About this role
The Senior Cloud Infrastructure Engineer serves as a senior technical leader supporting Quva's hybrid cloud environment spanning private cloud, Microsoft Azure, Amazon Web Services (AWS), and managed-service provider (MSP) delivered cloud services. This role combines hands-on cloud and infrastructure engineering with leadership in architecture, governance, automation, security integration, operational escalation, cost optimization, and technical oversight. The position leads complex initiatives, establishes scalable standards, mentors technical team members, and strengthens internal cloud capability across providers while continuing to leverage external partners for operational scale, specialist capabilities, and after-hours support. At Quva, you will be an essential part of a mission-driven organization dedicated to expanding critical access to quality, affordable medication and data insights while promoting a culture of innovation, collaboration, and continuous improvement.
What the Senior Cloud Infrastructure Engineer Does Each Day:
- Lead the technical architecture, engineering standards, roadmap, and lifecycle direction for Quva's private cloud, Azure, and AWS environments
- Provide direct engineering support for existing private-cloud tenants, including compute, storage, networking, identity integration, monitoring, backup, recovery, and infrastructure troubleshooting
- Design, implement, and govern Azure and AWS infrastructure using scalable, secure, repeatable patterns aligned with business and application requirements
- Serve as an internal Azure/AWS technical resource and escalation point for cloud infrastructure incidents, complex changes, migrations, integrations, and performance issues
- Develop and maintain infrastructure-as-code and automation practices using technologies such as Terraform, Bicep/ARM, AWS CloudFormation, PowerShell, Python, Azure DevOps, or GitHub Actions, as appropriate to Quva standards
- Partner with Cybersecurity to integrate cloud identity, privileged access, network security, logging, vulnerability management, endpoint/workload protections, and security monitoring into cloud architecture
- Architect and maintain cloud connectivity and network services, including virtual networks/VPCs, routing, DNS, VPN/private connectivity, load balancing, firewalls/security groups, and hybrid-cloud integration
- Implement and maintain standards for cloud observability, monitoring, alerting, log collection, backup, disaster recovery, resilience, and capacity/performance management
- Contribute technical expertise to workload migration planning, landing-zone design, cloud adoption, tenant/account/subscription structure, and application infrastructure modernization
- Implement cloud governance controls covering access, resource organization, tagging, configuration standards, policy enforcement, change control, documentation, and operational readiness
- Monitor and optimize cloud utilization and spend through rightsizing, lifecycle management, reservations/savings approaches where appropriate, resource cleanup, and cost visibility; partner with IT leadership on cloud cost governance
- Support the technical oversight of MSP-delivered cloud services. Review designs, validate engineering decisions, coordinate escalations, and confirm that services align with Quva architecture, security, resiliency, and support requirements
- Maintain architecture diagrams, technical standards, runbooks, inventories, support documentation, recovery procedures, and institutional knowledge for Quvas cloud platforms
- Participate in incident response, root-cause analysis, problem management, change management, and disaster-recovery testing for infrastructure and cloud services
- Collaborate with application, security, data, business systems, and infrastructure teams to translate business requirements into supportable technical solutions
- Provide technical guidance and knowledge transfer to internal IT team members while reducing reliance on provider-specific institutional knowledge
- Establish clear technical ownership across Quva-operated and provider-operated cloud services, including architecture, IAM, networking, automation, monitoring, security, backup/disaster recovery, and optimization
- Define technical acceptance criteria for MSP projects and operational changes and validate solutions before production handoff
- Review MSP incidents, recurring problems, service performance, technical debt, security findings, and optimization opportunities; drive corrective actions to closure
- Ensure Quva retains current architecture documentation, administrative knowledge, configuration visibility, and recovery information necessary to independently oversee its environments
