Senior DevOps Engineer – Cloud Platform Engineering

About the role

UST is searching for a Senior DevOps Engineer to join our Cloud Platform Engineering team. This role requires an engineer who can translate complex business and technical requirements into scalable cloud-native solutions on AWS, own and evolve CI/CD pipelines, and collaborate with and enable high-performing software and DevSecOps engineers.

Responsibilities

• Translate complex business and technical requirements into scalable cloud-native solutions on AWS
• Own and evolve CI/CD pipelines using AWS CodePipeline and CodeBuild, embedding DevSecOps practices at every stage
• Design and maintain container build and deployment pipelines using Docker, ECR, ECS, and Fargate
• Define ECS task definitions, service configurations, and Fargate capacity strategies for production workloads
• Define and enforce cloud engineering standards, guardrails, and best practices across product teams
• Collaborate with and enable high-performing software and DevSecOps engineers — acting as the technical bridge across disciplines

Requirements

• AWS CDK – L2 / L3 Construct Authoring
• Built or maintained a reusable CDK construct library consumed by multiple teams
• Experience with nested stacks, stack drift detection, and change sets
• Experience with CI/CD – AWS CodePipeline & CodeBuild
• Integrates security scanning and automated gates into pipeline stages
• Experience with DevSecOps Practices
• Experience with IAM least-privilege design, secrets management, and policy-as-code
• Familiarity with SAST/DAST tools, container image scanning, and compliance guardrails
• Hands-on experience authoring and optimizing production Dockerfiles, including multi-stage builds and image size/security optimization
• Experience designing and operating Amazon ECS services and task definitions
• Experience managing Amazon ECR repositories, lifecycle policies, and image scanning, integrated into CI/CD pipelines

Qualifications

• Understands CDK pipeline patterns, bootstrapping, and cross-account deployments
• Understands the relationship between CDK synth output and underlying CloudFormation
• Experience with CloudFormation
• Experience reading, writing, and troubleshooting raw CloudFormation templates — not just via CDK abstraction
• Experience with Docker, ECS & Fargate
• Experience designing and operating Amazon ECS services and task definitions
• Experience managing Amazon ECR repositories, lifecycle policies, and image scanning, integrated into CI/CD pipelines

Skills

• AWS Certifications: AWS Solutions Architect – Professional, AWS DevOps Engineer – Professional, AWS Developer – Associate
• Core Technology Stack: Containers (Docker, Amazon ECS, Amazon ECR, AWS Fargate), Infrastructure as Code (AWS CDK – L2/L3 Constructs, CloudFormation), CI/CD & DevSecOps (AWS CodePipeline, CodeBuild, ECR)
• Practices: DevSecOps, CodePipeline, CodeBuild, ECR, GitHub, AWS Lambda, IAM, VPC, S3, RDS, CloudWatch, ECS/EKS

Pay

Compensation can differ depending on factors including but not limited to the specific office location, role, skill set, education, and level of experience.

Schedule

Full-time, regular employees accrue a minimum of 10 days of paid vacation per year, receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year), and are eligible for paid bereavement leave and jury duty.

Benefits

• 401(k) Retirement Plan with employer matching
• Medical, dental, and vision insurance
• Basic life insurance, accidental death and disability insurance, and short- and long-term disability benefits
• Health Savings Account (HSA) and Flexible Spending Account (FSA) for healthcare, dependent child care, and/or commuting expenses as allowable under IRS guidelines