Do you want to make a global impact on patient health? Do you thrive in a fast-paced environment that integrates scientific, clinical, and commercial domains through engineering and AI? Join Pfizer US Commercial AI Acceleration (AIA) team to leverage cutting-edge technology for critical business decisions and enhance customer experiences for colleagues, patients, and physicians. Our team of engineering, data science, and AI professionals is at the forefront of Pfizer’s transformation into a digitally driven organization, using data and AI to change patients’ lives, leading process and engineering innovations to advance AI and data science applications from prototypes and MVPs to full production.
As an AIA Integrations and DevOps Forward Deployed Engineer (Sr. Manager) on the AIA Full Stack Engineering team, you will be the owner of US Commercial’s AWS accounts and the technical lead for everything infrastructure-related across US Commercial. You will architect, govern, and operate the AWS foundations that AIA’s AI applications and agents run on—including externally hosted, public-facing solutions for sales and marketing—build the integrations that connect them to Pfizer’s enterprise systems, data, and commercial SaaS platforms, and own the CI/CD and DevOps practices that let the team ship secure, reliable solutions from prototype to production at speed.
ROLE RESPONSIBILITIES
1) AWS Cloud Architecture & Infrastructure Engineering
- Own the US Commercial AWS accounts end to end: account structure and vending (AWS Organizations, Control Tower, landing zones, SCPs), governance, guardrails, and lifecycle management, acting as the accountable technical owner with AWS and Pfizer cloud platform teams.
- Act as the technical lead and authority for all infrastructure decisions in US Commercial: define standards, review architectures, and approve designs for AIA and partner teams.
- Own infrastructure-as-code (Terraform, AWS CDK, CloudFormation) and Git-based workflows so every environment is repeatable, auditable, and reviewable.
- Design and operate core AWS services including:
- Compute and runtime: ECS/Fargate, EKS, Lambda, and serverless patterns
- Data and storage: S3, RDS/Aurora, DynamoDB, OpenSearch, and vector stores
- Networking: VPC design, subnets, VPC peering, Transit Gateway, PrivateLink, API and NAT/Internet gateways, Direct Connect/VPN, Route 53, and load balancers
- Architect and operate external hosting for public-facing solutions (CloudFront, WAF, Shield, ACM, edge security, DNS) in line with Pfizer external-hosting and security standards.
- Serve as the expert for AWS AI services: Amazon Bedrock (models, Knowledge Bases, Guardrails, Agents, AgentCore), SageMaker, Amazon Q, and supporting services for RAG (Retrieval-Augmented Generation), agent runtimes, and model access/quota management across accounts.
- Drive cloud cost optimization through right-sizing, tagging, budgets, and FinOps reporting, and own the AWS spend for US Commercial accounts.
2) Integrations & Connectivity Enablement
- Design and build integrations between AIA solutions and Pfizer enterprise systems and commercial SaaS platforms (Adobe Experience Platform, Salesforce/Veeva CRM, data platforms such as Snowflake and Databricks, SharePoint/Microsoft 365, ServiceNow) using APIs, event-driven patterns, and MCP (Model Context Protocol) connectors.
- Own API gateway, service mesh, and messaging patterns (API Gateway, EventBridge, SQS/SNS, Step Functions) that let applications, agents, and data services communicate securely.
- Resolve networking and connectivity blockers for the team: firewall and proxy rules, private endpoints, DNS, certificates, and cross-account/cross-region access.
- Partner with enterprise platform, network, and identity teams to secure approvals and land integration patterns that other teams can reuse.
3) CI/CD, DevOps & Release Engineering
- Own CI/CD (Continuous Integration/Continuous Delivery) pipelines (GitHub Actions, AWS CodePipeline/CodeBuild/CodeDeploy, Azure DevOps) for web, API, data, ML, and native application workloads, automating with the AWS CLI and SDKs.
- Build and maintain paved paths including:
- Containerization and image management (Docker, ECR) and container services (ECS/Fargate, EKS) with vulnerability scanning
- Automated testing, quality gates, and deployment verification
- Secrets and configuration management (Secrets Manager, Parameter Store) and environment promotion
- Implement GitOps and release practices (blue/green, canary, rollback) aligned to Pfizer change-management processes.
- Coach developers on DevOps practices so teams can self-serve safely.
4) Reliability, Observability & Security Operations
- Implement observability across services with CloudWatch, OpenTelemetry, Grafana, and application telemetry, and own LLM observability with Langfuse (tracing, evaluations, cost and token usage, prompt management); define SLOs, alerting, and on-call runbooks.
