AWS Cloud Engineer with Terraform & Networking

UST; Thiruvananthapuram; On-site; INR 2,200,000 - 3,600,000; Full time

Job summary

UST in India (Thiruvananthapuram) seeks an Infrastructure Engineer to design, implement, and secure scalable AWS-based infrastructure. You will build cloud-native platforms, manage container workloads, and support GenAI services with Bedrock and AgentCore.

Work with Platform Engineering, DevOps, Security, and Architecture teams to deliver compliant, automated environments. The role requires IaC, Kubernetes, cloud security, and FinOps experience to improve reliability and efficiency.

Qualifications

• 5–9 years of hands-on experience with AWS Cloud Infrastructure.
• Experience designing enterprise-scale AWS environments using IaC.
• Strong knowledge of container orchestration, cloud security, and automation.
• Experience supporting mission-critical production environments.

Responsibilities

• Design, implement, and manage scalable AWS infrastructure on AWS Well-Architected framework.
• Build and manage container platforms with Kubernetes, EKS, ECS/Fargate.
• Provision GenAI infrastructure including Bedrock and AgentCore, with secure networking.
• Implement security controls: IAM, KMS, Secrets Manager, mTLS, OAuth/OIDC.
• Automate provisioning with Terraform, CDK, CloudFormation and CI/CD integrations.
• Improve observability with CloudWatch and OpenTelemetry; create runbooks.

Skills

AWS

Terraform

Kubernetes

Amazon EKS

Docker

Cloud Security

Git

CI/CD

FinOps

Platform Engineering

SRE

Bedrock

AgentCore

Tools

GitHub Actions

AWS CDK

CloudFormation

OpenTelemetry

Job description

Role Description

Position Overview

We are looking for a highly skilled Infrastructure Engineer with strong expertise in AWS Cloud Infrastructure, Platform Engineering, DevOps, Cloud Security, and Infrastructure Automation. The ideal candidate will be responsible for designing, implementing, securing, and optimizing highly available, scalable, and cloud-native infrastructure on AWS.

This role will play a key part in building secure enterprise platforms supporting modern cloud applications, containerized workloads, and next-generation AI/GenAI services powered by Amazon Bedrock and AWS AgentCore. You will collaborate closely with Platform Engineering, DevOps, Security, Architecture, and Application teams to deliver resilient, compliant, and automated cloud environments aligned with enterprise standards.

Key Responsibilities

1. AWS Cloud Infrastructure & Networking

• Design, implement, and manage scalable AWS infrastructure following Well-Architected Framework best practices.
• Configure and maintain AWS networking services including:
• Amazon VPC
• Public & Private Subnets
• Route Tables
• Security Groups
• Network ACLs
• Internet Gateway
• NAT Gateway
• AWS Transit Gateway
• VPC Endpoints / AWS PrivateLink
• Amazon Route 53
• Application & Network Load Balancers (ALB/NLB)
• AWS WAF
• Amazon CloudFront
• Build highly available, fault-tolerant, and disaster recovery-ready cloud environments.
• Optimize network performance, security, and connectivity across multi-account AWS environments.

Infrastructure as Code & Automation

• Develop reusable Infrastructure-as-Code modules using:
• Terraform
• AWS CDK
• AWS CloudFormation
• Automate infrastructure provisioning and lifecycle management.
• Implement infrastructure versioning, modularization, and reusable deployment patterns.
• Enforce governance through Policy-as-Code and automated compliance validation.

Platform Engineering & Container Services

• Deploy and manage cloud-native applications using:
• Kubernetes
• Amazon EKS
• Amazon ECS/Fargate
• Docker
• Build scalable and secure container platforms.
• Support application modernization initiatives and cloud-native platform adoption.
• Improve platform reliability, scalability, and operational efficiency.

AI / GenAI Infrastructure

• Provision and manage secure infrastructure supporting:
• Amazon Bedrock
• AWS AgentCore
• Design secure networking and access controls for AI workloads.
• Implement monitoring, logging, and operational controls for AI platform services.
• Collaborate with AI engineering teams to deliver scalable GenAI infrastructure.

