# DevOps Infrastructure Engineer - RDT China Enterprise Technologies at Roche

Roche is hiring a DevOps Infrastructure Engineer - RDT China Enterprise Technologies in Shanghai, China. Level rates it Works on AI ●●●○; you can [apply on Roche](https://jobsbylevel.com/go/497cb62e-1037-43fd-9e12-e35ebca67185?utm_medium=ai-agent).

AI Level 3, AI centrality 65 out of 100. Shanghai.

## Details

- Company: [Roche](https://jobsbylevel.com/companies/roche)
- AI level: AI Level 3 (score 65 out of 100)
- Location: Shanghai
- Posted: August 7, 2026
- Apply: https://jobsbylevel.com/go/497cb62e-1037-43fd-9e12-e35ebca67185?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=devops-infrastructure-engineer-rdt-china-enterprise-technologies-at-roche-d5a528

## Prepare for this job

The job page lists 5 likely interview questions for this offer, with a CV checklist: https://jobsbylevel.com/jobs/devops-infrastructure-engineer-rdt-china-enterprise-technologies-at-roche-d5a528

## Description

At Roche you can show up as yourself, embraced for the unique qualities you bring. Our culture encourages personal expression, open dialogue, and genuine connections, where you are valued, accepted and respected for who you are, allowing you to thrive both personally and professionally. This is how we aim to prevent, stop and cure diseases and ensure everyone has access to healthcare today and for generations to come. Join Roche, where every voice matters. The Position Job Description As a DevOps Infrastructure Engineer at the SE7 level, you will be responsible for solving unusually complex business problems with innovative DevOps and cloud infrastructure solutions across the entire platform landscape . Operating with considerable independence, you will establish the technical direction for the entire lifecycle of our platforms—from inception and design through deployment, operations, security, and retirement. In this role, you will build a secure, self-service Internal Developer Platform (IDP) that abstracts away infrastructure complexity while enforcing rigorous compliance, cloud security AIOps, and proactive threat mitigation across both cloud-native environments and AI agent platforms. Key Responsibilities 1. Cloud Security Operations & AIOps Vulnerability & Patch Automation: Drive continuous monitoring of cloud server OS vulnerabilities and design fully automated OS patching pipelines/toolsets to rapidly mitigate risks across the infrastructure landscape. Hardened Image Lifecycle: Author and maintain gold-standard cloud server AMIs (OS) utilizing an Infrastructure-as-Code (IaC) approach (e.g., Terraform, Ansible, Packer) . Continuous Security Monitoring: Manage and optimize Cloud Security Hub and Security Center platforms. Take responsibility for landing zone security alert handling, triaging, and remediation. Endpoint & Key Security: Oversee the deployment and continuous maintenance of endpoint security agents (including Cortex XDR and Nessus agents), and optimize Cloud Key Management Services (KMS) for robust data encryption. AIOps & Security Assessments: Pioneer cloud security AIOps to predict, detect, and automatically remediate security anomalies. Lead comprehensive cloud platform security assessments and continuous refinement strategies. 2. DevOps Engineering & Adoption Secure Software Supply Chain: Lead the adoption, support, and integration of the DevOps toolchain across all automated CI/CD pipelines , spanning threat modeling, SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), SCA (Software Composition Analysis), and runtime security monitoring. Container & Orchestration Security: Lead Kubernetes cluster hardening, establishing fine-grained network policies, container runtime security, and secure configuration baselines. Centralized Secret Vaulting: Establish and enforce unified secret management protocols across all application environments using centralized secret and credential vaulting solutions. 3. AI Agent Security & Safeguards Agent IAM & Identity Management: Design and implement robust Identity and Access Management (IAM) frameworks specifically tailored for autonomous AI agents, including identity and secret management for agent plugins and external tools. Continuous Guardrails & Monitoring: Architect and maintain continuous agent guardrails and runtime monitoring systems to trace, evaluate, and restrict agent reasoning and actions within safe boundaries. Model & Database Safeguards: Ensure model artifact security and establish strict integration safeguards for databases, ADP, and Vector/Graph Databases (VectorDB) to prevent data exfiltration and unauthorized access. Active Defense & Hardening: Implement automated prompt red-teaming pipelines to proactively discover LLM vulnerabilities, and lead code execution sandbox hardening to run agent-generated code safely. 4. Platform Engineering & Excellence Platform Engineering: Lead automation tools design and

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/devops-infrastructure-engineer-rdt-china-enterprise-technologies-at-roche-d5a528

Source: https://jobsbylevel.com/jobs/devops-infrastructure-engineer-rdt-china-enterprise-technologies-at-roche-d5a528

## Cite this page

Level. https://jobsbylevel.com/jobs/devops-infrastructure-engineer-rdt-china-enterprise-technologies-at-roche-d5a528.

Get job alerts: https://jobsbylevel.com/newsletter