Role description

Platform Engineer - Healthcare Cloud Platform

Specialist I - DevOps Engineering

We are seeking a highly skilled Platform Engineer to design, build, secure, and operate enterprise-scale cloud platforms supporting healthcare applications and services.

The opportunity:
• Cloud Platform Engineering Design, implement, and maintain secure, scalable, and highly available AWS cloud platforms for healthcare applications.
• Build reusable platform services and self-service infrastructure capabilities.
• Implement AWS best practices for scalability, reliability, disaster recovery, and security.
• Support multi-account AWS environments with centralized governance and controls.
• Optimize cloud infrastructure performance and cost utilization.
• Site Reliability Engineering (SRE)
• Establish and monitor Service Level Indicators (SLIs), Service Level Objectives (SLOs), and Error Budgets.
• Improve system reliability, availability, and operational efficiency through automation.
• Develop runbooks and remediation automation to minimize operational toil. Perform capacity planning, resiliency testing, and disaster recovery exercises.
• Infrastructure as Code (IaC)
• Develop and maintain cloud infrastructure using Terraform and AWS CloudFormation.
• Create reusable infrastructure modules and platform templates.
• Implement GitOps and automation-driven infrastructure provisioning strategies.
• Identity & Access Management (IAM) Design and manage AWS IAM policies, roles, permission boundaries, and trust relationships. Implement least-privilege access controls and role-based access management.
• Manage AWS Identity Center (SSO), federated authentication, SAML, and OIDC integrations.
• Support healthcare regulatory compliance through secure identity governance and compliance audits.
• AWS Systems Management & Agents Manage AWS Systems Manager (SSM) and SSM Agent across enterprise environments.
• Configure and maintain CloudWatch Agents for infrastructure observability.
• Automate patching, software deployment, inventory management and configuration compliance.
• Implement operational automation using SSM Automation Documents and Runbooks.
• Audit, Compliance & Security Governance Implement and manage AWS CloudTrail for centralized logging and audit tracking.
• Configure AWS Config, Security Hub, GuardDuty, and Audit Manager for governance and compliance monitoring.
• Maintain audit trails supporting HIPAA, HITRUST, SOC 2, and healthcare compliance requirements.
• Collaborate with Security, Risk, and Compliance teams to address audit findings and remediation activities.
• Ensure encryption, data protection, and secure access controls for Protected Health Information (PHI).
• Monitoring & Observability Implement enterprise monitoring and observability solutions.
• Develop dashboards, s, and operational metrics.
• Monitor platform health, performance, availability, and security events.
• Utilize CloudWatch, Grafana, Prometheus, Datadog, Splunk, or ELK Stack.
• DevOps & Automation Design and maintain CI/CD pipelines for infrastructure and application deployment.
• Improve deployment reliability and reduce manual intervention through automation.

This position description identifies the responsibilities and tasks typically associated with the performance of the position. Other relevant essential functions may be required.

What you need:
• Bachelor's degree in Computer Science, Information Technology, Engineering, or related discipline.
• 7+ years of experience in Platform Engineering, Cloud Engineering, DevOps, or SRE environments.
• Expertise in Terraform and Infrastructure as Code implementation.
• Strong experience with IAM governance and cloud security controls.
• Hands-on experience with AWS Systems Manager (SSM), CloudWatch Agents, and operational automation.
• Experience implementing AWS CloudTrail and audit logging solutions.
• Experience supporting regulated healthcare applications handling PHI/PII data.
• Strong understanding of healthcare security, compliance, and governance requirements.
• Preferred Qualifications
• Experience with Healthcare Provider, Payer, EMR/EHR, Clinical, or Health Insurance platforms.
• Experience supporting HIPAA/HITECH-compliant cloud environments.
• Familiarity with FHIR, HL7, and healthcare interoperability frameworks.
• Exposure to HITRUST-certified environments.
• Preferred Certifications AWS Certified DevOps Engineer
• Professional AWS Certified Solutions Architect - Professional AWS Certified Security
• Specialty AWS Certified SysOps Administrator
• Key Competencies
• Healthcare Cloud Platforms and Platform modernization AWS Architecture & Operations Site Reliability Engineering Infrastructure Automation Security & IAM Governance Audit & Compliance Management

Compensation can differ depending on factors including but not limited to the specific office location, role, skill set, education, and level of experience. UST provides a reasonable range of compensation for roles that may be hired in various U.S. markets as set forth below.

Role Location: Remote-US

Compensation Range: $105,000-$158,000

Benefits

Full-time, regular employees accrue a minimum of 10 days of paid vacation per year, receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year), 10 paid holidays, and are eligible for paid bereavement leave and jury duty. They are eligible to participate in the Company's 401(k) Retirement Plan with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance, as well as the following Company-paid Employee Only benefits: basic life insurance, accidental death and disability insurance, and short- and long-term disability benefits. Regular employees may purchase additional voluntary short-term disability benefits, and participate in a Health Savings Account (HSA) as well as a Flexible Spending Account (FSA) for healthcare, dependent child care, and/or commuting expenses as allowable under IRS guidelines. Benefits offerings vary in Puerto Rico.

Part-time employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company's 401(k) Retirement Plan with employer matching.

Full-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company's 401(k) program with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance.

Part-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year).

All US employees who work in a state or locality with more generous paid sick leave benefits than specified here will receive the benefit of those sick leave laws.

#UST

#LI-Remote