Lead AWS Platform Engineer

UST; Chicago (IL); Hybrid; USD 105,000 - 158,000; Full time

Benefits offered by this job

401(k) with employer matching

Medical, dental, and vision insurance

Health Savings Account (HSA)

Flexible Spending Account (FSA)

Disability benefits

Job summary

UST is seeking an experienced Lead AWS Platform Engineer to design, build, secure, and manage enterprise-scale AWS cloud platforms. The role focuses on architecture, security, and automation across multi-account environments.

You will lead engineering teams, drive best practices, and collaborate with Security, Architecture, and Development groups to deliver scalable cloud solutions.

Qualifications

• 6 to 7 years of IT infrastructure/platform engineering experience.
• 5+ years of hands-on AWS engineering experience in enterprise environments.
• Strong expertise in AWS networking, security, and infrastructure services.
• Extensive experience with Infrastructure as Code (Terraform preferred).
• Experience managing multi-account AWS environments using AWS Organizations and Control Tower.
• Experience with container platforms such as EKS and Docker.
• Hands-on experience implementing cloud security frameworks and controls.

Responsibilities

• Lead design, build, and manage enterprise AWS cloud platforms.
• Define and implement cloud platform standards, reusable patterns, and best practices.
• Lead cloud adoption, migration, and modernization initiatives.
• Establish highly available, scalable, and resilient cloud architectures.
• Develop Infrastructure as Code (IaC) solutions using Terraform, CloudFormation, or AWS CDK.
• Build automated provisioning frameworks for AWS resources.
• Create reusable infrastructure modules and blueprints.
• Automate environment creation, configuration management, and deployment processes.
• Implement CI/CD pipelines supporting infrastructure deployments.
• Design and implement cloud security controls aligned with enterprise and regulatory requirements.
• Manage IAM roles, policies, permission boundaries, and least-privilege access models.
• Design hybrid cloud and multi-region connectivity solutions.
• Troubleshoot complex networking and connectivity issues.
• Provide technical leadership and mentoring to cloud engineers.

Skills

Cloud engineering

Security awareness

Networking design

IaC expertise

Multi-account governance

Tools

Terraform

AWS CloudFormation

AWS CDK

Ansible

GitHub Actions

Python

Shell

PowerShell

Job description

Lead AWS Platform Engineer

The Role

UST is searching for an experienced Lead AWS Platform Engineer to design, build, secure, and manage enterprise-scale AWS cloud platforms.

What You'll Do

• AWS Platform Engineering
• Design, develop, and maintain enterprise AWS cloud platforms
• Define and implement cloud platform standards, reusable patterns, and best practices
• Lead cloud adoption, migration, and modernization initiatives
• Establish highly available, scalable, and resilient cloud architectures
• Infrastructure Provisioning & Automation
• Develop Infrastructure as Code (IaC) solutions using Terraform, CloudFormation, or AWS CDK
• Build automated provisioning frameworks for AWS resources
• Create reusable infrastructure modules and blueprints
• Automate environment creation, configuration management, and deployment processes
• Implement CI/CD pipelines supporting infrastructure deployments
• Security & Governance
• Design and implement cloud security controls aligned with enterprise and regulatory requirements
• Manage IAM roles, policies, permission boundaries, and least-privilege access models
• Implement AWS security services including:
• AWS Security Hub
• GuardDuty
• AWS Config
• IAM Identity Center (SSO)
• WAF
• Shield
• KMS
• Secrets Manager
• Lead security assessments, vulnerability remediation, and compliance initiatives
• Develop cloud governance standards, policies, and guardrails
• Networking
• Design and manage AWS networking architectures across multi-account environments
• Implement and support:
• VPCs
• Transit Gateway
• VPN
• Direct Connect
• Route 53
• Network Firewall
• Security Groups
• NACLs
• Load Balancers (ALB/NLB)
• Design hybrid cloud and multi-region connectivity solutions
• Troubleshoot complex networking and connectivity issues
• Monitoring & Reliability
• Implement observability and monitoring solutions using:
• CloudWatch
• CloudTrail
• AWS X-Ray
• Prometheus
• Grafana
• Establish operational excellence practices
• Support incident management, root cause analysis, and performance optimization
• Leadership & Collaboration
• Provide technical leadership and mentoring to cloud engineers
• Partner with Security, Architecture, Infrastructure, and Development teams
• Participate in architecture reviews and cloud governance forums
• Drive platform engineering best practices across the organization

This position description identifies the responsibilities and tasks typically associated with the performance of the position. Other relevant essential functions may be required.

