We anticipate the application window for this opening will close on - 24 Oct 2025

 

At Medtronic you can begin a life-long career of exploration and innovation, while helping champion healthcare access and equity for all. You’ll lead with purpose, breaking down barriers to innovation in a more connected, compassionate world.

A Day in the Life

Lead the architecture and ongoing optimization of a secure, compliant, and cost-efficient IoT platform for diabetes data on AWS. Own standards, paved paths, and reference implementations for custom telemetry ingestion, event-driven processing, and serverless data stores (DynamoDB, Amazon DocumentDB), exposing REST/HTTP APIs. Lead FinOps across teams to balance cost, performance, and reliability.

This position is an exciting opportunity to work with Medtronic's Diabetes business. Medtronic has announced its intention to separate the Diabetes division to promote future growth and innovation within the business and reallocate investments and resources across Medtronic, subject to applicable information and consultation requirements. This separation provides our team with a bold opportunity to unleash our potential, enabling us to operate with greater speed and agility. As a separate entity, we anticipate leveraging increased investments to drive meaningful innovation and enhance our impact on patient care.

Responsibilities may include the following and other duties may be assigned.

Developer enablement and governance

• Define and maintain reference architectures, patterns, and reusable IaC modules; run design reviews/ADRs and architecture office hours.

• Coach teams on data modeling, event-driven/serverless patterns, threat modeling, and performance testing; contribute reference code and runbooks.

Telemetry ingestion and streaming

• Architect secure HTTPS/TCP gateways behind ALB/NLB with mTLS, schema validation, and rate limits; use Kinesis/MSK for buffering/ordering.

• Implement backpressure, retries, idempotency, DLQs, and replay/redrive workflows. Standardize error handling and replay patterns; maintain strong observability (traces, metrics, logs) with CloudWatch and X-Ray.

Data modeling and storage

• DynamoDB: single-table design, well-chosen partition keys/GSIs, TTL, Streams-to-S3 for archival/analytics.

• DocumentDB: schema/index strategy, right-sizing/elastic clusters, retention and backup policies; tier cold data to S3 with lifecycle rules.

APIs and access

• APIs and access Provide secure, scalable REST/HTTP APIs via Amazon API, with expert-level AWS Lambda integrations (sync/async patterns, Lambda authorizers, cold-start mitigation, memory/CPU power tuning, and reserved/provisioned concurrency). Integrate OIDC with enterprise IdP; enforce fine‑grained, tenant‑aware authorization and audit trails; apply rate limits, caching, usage plans, and canary deployments for performance and cost control.

• Implement multi-tenant isolation, consent-based data access, PHI minimization, and comprehensive auditing.

Security, privacy, and compliance

• Least-privilege IAM, KMS encryption, private networking (VPC endpoints/PrivateLink), WAF/Shield, GuardDuty/Security Hub; align to HIPAA/HITRUST and audit readiness.

FinOps leadership

• Own unit economics (per million messages, per API call, per active device), forecasts, and variance analysis.

• Tagging/Cost Categories, CUR dashboards (Athena/QuickSight), Budgets/Anomaly Detection, show back/chargeback; service-level cost playbooks (DynamoDB capacity/table class, DocumentDB rightsizing, Lambda power tuning, log retention, NAT/data transfer reductions), and Savings Plans/RI strategy.

Minimum Qualifications

• Requires a Baccalaureate degree and minimum of 10 years of relevant experience OR Master's degree with a minimum of 8 years relevant experience OR PhD with 6 years relevant experience.

Preferred Qualifications

• AWS Solutions Architect – Professional; AWS Security Specialty; FinOps Certified Practitioner/Professional.