What are the responsibilities and job description for the Cloud Identity Architect position at Openkyber?
Role : Cloud/Platform Architect Location : Cambridge, MA (Hybrid) Job Type: -Contract Required Experience: 15 20 years Role Summary Lead end-to-end architecture and delivery governance for a regulated AWS platform supporting CDAP (pharmacometrics) and BEE (biostats). Own multi-environment architecture (DEV/TEST/PROD/DR) using Terraform modularization and GitOps practices. Define platform blueprint for compute, storage, networking, identity, CI/CD, observability, DR, and operational readiness.
Key Responsibilities- Define target AWS architecture for VPC design with department isolation (subnets, NACLs, security groups).
- Architect Amazon EKS with namespace isolation (cdap/sas/gitlab) and Helm-based deployments.
- Architect AWS PCS (Slurm HPC) for NONMEM workloads including scaling and integration patterns.
- Architect storage layers using FSx NetApp ONTAP (NFS/SMB, multi-AZ) and FSx Lustre scratch for HPC.
- Define end-user access architecture using AWS WorkSpaces (Windows desktops) and integration touchpoints.
- Define data services architecture using RDS PostgreSQL and ElastiCache Redis for platform components.
- Design Identity & Access integration: Okta SSO Duo MFA, AWS Managed AD, and RBAC/group strategy.
- Establish Infrastructure-as-Code standards: Terraform module strategy, remote state, environment variable files, and governance.
- Define GitOps standards: all Kubernetes manifests/Helm values in Git, CI/CD-driven promotion across environments.
- Define GitLab platform and pipeline strategy (runners, approvals, artifact management, reusable templates).
- Drive security-by-design: least privilege IAM, logging, encryption, secrets management patterns.
- Ensure regulated operations readiness: change control, audit readiness, validation documentation alignment (GxP/21 CFR Part 11).
- Define operational model: monitoring/alerting, patching cadence, backup/restore, DR runbooks, and service reporting.
- Create architecture deliverables: HLD/LLD, standards, reference patterns, runbooks, and handover package.
- Know R&D and FDA process - what we are building is tool for R&D team (to run simulation/analysis) who face FDA Audit, understanding of business and work closely with the business
- Work with stakeholders (client, engineering, ops) to manage risks, dependencies, and design decisions.
- Expert level AWS architecture experience: networking, compute, storage, IAM/security, multi-AZ design.
- Expert level Terraform experience: module design, remote state (S3 locking), multi-environment patterns.
- GitLab CI/CD pipelines: design, governance, reusable templates, runner strategy.
- Kubernetes/EKS architecture with Helm and GitOps workflows.
- Strong Experience integrating /connecting On-premises Active Directory to AWS.
- Experience with AWS HPC workloads.
- Strong experience operating platforms in regulated / compliance-driven environments.
- Strong documentation and architecture governance skills.
- Have Healthcare/Pharma domain experience, with knowledge on FDA processes
- Experience working with business teams and R&D team with good understanding of business processes
- Experience with AWS PCS / Slurm.
- Experience with FSx NetApp ONTAP and FSx Lustre performance patterns.
- Experience with AWS WorkSpaces at scale.
- Experience designing/operating self-hosted GitLab in highly available setups.
- Experience with OKTA integration.
- Experience with Pharma domain an added advantage.
Education / Certifications Bachelor s degree in Computer Science / IT or equivalent. Preferred AWS Solutions Architect Associate/Professional Certification.
For applications and inquiries, contact: hirings@openkyber.com