- Operate identity and access management: IAM roles and policies, SSO (Single Sign-On) via OIDC (OpenID Connect)/SAML, least-privilege access, and secrets rotation.
- Embed DevSecOps: policy-as-code, SAST/DAST and dependency scanning, encryption at rest and in transit, and compliance-aware environments (GxP awareness where applicable).
- Lead incident response, root-cause analysis, and disaster-recovery/backup strategies for AIA platforms.
5) Technical Leadership & Delivery Management
- Set the technical direction and standards for cloud, integration, and DevOps within AIA; define reference architectures and reusable modules.
- Coach and mentor engineers (internal and vendor) on:
- AWS architecture and infrastructure best practices
- Integration patterns and API design
- Reliability, security, and operational ownership
- Establish strong delivery discipline through sprint planning, technical design reviews, documentation, and operational runbooks.
- Engage directly with AIA customers and stakeholders to unblock delivery, communicate trade-offs, and prioritize the infrastructure roadmap.
BASIC QUALIFICATIONS
- 15+ years of experience in cloud infrastructure, platform engineering, integrations, or DevOps roles, with 10+ years of deep, hands-on AWS experience in production-scale environments.
- AWS Certified Solutions Architect – Professional or AWS Certified DevOps Engineer – Professional (required); AWS Advanced Networking or Security Specialty strongly preferred.
- Proven ownership of multi-account AWS environments: AWS Organizations, Control Tower, landing zones, SCPs, IAM Identity Center, and account-level governance and cost management.
- Experience working with commercial, sales, and marketing organizations, including externally hosted, public-facing solutions.
- Expert knowledge of AWS networking and security: VPC design and peering, PrivateLink, Transit Gateway, API/NAT/Internet gateways, Direct Connect/VPN, Route 53, CloudFront, IAM, KMS, and WAF.
- Proven expertise in:
- Infrastructure as Code (Terraform, AWS CDK, or CloudFormation)
- Containers and orchestration (Docker, ECS/Fargate, EKS/Kubernetes)
- AWS-native CI/CD and tooling (CodePipeline/CodeBuild/CodeDeploy, AWS CLI and SDKs) plus GitHub Actions, Azure DevOps, or equivalent
- Experience designing and building integrations with SaaS platforms such as Adobe Experience Platform and Salesforce using REST/GraphQL APIs, event-driven architectures (EventBridge, SQS/SNS, Kafka), and API gateways.
- Hands-on experience with AWS AI services (Amazon Bedrock, AgentCore, SageMaker) and LLM observability tooling such as Langfuse in production.
- Experience implementing observability and reliability practices (CloudWatch, OpenTelemetry, Prometheus/Grafana) and DevSecOps/secure SDLC practices, including secrets management.
- Hands-on full stack engineering experience building and operating production applications, including:
- Commercial marketing platforms such as Adobe Experience Manager, Adobe Analytics, Adobe Campaign, and Adobe Workfront
- Frontend frameworks such as Angular and React
- Backend technologies such as Java and Python, including API design and service development
- Proficiency in scripting (Python, TypeScript, Bash) to automate infrastructure and operational workflows.
- Demonstrated technical leadership: setting infrastructure standards, reviewing architectures, and influencing senior stakeholders across engineering, security, and business teams; proven ability to deliver outcomes through others.
PREFERRED QUALIFICATIONS
- Bachelor's or Master's degree in Computer Science, Engineering, or related field.
- Experience as a named AWS account owner or cloud lead in a pharmaceutical or other regulated enterprise, including audit and compliance interactions.
- Experience with MLOps/LLMOps tooling, vector databases (OpenSearch, pgvector), and evaluation pipelines for LLM (Large Language Model) applications.
- Experience with Model Context Protocol (MCP) servers, agent platforms, and securing AI integrations.
- Experience with multi-cloud or hybrid environments (Azure, Cloudflare) and enterprise identity providers (PingFederate, Microsoft Entra ID).
- Familiarity with Pfizer’s commercial domain (HCP (Healthcare Professional) engagement, omnichannel marketing, Veeva) or other regulated/healthcare environments..
- Background in SRE practices, FinOps, or cloudcost optimization at scale.
Work Location Assignment: Hybrid
EEO (Equal Employment Opportunity) & Employment Eligibility
Pfizer is committed to equal opportunity in the terms and conditions of employment for all employees and job applicants without regard to race, color, religion, sex, sexual orientation, age, gender identity or gender expression, national origin, or disability.
To learn more about acceptable and prohibited uses of AI during the recruitment process, please review our candidate AI-use guidelines available on Pfizer Careers.
Information & Business Tech