Role description

Senior DevOps Engineer - Cloud Platform Engineering

Specialist II - DevOps Engineering

UST is searching for a Senior DevOps Engineer to join our Cloud Platform Engineering team. This is a role for an engineer who thinks in code first, infrastructure second - someone who can bridge complex business problems and cloud solutions, while enabling product teams to build faster through reusable frameworks, shared constructs, and DevSecOps best practices.

The opportunity:
• Translate complex business and technical requirements into scalable cloud-native solutions on AWS
• Own and evolve CI/CD pipelines using AWS CodePipeline and CodeBuild, embedding DevSecOps practices at every stage
• Design and maintain container build and deployment pipelines using Docker, ECR, ECS, and Fargate
• Define ECS task definitions, service configurations, and Fargate capacity strategies for production workloads
• Define and enforce cloud engineering standards, guardrails, and best practices across product teams
• Collaborate with and enable high-performing software and DevSecOps engineers - acting as the technical bridge across disciplines Required Qualifications (Must Have) AWS CDK - L2 / L3 Construct Authoring
• Has built or maintained a reusable CDK construct library consumed by multiple teams

This position description identifies the responsibilities and tasks typically associated with the performance of the position. Other relevant essential functions may be required.

What you need:
• Understands CDK pipeline patterns, bootstrapping, and cross-account deployments CloudFormation
• Able to read, write, and troubleshoot raw CloudFormation templates - not just via CDK abstraction
• Experience with nested stacks, stack drift detection, and change sets
• Understands the relationship between CDK synth output and underlying CloudFormation CI/CD - AWS CodePipeline & CodeBuild
• Experience with pipeline-as-code, artifact management via ECR, and multi-stage deployments
• Integrates security scanning and automated gates into pipeline stages DevSecOps Practices
• Embeds security controls across the SDLC - not treated as a separate phase
• Experience with IAM least-privilege design, secrets management, and policy-as-code
• Familiar with SAST/DAST tools, container image scanning, and compliance guardrails Docker, ECS & Fargate
• Hands-on experience authoring and optimizing production Dockerfiles, including multi-stage builds and image size/security optimization
• Experience designing and operating Amazon ECS services and task definitions
• Hands-on with AWS Fargate - capacity providers, sizing, and cost/performance trade-offs
• Experience managing Amazon ECR repositories, lifecycle policies, and image scanning, integrated into CI/CD pipelines
• Preferred Qualifications
• (Nice to Have) These skills will strengthen a candidate's profile but are not a hard requirement. AWS Certifications
• AWS Solutions Architect - Professional
• AWS DevOps Engineer - Professional
• AWS Developer - Associate Core Technology Stack Area Technologies Containers Docker, Amazon ECS, Amazon ECR, AWS Fargate (Must) Infrastructure as Code AWS CDK - L2/L3 Constructs (Must), CloudFormation (Must) CI/CD & DevSecOps CodePipeline, CodeBuild, ECR (Must), GitHub AWS Services Lambda, IAM, VPC, S3, RDS, CloudWatch, ECS/EKS Practices DevSecOps (Must), GitOps, Disaster Recovery, Operational Excellence

Compensation can differ depending on factors including but not limited to the specific office location, role, skill set, education, and level of experience. UST provides a reasonable range of compensation for roles that may be hired in various U.S. markets as set forth below.

Role Location: Virginia

Compensation Range: $122,000-$183,000

Benefits

Full-time, regular employees accrue a minimum of 10 days of paid vacation per year, receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year), 10 paid holidays, and are eligible for paid bereavement leave and jury duty. They are eligible to participate in the Company's 401(k) Retirement Plan with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance, as well as the following Company-paid Employee Only benefits: basic life insurance, accidental death and disability insurance, and short- and long-term disability benefits. Regular employees may purchase additional voluntary short-term disability benefits, and participate in a Health Savings Account (HSA) as well as a Flexible Spending Account (FSA) for healthcare, dependent child care, and/or commuting expenses as allowable under IRS guidelines. Benefits offerings vary in Puerto Rico.

Part-time employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company's 401(k) Retirement Plan with employer matching.

Full-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company's 401(k) program with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance.

Part-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year).

All US employees who work in a state or locality with more generous paid sick leave benefits than specified here will receive the benefit of those sick leave laws.

#UST

#CB