Senior Software Engineer, AWS Cloud Infrastructure

Praxis Precision Medicines, Inc. is a clinical-stage biopharmaceutical company developing therapies for central nervous system disorders. The Senior Software Engineer will own and evolve AWS architecture, governance, security, platforms, and production operations while building reliable cloud systems with TypeScript and Python. The role also includes infrastructure automation, incident response, cross-functional partnership, and mentoring.

Responsibilities:

• Own and evolve AWS architecture for enterprise workloads, including multi-account foundations, landing zone / Control Tower patterns, networking, security baselines, and shared platforms
• Establish and continuously improve AWS governance, including organizational structure, SCPs, tagging, cost controls, compliance, audit readiness, and durable operational standards
• Design and operate identity and access across AWS, including IAM, IAM Identity Center, and Microsoft Entra ID integrations for SSO, federation, role mapping, access reviews, and least-privilege access
• Build, harden, and operate AWS platforms and full-stack services using TypeScript and Python, including compute, containers, serverless, data stores, messaging, and cloud automation as needed
• Drive operational excellence across AWS platforms and workloads by building effective monitoring, alerting, dashboards, SLOs/SLIs, runbooks, incident response practices, and durable fixes to recurring problems; participate in the on-call rotation and own incidents through resolution and learning
• Automate infrastructure and delivery through Infrastructure as Code—preferably Pulumi and/or SST—and CI/CD using Bitbucket Pipelines and/or GitHub Actions, with an emphasis on safe, incremental delivery and low blast radius
• Partner across engineering and IT to translate needs into secure, maintainable solutions, improve production readiness and operational practices, mentor other engineers, and use sound judgment to move fast without breaking things

Requirements:

• This position may be performed remotely, but requires the flexibility and willingness to travel as needed
• Senior-level software engineering experience, with substantial hands-on experience building and operating production systems on AWS
• Strong full-stack engineering capability in TypeScript and Python, including APIs, services, tooling, and cloud automation
• Deep experience with core AWS services used in enterprise environments, including IAM, Organizations, VPC, EC2, ECS/EKS or Lambda, S3, RDS/DynamoDB, CloudWatch, KMS, Config, and GuardDuty
• Proven ability to design and operate AWS governance at scale, including multi-account strategy, policy guardrails, access control, security standards, and operational controls
• Strong AWS networking fundamentals, including VPNs, peering, Transit Gateway, routing, DNS, and hybrid connectivity
• Experience with enterprise SSO; Microsoft Entra ID (Azure AD) federation into AWS is strongly preferred, including SAML/OIDC, IAM Identity Center, application and role mapping, and access lifecycle practices
• Experience working in regulated or audit-ready environments, with strong habits around change control, evidence and traceability, least privilege, and durable controls
• Demonstrated operational ownership: able to establish meaningful alerts and monitors, reduce noise, improve reliability, respond to incidents, and turn operational learnings into engineering improvements
• Strong Infrastructure as Code experience; Pulumi and/or SST strongly preferred. Terraform or AWS CDK experience is transferable and welcome
• Experience with Bitbucket Pipelines and/or GitHub Actions
• Proficient with modern AI coding and productivity tools, with the judgment to validate outputs, test changes, manage risk, and maintain production quality
• The physical and mental requirements of our roles include but are not limited to regular use of a computer, devices or other office equipment, clear communication, and occasional movement
• You'll need comfort with screen work, basic hand coordination, and focus
• Microsoft Entra ID (Azure AD) federation into AWS is strongly preferred
• Pulumi and/or SST strongly preferred