Lead AWS Platform Engineer

Role description

Lead AWS Platform Engineer

Lead I
- Dev Ops Engineering

Born digital, UST transforms lives through the power of technology. We walk alongside our clients and partners, embedding innovation and agility into everything they do. We help them create transformative experiences and human-centered solutions for a better world.

UST is a mission-driven group of 29,000+ practical problem solvers and creative thinkers in more than 30 countries. Our entrepreneurial teams are empowered to innovate, act nimbly, and create a lasting and sustainable impact for our clients, their customers, and the communities in which we live.

With us, you'll create a boundless impact that transforms your career-and the lives of people across the world.

Visit us at

UST is searching for a Lead AWS Platform Engineer who will define and implement cloud platform standards, reusable patterns, and best practices.

• AWS Platform Engineering Design, develop, and maintain enterprise AWS cloud platforms.
• Lead cloud adoption, migration, and modernization initiatives.
• Establish highly available, scalable, and resilient cloud architectures.
• Infrastructure Provisioning & Automation Develop Infrastructure as Code (IaC) solutions using Terraform, Cloud Formation, or AWS CDK.
• Build automated provisioning frameworks for AWS resources.
• Create reusable infrastructure modules and blueprints.
• Automate environment creation, configuration management, and deployment processes. Implement CI/CD pipelines supporting infrastructure deployments.
• Security & Governance
• Design and implement cloud security controls aligned with enterprise and regulatory requirements.
• Manage IAM roles, policies, permission boundaries, and least-privilege access models. Implement AWS security services including: AWS Security Hub, Guard Duty, AWS Config, IAM Identity Center (SSO), WAF, Shield, KMS, Secrets Manager Lead security assessments, vulnerability remediation, and compliance initiatives. Develop cloud governance standards, policies, and guardrails.
• Networking Design and manage AWS networking architectures across multi-account environments. Implement and support: VPCs Transit Gateway VPN Direct Connect Route 53 Network Firewall Security Groups NACLs Load Balancers (ALB/NLB) Design hybrid cloud and multi-region connectivity solutions.
• Troubleshoot complex networking and connectivity issues.
• Monitoring & Reliability Implement observability and monitoring solutions using:
  Cloud Watch Cloud Trail AWS X-Ray Prometheus Grafana Establish operational excellence practices.
• Support incident management, root cause analysis, and performance optimization. Leadership &
• Collaboration Provide technical leadership and mentoring to cloud engineers.
• Partner with Security, Architecture, Infrastructure, and Development teams. Participate in architecture reviews and cloud governance forums.
• Drive platform engineering best practices across the organization.

This position description identifies the responsibilities and tasks typically associated with the performance of the position. Other relevant essential functions may be required.

• 6 to 7 years of IT infrastructure/platform engineering experience.
• 5+ years of hands-on AWS engineering experience in enterprise environments.
• Strong expertise in AWS networking, security, and infrastructure services.
• Extensive experience with Infrastructure as Code (Terraform preferred).
• Experience managing multi-account AWS environments using AWS Organizations and Control Tower.
• Strong scripting and automation skills using Python, Shell, or Power Shell.
• Experience with container platforms such as EKS and Docker.
• Hands-on experience implementing cloud security frameworks and controls
• Technical Skills AWS Services EC2, S3, EBS, EFS VPC, Transit Gateway, Route 53 IAM, KMS, Secrets Manager Organizations, Control Tower Cloud Watch, Cloud Trail Security Hub, Guard Duty, Config ALB, NLB, WAF, Shield EKS, ECS Lambda Infrastructure & Automation Terraform AWS Cloud Formation AWS CDK Ansible Git Hub Actions Networking TCP/IP DNS VPN Direct Connect BGP Routing Firewalls Load Balancing Hybrid Connectivity
• Security Identity & Access Management Encryption & Key Management
• Zero Trust Architecture Security Compliance Vulnerability Management Cloud Security Best Practices
• Preferred Certifications
• AWS Certified Dev Ops Engineer
  - Professional Hashi Corp Terraform Associate

Compensation can differ depending on factors including but not limited to the specific office location, role, skill set, education, and level of experience. UST provides a reasonable range of compensation for roles that may be hired in various U.S. markets as set forth below.

Role

Location:

Hybrid
- Ohio

Compensation Range
: $78,000-$117,000

Full-time, regular employees accrue a minimum of 10 days of paid vacation per year, receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year), 10 paid holidays, and are eligible for paid bereavement leave and jury duty. They are…