Cloud Security & Compliance

• Design and implement AWS cloud security best practices.
• Configure and manage:
• AWS IAM
• AWS KMS
• AWS Secrets Manager
• Implement enterprise-grade security controls including:
• Mutual TLS (mTLS)
• OAuth 2.0 / OpenID Connect (OIDC)
• API Security
• Rate Limiting
• PHI Data Protection & Tokenization
• Ensure cloud infrastructure complies with organizational security standards and regulatory requirements.

Observability & Reliability Engineering

• Implement enterprise observability using:
• Amazon CloudWatch
• OpenTelemetry
• Develop dashboards, s, and operational runbooks.
• Perform production troubleshooting, root cause analysis (RCA), and incident remediation.
• Improve platform reliability through proactive monitoring and automation.

FinOps & Cloud Cost Optimization

• Monitor cloud resource utilization and infrastructure spend.
• Recommend and implement cost optimization strategies.
• Support cloud budgeting, forecasting, and governance initiatives.
• Optimize compute, storage, networking, and managed service costs without compromising performance.

DevOps & Collaboration

• Maintain Infrastructure-as-Code repositories using Git/GitHub.
• Integrate infrastructure deployments into CI/CD pipelines.
• Collaborate with Security, DevOps, SRE, Platform Engineering, and Application teams to deliver secure and automated cloud solutions.
• Promote DevSecOps best practices across engineering teams.
  

Required Technical Skills

AWS Cloud Services

• Amazon VPC
• Route 53
• Transit Gateway
• AWS PrivateLink
• ALB / NLB
• AWS WAF
• CloudFront
• IAM
• AWS KMS
• AWS Secrets Manager
• Amazon Bedrock
• AWS AgentCore

Infrastructure as Code

• Terraform
• AWS CDK
• AWS CloudFormation

Containers & Platform Engineering

• Kubernetes
• Amazon EKS
• Amazon ECS/Fargate
• Docker

Monitoring & Observability

• Amazon CloudWatch
• OpenTelemetry

Security

• IAM
• mTLS
• OAuth 2.0 / OIDC
• API Security
• Rate Limiting
• PHI Tokenization
• Encryption & Key Management

DevOps

• Git
• GitHub
• CI/CD Pipelines
• Infrastructure Automation

Cloud Operations

• Incident Management
• Root Cause Analysis
• Reliability Engineering
• Disaster Recovery
• High Availability
• FinOps / Cloud Cost Optimization

Preferred Qualifications

• Experience supporting Healthcare, Life Sciences, or other regulated industries.
• Good understanding of HIPAA, HITRUST, and cloud compliance frameworks.
• Hands‑on experience with Amazon Bedrock, GenAI, and AI platform infrastructure.
• Exposure to Platform Engineering, Site Reliability Engineering (SRE), and DevSecOps practices.
• Experience implementing Policy-as-Code, cloud governance, and security automation.
• AWS certifications such as AWS Certified Solutions Architect – Associate/Professional, AWS Certified Security – Specialty, or AWS Certified DevOps Engineer – Professional are highly desirable.

Required Experience

• 5–9 years of hands‑on experience in AWS Cloud Infrastructure, Platform Engineering, DevOps, Cloud Security, and Infrastructure Automation.
• Proven experience designing and managing enterprise‑scale AWS environments using Infrastructure as Code.
• Strong knowledge of container orchestration, cloud networking, cloud security, monitoring, and automation.
• Experience supporting mission‑critical, highly available production environments with a focus on security, scalability, and operational excellence.

Primary Skills

AWS

• Terraform
• Kubernetes
• Amazon EKS
• Docker
• AWS Networking
• IAM
• Cloud Security
• CloudFormation
• AWS CDK
• CloudWatch
• OpenTelemetry
• Git
• CI/CD
• FinOps
• Amazon Bedrock
• AgentCore
• DevSecOps
• Platform Engineering
• SRE

Skills

Infrastructure as Code, AWS, Kubernetes, Amazon Bedrock