AWS DevSecOps / CDK Engineer

UST; Norfolk (VA); Remote; USD 105,000 - 158,000; Full time

Benefits offered by this job

401(k) with employer matching

Medical, dental, vision insurance

Paid vacation

Paid holidays

Job summary

UST is seeking an experienced AWS DevSecOps / CDK Engineer to design and maintain infrastructure-as-code and CI/CD foundations for multiple engineering teams. You will author reusable CDK constructs, support cross-account deployments, and implement secure, automated pipelines using CodePipeline, CodeBuild, and ECR.

You will embed security controls across the SDLC, including IAM least-privilege, secrets management, SAST/DAST, and container image scanning, enabling safe and repeatable deployments.

Qualifications

• Strong hands-on AWS CDK experience, including L2 and L3 construct authoring.
• Experience building or maintaining a reusable CDK construct library used by multiple teams.
• AWS CloudFormation experience, including raw template development and troubleshooting.
• Production CI experience with AWS CodePipeline and AWS CodeBuild, plus Amazon ECR for container and artifact management.
• Hands-on Harness experience for continuous deployment, including Blue/Green deployment and rollback strategies.
• DevSecOps experience covering IAM, secrets management, security scanning, and policy-as-code, plus cross-account and multi-environment AWS deployments.

Responsibilities

• Build and maintain reusable AWS CDK construct libraries, including L2 and L3 constructs, consumed by multiple engineering teams.
• Implement CDK pipeline patterns and AWS environment bootstrapping to support cross-account and multi-environment deployments.
• Read, write, and troubleshoot raw AWS CloudFormation templates, including nested stacks, stack drift detection, and change sets.
• Diagnose infrastructure deployment and stack failures, tracing issues from CDK synth output to the underlying CloudFormation templates.
• Design and implement production-grade CI/CD pipelines using AWS CodePipeline and AWS CodeBuild, with pipeline-as-code and multi-stage deployment patterns.
• Manage build artifacts and container images in Amazon ECR, and integrate security scanning and automated approval gates into pipelines.
• Configure and manage application deployments in Harness, including Blue/Green deployments and controlled rollback across environments and AWS accounts.
• Implement IAM least-privilege access models, manage application and infrastructure secrets securely, and maintain policy-as-code approaches.
• Integrate SAST, DAST, container image scanning, and compliance guardrails into CI/CD pipelines, and support GitOps, disaster recovery, and operational excellence practices.

Skills

AWS CDK

CloudFormation

Harness

Amazon ECR

DevSecOps

CodePipeline

Infrastructure as Code

VPC

IAM

Lambda

Docker

Tools

AWS CDK

AWS CloudFormation

Harness

Amazon ECR

Job description

AWS DevSecOps / CDK Engineer

The Role

UST is searching for an experienced AWS DevSecOps / CDK Engineer to build and maintain the infrastructure-as-code and continuous delivery foundations that multiple engineering teams depend on. You will author reusable AWS CDK L2 and L3 constructs, support cross-account and multi-environment deployments, and design CI/CD pipelines using AWS CodePipeline, CodeBuild, Amazon ECR, and Harness. You will embed security controls across the SDLC, from IAM least-privilege access and secrets management to SAST, DAST, and container image scanning. Success in this role means teams can deploy safely and repeatedly, using standardized patterns with controlled rollback.

What You’ll Do

• Build and maintain reusable AWS CDK construct libraries, including L2 and L3 constructs, consumed by multiple engineering teams.


• Implement CDK pipeline patterns and AWS environment bootstrapping to support cross-account and multi-environment deployments.


• Read, write, and troubleshoot raw AWS CloudFormation templates, including nested stacks, stack drift detection, and change sets.


• Diagnose infrastructure deployment and stack failures, tracing issues from CDK synth output to the underlying CloudFormation templates.


• Design and implement production-grade CI/CD pipelines using AWS CodePipeline and AWS CodeBuild, with pipeline-as-code and multi-stage deployment patterns.


