About Chemist4U Chemist4U is one of the UK’s largest online pharmacies, making medicines, expert advice, and everyday health essentials easier to access than ever. With a fast-growing, innovative team, we deliver trusted pharmacy care straight to our customers’ doors. Join us and be part of a company that’s transforming healthcare and making a real difference every day. Our purpose Making medication and care faster, simpler and safer so people stay well for longer. Our mission Empower everyone to take control of their health by providing world class technology and pharmacy services. Our values • Collaboration • Integrity • Positivity • Growth • Customer centricity We simplify processes and medication management by leveraging cutting-edge technology and empowering our team. Whether through seamless online services or expert support, we ensure reliable and hassle-free healthcare so our customers can focus on their well-being. About the role Reporting to: IT manager Job type: Permanent Salary: £55,000-£65,000 DOE Working Pattern & Hours: Monday-Friday, 37.5 hours per week Location: Hybrid/Flexible (Office located: London, SE1 or Lancashire, WN8) We are seeking an experienced Cloud Engineer to join our Infrastructure & IT Operations team. In this role, you will manage and evolve our AWS-based cloud environment, ensuring high availability, security, performance, and cost-efficiency across all cloud services. You will work closely with engineering, security, and operations teams to deliver scalable infrastructure solutions, as well as hardening, reviewing, and advising on cloud architecture, security, and operational excellence. Key Responsibilities: This role will take ownership of our AWS platform, ensuring it remains secure, reliable, well architected and cost effective as the business grows. You’ll be responsible for the following key areas: AWS Infrastructure Management • Own and maintain our AWS estate across multiple accounts, including VPCs, subnets, security groups, route tables, and network ACLs • Manage Application Load Balancers, target groups, and traffic routing for high availability • Administer CloudFront CDN distributions (with domain and WAF management in CloudFlare) • Provision, right-size, patch, and lifecycle EC2 instances and ECS workloads. Container Orchestration (ECS) • Manage Amazon ECS clusters (Fargate): cluster configuration, capacity providers, auto-scaling, and networking • Maintain ECR repositories and container build, scan, and promotion pipelines • Partner with engineering teams on task definitions, service configuration, and production troubleshooting; lead on platform-level incidents. Serverless Orchestration (ECS) • Engineering teams own the build of our serverless estate (Lambda, API Gateway, DynamoDB, EventBridge, SQS, SNS, Step Functions) using AWS CDK. Your role is to keep that estate healthy, secure, and well-architected • Review CDK and architectural designs; advise on Well-Architected patterns, security, scalability, and cost • Harden defaults and shared concerns: VPC connectivity for serverless workloads, IAM scoping, encryption, secrets handling, network egress • Monitor operational health and cost across the serverless estate and feed insights back to the engineering teams. Platform Standards & Guardrails • Define and maintain the guardrails that let engineering teams move fast safely: AWS Organizations and SCPs, AWS Config rules, IAM baselines, and shared IaC modules • Set and evolve our cloud standards - naming, tagging, account structure, network topology, deployment patterns. Security & Identity Management • Own AWS IAM end-to-end: policies, roles, groups, permission boundaries, and SSO integration • Enforce least-privilege access principles and conduct regular IAM audits • Implement and maintain cloud security measures, including encryption, key management (KMS), and security group policies • Monitor security events and work with the security team on incident response and remediation. Database Administration • Manage Amazon RDS and Aurora clusters supporting our services - provisioning, backups, replication, parameter tuning, and patching • Monitor database health, query performance, and storage utilisation, making optimisations as required • Support schema changes, migrations, and patching activities in coordination with engineering teams • Support DynamoDB operational concerns (capacity modes, indexes, backups) for serverless workloads, in partnership with the engineering teams who own the table designs. Infrastructure as Code (laC) • Own IaC for foundational and shared infrastructure (VPCs, ECS clusters, RDS, IAM baselines, networking, platform services) using Terraform and/or AWS CDK • Review and contribute to dev-authored CDK for services and serverless workloads — pull requests, design reviews, and pairing were useful • Build and maintain reusable IaC modules, patterns, and templates