What You Need

• 6 to 7 years of IT infrastructure/platform engineering experience
• 5+ years of hands-on AWS engineering experience in enterprise environments
• Strong expertise in AWS networking, security, and infrastructure services
• Extensive experience with Infrastructure as Code (Terraform preferred)
• Experience managing multi-account AWS environments using AWS Organizations and Control Tower
• Experience with container platforms such as EKS and Docker
• Hands-on experience implementing cloud security frameworks and controls
• Technical Skills
• AWS Services
• EC2, S3, EBS, EFS
• VPC, Transit Gateway, Route 53
• IAM, KMS, Secrets Manager
• Organizations, Control Tower
• CloudWatch, CloudTrail
• Security Hub, GuardDuty, Config
• ALB, NLB, WAF, Shield
• EKS, ECS
• Lambda
• Infrastructure & Automation
• Terraform
• AWS CloudFormation
• AWS CDK
• Ansible
• GitHub Actions
• Strong scripting and automation skills using Python, Shell, or PowerShell
• Networking
• TCP/IP
• DNS
• VPN
• Direct Connect
• BGP Routing
• Firewalls
• Load Balancing
• Hybrid Connectivity
• Security
• Identity & Access Management
• Encryption & Key Management
• Zero Trust Architecture
• Security Compliance
• Vulnerability Management
• Cloud Security Best Practices
• Preferred Certifications
• AWS Certified DevOps Engineer - Professional
• HashiCorp Terraform Associate

Location & Compensation

Compensation can differ depending on factors including but not limited to the specific office location, role, skill set, education, and level of experience. UST provides a reasonable range of compensation for roles that may be hired in various U.S. markets as set forth below.

Role Location: Hybrid - Illinois

Compensation Range:

$105,000-$158,000

Who We Are

Since 1999, UST has worked side by side with the world's best companies to make a powerful impact through transformation. Headquartered in the United States, UST is powered by technology, driven by AI, inspired by people, and led by our purpose, we partner with our clients from design to operation. Our AI-driven digital solutions, proprietary platforms, engineering, R&D, products, and innovation ecosystem turn core challenges into impactful, disruptive business outcomes. With deep industry knowledge and a future-ready mindset, we infuse expertise, innovation, and agility into our clients' organizations‑delivering measurable value and positive lasting change for them, their customers, and communities around the world. Together, with 30,000+ employees in 30+ countries, we build for boundless impact‑touching billions of lives in the process. Visit us at .

Benefits

Full-time, regular employees accrue a minimum of 10 days of paid vacation per year, receive 6 days of paid sick leave each year (pro‑rated for new hires throughout the year), 10 paid holidays, and are eligible for paid bereavement leave and jury duty. They are eligible to participate in the Company's 401(k) Retirement Plan with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance, as well as the following Company-paid Employee Only benefits: basic life insurance, accidental death and disability insurance, and short‑and long-term disability benefits. Regular employees may purchase additional voluntary short-term disability benefits, and participate in a Health Savings Account (HSA) as well as a Flexible Spending Account (FSA) for healthcare, dependent child care, and/or commuting expenses as allowable under IRS guidelines. Benefits offerings vary in Puerto Rico.

Part‑time employees receive 6 days of paid sick leave each year (pro‑rated for new hires throughout the year) and are eligible to participate in the Company's 401(k) Retirement Plan with employer matching.

Full‑time temporary employees receive 6 days of paid sick leave each year (pro‑rated for new hires throughout the year) and are eligible to participate in the Company's 401(k) program with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance.

Part‑time temporary employees receive 6 days of paid sick leave each year (pro‑rated for new hires throughout the year).

All US employees who work in a state or locality with more generous paid sick leave benefits than specified here will receive the benefit of those sick leave laws.

Equal Employment Opportunity Statement

UST is an Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other applicable characteristics protected by law. We will consider qualified applicants with arrest or conviction records in accordance with state and local laws and \"fair chance\" ordinances.

UST reserves the right to periodically redefine your roles and responsibilities based on the requirements of the organization and/or your performance.

#UST #CB #LI-VK5

Skills

1. AWS CloudFormation, Amazon CloudWatch, Amazon ECS, Infrastructure as Code, Amazon VPC, Amazon Route 53, AWS Secrets Manager, Platform Engineering, Observability, Web Application Firewall, Terraform

Benefits

Compensation range: $ 105,000.00 to 158,000.00 per year