• Manage build artifacts and container images in Amazon ECR, and integrate security scanning and automated approval gates into pipelines.


• Configure and manage application deployments in Harness, including Blue/Green deployments and controlled rollback across environments and AWS accounts.


• Implement IAM least-privilege access models, manage application and infrastructure secrets securely, and maintain policy-as-code approaches.


• Integrate SAST, DAST, container image scanning, and compliance guardrails into CI/CD pipelines, and support GitOps, disaster recovery, and operational excellence practices.

What You Need

Required

• Strong hands-on AWS CDK experience, including L2 and L3 construct authoring


• Experience building or maintaining a reusable CDK construct library used by multiple teams


• AWS CloudFormation experience, including raw template development and troubleshooting


• Production CI experience with AWS CodePipeline and AWS CodeBuild, plus Amazon ECR for container and artifact management


• Hands-on Harness experience for continuous deployment, including Blue/Green deployment and rollback strategies


• DevSecOps experience covering IAM, secrets management, security scanning, and policy-as-code, plus cross-account and multi-environment AWS deployments

Preferred

• Experience integrating SAST and DAST tools into CI/CD pipelines


• Familiarity with GitOps practices and disaster recovery planning


• Experience with compliance guardrails and policy-as-code tooling

Location & Compensation

Compensation can differ depending on factors including but not limited to the specific office location, role, skill set, education, and level of experience. UST provides a reasonable range of compensation for roles that may be hired in various U.S. markets as set forth below.

Role Location: Remote

Compensation Range: $105,000 - $158,000

Who We Are

Since 1999, UST has worked side by side with the world's best companies to make a powerful impact through transformation. Headquartered in the United States, UST is powered by technology, driven by AI, inspired by people, and led by our purpose, we partner with our clients from design to operation. Our AI-driven digital solutions, proprietary platforms, engineering, R&D, products, and innovation ecosystem turn core challenges into impactful, disruptive business outcomes. With deep industry knowledge and a future-ready mindset, we infuse expertise, innovation, and agility into our clients' organizations-delivering measurable value and positive lasting change for them, their customers, and communities around the world. Together, with 30,000+ employees in 30+ countries, we build for boundless impact-touching billions of lives in the process. Visit us at .

Benefits

Full-time, regular employees accrue a minimum of 10 days of paid vacation per year, receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year), 10 paid holidays, and are eligible for paid bereavement leave and jury duty. They are eligible to participate in the Company's 401(k) Retirement Plan with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance, as well as the following Company-paid Employee Only benefits: basic life insurance, accidental death and disability insurance, and short- and long-term disability benefits. Regular employees may purchase additional voluntary short-term disability benefits, and participate in a Health Savings Account (HSA) as well as a Flexible Spending Account (FSA) for healthcare, dependent child care, and/or commuting expenses as allowable under IRS guidelines. Benefits offerings vary in Puerto Rico.

Part-time employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company's 401(k) Retirement Plan with employer matching.

Full-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company's 401(k) program with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance.

Part-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year).

All US employees who work in a state or locality with more generous paid sick leave benefits than specified here will receive the benefit of those sick leave laws.

As part of our recruitment process, UST may use AI or automated tools to support activities such as application screening, scheduling, or interview assistance. All hiring decisions are made by our recruitment team. Where applicable law requires it, further notice will be provided separately.

Equal Employment Opportunity Statement

UST is an Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other applicable characteristics protected by law. We will consider qualified applicants with arrest or conviction records in accordance with state and local laws and \"fair chance\" ordinances.

UST reserves the right to periodically redefine your roles and responsibilities based on the requirements of the organization and/or your performance.

#UST

Skills

AWS CDK, AWS CloudFormation, Harness, Amazon ECR, DevSecOps, AWS CodePipeline, Infrastructure as Code, Amazon VPC, AWS IAM, AWS Lambda, Docker

Compensation range: $ 105,000.00 to 158,000.00 per year