Position: IT Infrastructure & Cloud Engineer

Position Type: Full-time, permanent

Department: Information Technology

Location: Boulder, Colorado (onsite)

Experience: Bachelors in Information Technology, Computer Science, or related field required + 8-12 years relevant experience

Position Summary

Watchmaker Genomics is inviting applications for the full-time position of IT Infrastructure & Cloud Engineer, an onsite role in our Boulder, Colorado office. This position reports to the Director IT, Boulder site for day-to-day execution and service delivery, and is responsible for hands-on execution and maintenance of Watchmaker's network and Azure cloud infrastructure at the Boulder site.

This role works in close partnership with our Infrastructure & Cloud Lead based in Cape Town, South Africa, who sets global architecture standards and technical direction for the network and cloud environment. The Boulder-based Engineer is the primary hands-on resource for network engineering and Azure administration in the US, translating that global direction into local implementation and feeding site-level needs and constraints back into global design decisions. Windows and macOS endpoint management is owned day-to-day by our End User Compute Engineer; this role partners with that engineer on compliance standards and infrastructure-level policy, but is not expected to carry endpoint administration as a primary workload.

The successful candidate will thrive in a dynamic, fast-paced environment and contribute directly to our company culture and success. This position offers hands-on responsibility for Watchmaker's Boulder-site network and cloud infrastructure, close collaboration with a global IT team spanning the US and South Africa, and the opportunity to mentor service desk staff on complex infrastructure and network escalations as the team grows.

Core Responsibilities:

Azure Cloud & Identity Infrastructure: Build, administer, and maintain Watchmaker's Azure cloud infrastructure and services, and administer identity, authentication, and access management in Microsoft Entra — including conditional access, multi-factor authentication, and joiner/mover/leaver processes — in line with global architecture and security standards. [Critical requirement]
Network Infrastructure: Design, configure, maintain, and troubleshoot the site's network infrastructure, including switching, wireless, firewalls, VPNs, and load balancing. Advanced, hands-on network engineering is the other core pillar of this role. [Critical requirement]
System Design and Architecture: Implement complex IT infrastructure — servers, storage, networks, and cloud services — in line with Watchmaker's global architecture standards.
Security and Cyber Security Protection: Operate security systems across endpoints and cloud workloads; monitor, triage, and respond to security alerts; execute patch and vulnerability management using Microsoft Defender.
Endpoint Management (collaborative): Partner with the End User Compute Engineer on Windows and macOS endpoint compliance, configuration baselines, and application deployment standards. Day-to-day enrollment and device support is owned by the EUC Engineer, not this role.
System Administration and Maintenance: Execute or oversee the installation, configuration, and maintenance of servers, virtual environments, and enterprise applications, including Active Directory, DNS, DHCP, and other core services.
Performance Monitoring and Optimization: Monitor server, network, storage, and cloud performance; troubleshoot issues and optimize infrastructure for stability, security, and efficiency.
Automation and Scripting: Develop and use automation tools and scripts (e.g., PowerShell, Python, Bash) to streamline operations and system management.
Computer Systems Validation: Perform required Computer Systems Validation actions to support ISO 13485.
Documentation and Operational Discipline: Maintain accurate infrastructure documentation, work instructions, and knowledge base articles; execute all changes through formal change management; track and coordinate purchasing for infrastructure and network hardware.