- Partner with Procurement, Finance, Security, and IT leadership as appropriate to evaluate technical scope, service consumption, licensing, capacity, and provider performance
Our Most Successful Senior Cloud Infrastructure Engineer has / is:
- Cloud Architecture and Engineering
- Hybrid Infrastructure
- Automation and Infrastructure as Code
- Cloud Security and Identity Integration
- Reliability, Backup and Disaster Recovery
- FinOps and Cost Optimization
- Technical Vendor and MSP Governance
- Incident and Problem Resolution
- Documentation and Knowledge Management
- Cross-Functional Technical Leadership
Minimum Requirements for this Role:
- Bachelors degree in Computer Science, Information Technology, Engineering, or a related field
- 7+ years of progressive infrastructure, systems, cloud, or platform engineering experience, including 3+ years of hands-on production cloud engineering in Azure and/or AWS and demonstrated leadership of complex technical initiatives
- Demonstrated experience supporting hybrid environments that integrate on-premises/private-cloud infrastructure with public cloud services
- Strong knowledge of cloud networking, identity and access management, compute, storage, monitoring, backup/recovery, high availability, and disaster-recovery concepts
- Hands-on experience with infrastructure-as-code, scripting, configuration automation, and CI/CD practices for infrastructure deployment
- Experience working with managed-service providers, consulting partners, or outsourced infrastructure teams, with the ability to independently evaluate technical designs and provider recommendations
- Working knowledge of cloud security concepts, least-privilege access, logging/monitoring, vulnerability remediation, encryption, secrets management, and secure configuration practices
- Ability to troubleshoot complex issues across cloud, network, identity, operating system, application dependency, and provider boundaries
- Familiarity with ITIL-aligned incident, problem, change, configuration, and service-management practices
- Strong technical documentation, communication, vendor-management, and cross-functional collaboration skills
- 18+ years of age
- Able to successfully complete a drug and background chec
- Must be currently authorized to work in the United States on a full-time basis; Quva is not able to sponsor applicants for work visas
Any of the Following Will Give You an Edge:
- Experience supporting regulated, pharmaceutical, healthcare, manufacturing, or other highly controlled environments
- Microsoft Certified: Azure Administrator Associate, Azure Solutions Architect Expert, or comparable Azure credentials
- AWS Certified Solutions Architect or SysOps Administrator certification
- Experience with Terraform and enterprise landing-zone or cloud-governance frameworks
- Experience with Microsoft Entra ID, Azure Monitor, Log Analytics, Azure Policy, Microsoft Defender for Cloud, AWS IAM, CloudWatch, CloudTrail, AWS Organizations, or comparable cloud-management services
Benefits of Working at Quva:
- Comprehensive health and wellness benefits including medical, dental and vision
- 401k retirement program with company match
- 17 paid days off plus 8 paid holidays per year
- National, industry-leading high growth company with future career advancement opportunities
About Quva:
Quva provides industry-leading health-system pharmacy services and solutions, including 503B sterile injectable outsourcing services and AI-based data software solutions that help power the business of pharmacy. Quva Pharmas multiple production facilities and industry-first dedicated remote distribution capabilities provide ready-to-administer sterile injectable medicines critical to patient care. Quva BrightStream partners with health systems to aggregate, normalize, and analyze large amounts of complex data across their sites of care, and through proprietary machine learning, transforms data into actionable insights supporting revenue optimization, script capture, inventory management, drug shortage control, and more. Quvas overall progressive and integrated platform helps health-systems transform pharmacy management to achieve greater value and deliver highest-quality patient care.
Quva is an equal opportunity employer and is committed to creating and maintaining a work environment that is free from all forms of discrimination and harassment. Quva's Equal Opportunity Policy prohibits harassment or discrimination due to age, ancestry, color, disability, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, race, religious creed, sex (including pregnancy, childbirth, breastfeeding, and any related medical conditions), sexual orientation, and any other characteristic or classification protected by applicable laws. All employment with Quva is at will.
California Consumer Privacy Act (CCPA) Notice for Applicants and Employees