Role description
Lead AWS Platform Engineer
The Role
UST is searching for an experienced Lead AWS Platform Engineer to design, build, secure, and manage enterprise-scale AWS cloud platforms.
What You'll Do
• AWS Platform Engineering
• Design, develop, and maintain enterprise AWS cloud platforms
• Define and implement cloud platform standards, reusable patterns, and best practices
• Lead cloud adoption, migration, and modernization initiatives
• Establish highly available, scalable, and resilient cloud architectures
• Infrastructure Provisioning & Automation
• Develop Infrastructure as Code (IaC) solutions using Terraform, CloudFormation, or AWS CDK
• Build automated provisioning frameworks for AWS resources
• Create reusable infrastructure modules and blueprints
• Automate environment creation, configuration management, and deployment processes
• Implement CI/CD pipelines supporting infrastructure deployments
• Security & Governance
• Design and implement cloud security controls aligned with enterprise and regulatory requirements
• Manage IAM roles, policies, permission boundaries, and least-privilege access models
• Implement AWS security services including:
• AWS Security Hub
• GuardDuty
• AWS Config
• IAM Identity Center (SSO)
• WAF
• Shield
• KMS
• Secrets Manager
• Lead security assessments, vulnerability remediation, and compliance initiatives
• Develop cloud governance standards, policies, and guardrails
• Networking
• Design and manage AWS networking architectures across multi-account environments
• Implement and support:
• VPCs
• Transit Gateway
• VPN
• Direct Connect
• Route 53
• Network Firewall
• Security Groups
• NACLs
• Load Balancers (ALB/NLB)
• Design hybrid cloud and multi-region connectivity solutions
• Troubleshoot complex networking and connectivity issues
• Monitoring & Reliability
• Implement observability and monitoring solutions using:
• CloudWatch
• CloudTrail
• AWS X-Ray
• Prometheus
• Grafana
• Establish operational excellence practices
• Support incident management, root cause analysis, and performance optimization
• Leadership & Collaboration
• Provide technical leadership and mentoring to cloud engineers
• Partner with Security, Architecture, Infrastructure, and Development teams
• Participate in architecture reviews and cloud governance forums
• Drive platform engineering best practices across the organization
This position description identifies the responsibilities and tasks typically associated with the performance of the position. Other relevant essential functions may be required.
What You Need
• 6 to 7 years of IT infrastructure/platform engineering experience
• 5+ years of hands-on AWS engineering experience in enterprise environments
• Strong expertise in AWS networking, security, and infrastructure services
• Extensive experience with Infrastructure as Code (Terraform preferred)
• Experience managing multi-account AWS environments using AWS Organizations and Control Tower
• Experience with container platforms such as EKS and Docker
• Hands-on experience implementing cloud security frameworks and controls
• Technical Skills
• AWS Services
• EC2, S3, EBS, EFS
• VPC, Transit Gateway, Route 53
• IAM, KMS, Secrets Manager
• Organizations, Control Tower
• CloudWatch, CloudTrail
• Security Hub, GuardDuty, Config
• ALB, NLB, WAF, Shield
• EKS, ECS
• Lambda
• Infrastructure & Automation
• Terraform
• AWS CloudFormation
• AWS CDK
• Ansible
• GitHub Actions
• Strong scripting and automation skills using Python, Shell, or PowerShell
• Networking
• TCP/IP
• DNS
• VPN
• Direct Connect
• BGP Routing
• Firewalls
• Load Balancing
• Hybrid Connectivity
• Security
• Identity & Access Management
• Encryption & Key Management
• Zero Trust Architecture
• Security Compliance
• Vulnerability Management
• Cloud Security Best Practices
• Preferred Certifications
• AWS Certified DevOps Engineer - Professional
• HashiCorp Terraform Associate
Location & Compensation
Compensation can differ depending on factors including but not limited to the specific office location, role, skill set, education, and level of experience. UST provides a reasonable range of compensation for roles that may be hired in various U.S. markets as set forth below.
Role Location: Hybrid - Illinois
Compensation Range: $105,000-$158,000
Benefits
Full-time, regular employees accrue a minimum of 10 days of paid vacation per year, receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year), 10 paid holidays, and are eligible for paid bereavement leave and jury duty. They are eligible to participate in the Company's 401(k) Retirement Plan with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance, as well as the following Company-paid Employee Only benefits: basic life insurance, accidental death and disability insurance, and short- and long-term disability benefits. Regular employees may purchase additional voluntary short-term disability benefits, and participate in a Health Savings Account (HSA) as well as a Flexible Spending Account (FSA) for healthcare, dependent child care, and/or commuting expenses as allowable under IRS guidelines. Benefits offerings vary in Puerto Rico.
Part-time employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company's 401(k) Retirement Plan with employer matching.
Full-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company's 401(k) program with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance.
Part-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year).
All US employees who work in a state or locality with more generous paid sick leave benefits than specified here will receive the benefit of those sick leave laws.