that engineering teams consume • Embed IaC into our CI/CD pipelines (GitHub Actions or equivalent). Server Maintenance & Patching • Manage the patching and updating of virtual Linux servers, ensuring compliance with security and operational standards • Maintain server baselines and apply OS-level hardening in line with CIS-aligned baselines and best practices • Maintain server baselines and apply OS-level hardening in line with CIS-aligned baselines and best practices. Cost Management & Optimisation & Observability • Continuously evaluate cost-to-performance ratios across EC2 instances, RDS, and other cloud services • Identify and implement cost-saving opportunities such as Reserved Instances, Savings Plans, and rightsizing • Produce regular cost and utilisation reports for leadership review • Build and maintain dashboards, logs, metrics, and alerting using CloudWatch and our wider observability tooling. Continuous Improvement • Proactively identify and recommend new AWS services, architectural improvements, or additional services that may be required to support business growth • Stay current with AWS releases and cloud industry trends, bringing relevant innovations to the team • Document infrastructure architecture, runbooks, and operational procedures. About You: The successful Cloud Engineer will need to possess the following skills and experience: a proactive, self motivated approach with the ability to take ownership and drive projects through from start to finish. They will demonstrate keen attention to detail, stay up to date with current best practices, and consistently deliver high quality outcomes. An effective communicator, they will be able to clearly articulate risks and rewards to stakeholders, enabling informed and confident decision making. Qualifications & Experience: To be successful for this position, you will need to demonstrate the following skills and experience: Required: • Minimum 5 years of hands-on experience in a Cloud Engineer, Cloud Administrator, or equivalent role • Strong expertise in AWS services, particularly ECS, EC2, VPC, IAM, RDS,API Gateway, Lambda, CloudFront and CloudWatch • Proven experience managing ECS in a production environment • Solid experience with Infrastructure as Code (Terraform, CloudFormation, or similar) • Proficiency in Linux system administration, including patching, hardening, and troubleshooting • Strong understanding of networking concepts: TCP/IP, DNS, HTTP/S, VPN, load balancing • Experience owning AWS IAM and implementing security best practices • Demonstrable experience with cloud cost analysis and optimisation strategies. Preferred: • Experience advising on or operating AWS Serverless and event-driven systems (Lambda, EventBridge, SQS, SNS, Step Functions, DynamoDB) • Experience defining cloud guardrails (AWS Organizations, SCPs, Config rules, shared IaC modules) • AWS certifications (e.g. Solutions Architect, SysOps Administrator, DevOps Engineer) • Familiarity with CI/CD pipelines and DevOps practices (Github Actions) • Experience with monitoring tools such as CloudWatch, Prometheus, or Grafana • Scripting skills in Python, Bash, or similar languages. Company Benefits Working with an NHS-focused organisation means doing work that truly matters, every day, you’ll help make a real, positive impact on the lives of patients across the UK and Ireland. And that’s just the start. We also offer: • Discounted gym membership • Funded training • Enhanced Maternity & Paternity • 30 days’ annual leave, including Christmas Day, Boxing Day, and New Year’s Day, with all other bank holidays flexible to take at your convenience • Health & Wellbeing benefits • Staff discount • Sick Pay Scheme • Blue light card membership is available • Free seasonal flu vaccination • Regular social events. We’d love to hear from you, so please apply as soon as possible. The role is open until Friday 22nd May 2026 but may close earlier if we receive a high number of applications. We are committed to ensuring an inclusive and accessible recruitment process. If you require any reasonable adjustments at any stage, such as support with your application, interview arrangements, or assessment, please let us know, and we will be happy to help. You can email [email protected] At Chemist4U (Innox Trading Ltd), we take your privacy seriously. Any personal data you provide during the application process will be used solely for assessing your suitability for the role, communicating with you, and completing necessary recruitment checks. We only share your information with internal hiring teams and trusted third-party partners involved in the recruitment process. Your data will be retained for up to 12 months, unless you ask us to delete it sooner or provide consent for us to keep it on file longer. For more information about how we handle candidate data or to exercise your rights, please contact [email protected]