Role description

AWS Cloud Architect

Solution Architect II - Cloud Infrastructure Services

UST is searching for an AWS Cloud Architect to lead the architecture and execution of our on-premises to AWS migration. This role owns the end-to-end target-state design for a complex application landscape that includes Liferay, SiteCore, PingFederate, ETL jobs, and Angular/Node.js applications - and works hands-on with DevOps practices to get workloads safely into production on AWS.

The opportunity:
• Own the target-state AWS architecture for the on-premises to AWS migration across the application portfolio
• Assess existing on-prem applications - Liferay, SiteCore, PingFederate, ETL jobs, Angular/Node.js services - and define per-application migration strategy (rehost, replatform, refactor)
• Design AWS infrastructure and integration patterns for portal/CMS platforms (Liferay, SiteCore) and identity/SSO (PingFederate)
• Architect migration and re-platforming of ETL jobs onto AWS-native or AWS-compatible data processing services
• Define CI/CD pipelines and DevOps practices (build, test, deploy, containerization) for migrated applications
• Establish cloud engineering standards, guardrails, and reference architectures for teams to follow during migration
• Lead technical design reviews, migration runbooks, and cutover planning across application teams
• Partner with security and DevSecOps to ensure migrated applications meet compliance and security requirements
• Provide hands-on architectural guidance and troubleshooting support during build and cutover phases
• Define and implement the observability strategy for migrated applications using Dynatrace
• Design certificate management architecture using AWS Certificate Manager (ACM) for migrated applications and load balancers

This position description identifies the responsibilities and tasks typically associated with the performance of the position. Other relevant essential functions may be required.

What you need:
• (Must Have) AWS Cloud Architecture
• Extensive hands-on experience architecting and delivering solutions on AWS
• Experience leading on-premises to AWS migration projects, including migration strategy and target-state design
• Strong understanding of AWS core services - compute, networking, storage, security, and database Observability (Dynatrace)
• Hands-on experience implementing and configuring Dynatrace for application and infrastructure observability
• Experience defining monitoring, ing, and dashboarding strategy for migrated cloud workloads
• Comfortable using Dynatrace for root-cause analysis and performance troubleshooting during and after migration AWS Certificate Manager (ACM)
• Hands-on expertise provisioning and managing SSL/TLS certificates using AWS Certificate Manager
• Experience integrating ACM with CloudFront, load balancers (ALB/NLB), and API Gateway
• Understands certificate renewal automation, validation methods (DNS/email), and cross-account/cross-region certificate strategies DevOps
• Hands-on DevOps experience - CI/CD pipeline design, automation, and containerization (Docker)
• Experience embedding DevOps and DevSecOps practices into migration and deployment workflows
• Comfortable working across infrastructure as code, build pipelines, and deployment automation Application Stack Experience
• Experience with Liferay portal architecture, deployment, and integration
• Experience with SiteCore architecture and hosting on cloud infrastructure
• Experience with PingFederate for SSO/federated identity and integration with cloud applications
• Experience with ETL job design, migration, and orchestration
• Experience with Angular front-end and Node.js backend application architectures
• Preferred Qualifications (Nice to Have)
• These skills will strengthen a candidate's profile but are not a hard requirement. AWS Certifications
• AWS Certified Solutions Architect - Professional
• AWS Certified DevOps Engineer - Professional Additional Experience
• Familiarity with AWS Application Migration Service (MGN), AWS DMS, or AWS DataSync
• Experience with containerized deployments on ECS/EKS
• Exposure to hybrid connectivity (Direct Connect, Site-to-Site VPN) for phased migrations Core Technology Stack Area Technologies Migration Scope On-premises to AWS lift-and-shift / re-architecture migration Portal / CMS Liferay (Must), SiteCore (Must) Identity & Access PingFederate (Must) - SSO, SAML, OAuth/OIDC Data Processing ETL Jobs (Must) Application Stack Angular (Must), Node.js (Must) DevOps & CI/CD CodePipeline, CodeBuild, Docker, GitHub, Infrastructure as Code (CDK/CloudFormation) Compute & Networking EC2, ECS/EKS, VPC, ELB/ALB, Route 53 Storage & Database S3, RDS, EFS Security & IAM IAM, KMS, WAF, Secrets Manager, AWS Certificate Manager (ACM) (Must) Migration Tooling AWS Application Migration Service (MGN), AWS DMS, AWS DataSync Observability Dynatrace (Must) Monitoring & Ops CloudWatch, CloudTrail, Systems Manager

Compensation can differ depending on factors including but not limited to the specific office location, role, skill set, education, and level of experience. UST provides a reasonable range of compensation for roles that may be hired in various U.S. markets as set forth below.

Role Location: Remote-US

Compensation Range: $134,000-$201,000

Benefits

Full-time, regular employees accrue a minimum of 10 days of paid vacation per year, receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year), 10 paid holidays, and are eligible for paid bereavement leave and jury duty. They are eligible to participate in the Company's 401(k) Retirement Plan with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance, as well as the following Company-paid Employee Only benefits: basic life insurance, accidental death and disability insurance, and short- and long-term disability benefits. Regular employees may purchase additional voluntary short-term disability benefits, and participate in a Health Savings Account (HSA) as well as a Flexible Spending Account (FSA) for healthcare, dependent child care, and/or commuting expenses as allowable under IRS guidelines. Benefits offerings vary in Puerto Rico.

Part-time employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company's 401(k) Retirement Plan with employer matching.

Full-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company's 401(k) program with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance.

Part-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year).

All US employees who work in a state or locality with more generous paid sick leave benefits than specified here will receive the benefit of those sick leave laws.

#UST

#CB

#LI-IS1

#LI-Remote