments, and operational-readiness reviews. Experience supporting internal reviews or audits by providing infrastructure, deployment, configuration, or validation evidence. Experience evaluating new cloud or DevOps capabilities and providing evidence to support controlled adoption. #AGTech #GSK-LI Skills Computer Programming, Data Analysis, Data Sourcing, Data Visualization, KPI Dashboards, Report Analysis, Report Creation, Structured Query Language (SQL) Why GSK? Uniting science, technology and talent to get ahead of disease together. GSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company where people can thrive. We get ahead of disease by preventing and treating it with innovation in specialty medicines and vaccines. We focus on four therapeutic areas: respiratory, immunology and inflammation; oncology; HIV; and infectious diseases – to impact health at scale. People and patients around the world count on the medicines and vaccines we make, so we’re committed to creating an environment where our people can thrive and focus on what matters most. Our culture of being ambitious for patients, accountable for impact and doing the right thing is the foundation for how, together, we deliver for patients, shareholders and our people. Inclusion at GSK: As an employer committed to Inclusion, we encourage you to reach out if you need any adjustments during the recruitment process. Please contact our Recruitment Team at [email protected] to discuss your needs. Important notice to Employment businesses/ Agencies GSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK's commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals by employment businesses/agencies in respect of the vacancies posted on this site. It has come to our attention that the names of GlaxoSmithKline or GSK or our group companies are being used in connection with bogus job advertisements or through unsolicited emails asking candidates to make some payments for recruitment opportunities and interview. Please be advised that such advertisements and emails are not connected with the GlaxoSmithKline group in any way. GlaxoSmithKline does not charge any fee whatsoever for recruitment process. Please do not make payments to any individuals / entities in connection with recruitment with any GlaxoSmithKline (or GSK) group company at any worldwide location. Even if they claim that the money is refundable. If you come across unsolicited email from email addresses not ending in gsk.com or job advertisements which state that you should contact an email address that does not end in “gsk.com”, you should disregard the same and inform us by emailing [email protected] , so that we can confirm to you if the job is genuine.