Infrastructure Engineer

Role description

Infrastructure Engineer

Lead II - Cloud Infrastructure Services

Who We Are:

Born digital, UST transforms lives through the power of technology. We walk alongside our clients and partners, embedding innovation and agility into everything they do. We help them create transformative experiences and human-centered solutions for a better world.

UST is a mission-driven group of 29,000+ practical problem solvers and creative thinkers in more than 30 countries. Our entrepreneurial teams are empowered to innovate, act nimbly, and create a lasting and sustainable impact for our clients, their customers, and the communities in which we live.

With us, you'll create a boundless impact that transforms your career-and the lives of people across the world.

Visit us at UST.com.

You Are:

UST is searching for a highly skilled Infrastructure Engineer to design, implement, secure, and optimize cloud-native infrastructure on AWS.

The opportunity:

* Cloud Infrastructure & Networking

* Design, implement, and maintain AWS infrastructure following cloud architecture best practices.

* Build and manage networking components including: o VPCs o Subnets o Route Tables o Security Groups o Network ACLs o Internet & NAT Gateways o VPC Endpoints / AWS PrivateLink o Transit Gateway o Route 53 o Elastic Load Balancers (ALB/NLB) o AWS WAF o CloudFront

* Ensure high availability, fault tolerance, and disaster recovery capabilities across environments. Infrastructure as Code (IaC)

* Develop and maintain reusable infrastructure modules using: o Terraform o AWS CDK o AWS CloudFormation

* Automate provisioning, configuration management, and infrastructure lifecycle processes.

* Implement infrastructure governance and policy-as-code practices. Container & Platform Engineering

* Deploy and manage containerized workloads using: o Kubernetes o Amazon EKS o Amazon ECS/Fargate o Docker

* Implement scalable and secure container platforms.

* Support platform modernization and cloud-native application deployments. AI/GenAI Infrastructure

* Provision and manage infrastructure supporting: o Amazon Bedrock o AgentCore services o Secure AI application environments

* Implement networking, security, and monitoring controls for AI workloads. Security Engineering & Compliance

* Design and implement cloud security controls and best practices.

* Manage and secure: o IAM o KMS o AWS Secrets Manager

* Implement: o mTLS o OAuth2/OIDC o API security o Rate limiting o PHI tokenization and protection mechanisms Monitoring & Reliability Engineering

* Implement observability and monitoring solutions using: o Amazon CloudWatch o Open Telemetry

* Create dashboards, s, and operational runbooks.

* Conduct root cause analysis and drive remediation of production incidents. Cost Optimization (FinOps)

* Monitor cloud consumption and infrastructure costs.

* Recommend and implement cost optimization strategies.

* Support budgeting, forecasting, and cloud governance initiatives. Collaboration & DevOps Practices

* Maintain version-controlled infrastructure using Git and GitHub.

* Support CI/CD pipeline integration and deployment automation.

This position description identifies the responsibilities and tasks typically associated with the performance of the position. Other relevant essential functions may be required.

What you need :

* Preferred Skills

* Experience supporting healthcare or regulated industry environments.

* Knowledge of HIPAA and HITRUST control frameworks.

* Experience with AWS Bedrock and GenAI infrastructure patterns.

* Exposure to Platform Engineering or Site Reliability Engineering (SRE) practices.

* Familiarity with policy-as-code, infrastructure governance, and security automation.

* Technical Skills Matrix Cloud & AWS

* VPC, Transit Gateway, PrivateLink, Route 53, WAF, CloudFront

* ELB/ALB, IAM, KMS, Secrets Manager, Bedrock, AgentCore Containers & Orchestration

* Kubernetes

* Amazon EKS

* Amazon ECS/Fargate

* Docker Infrastructure as Code * Terraform * AWS CDK * CloudFormation Observability * CloudWatch * OpenTelemetry Security * mTLS, OAuth2/OIDC, Rate Limiting, PHI Tokenization, HIPAA, HITRUST Operations * Incident Response * Reliability Engineering * FinOps / Cost Optimization

Compensation can differ depending on factors including but not limited to the specific office location, role, skill set, education, and level of experience. UST provides a reasonable range of compensation for roles that may be hired in various U.S. markets as set forth below.

Role Location: Hybrid- Chicago, IL

Compensation Range : $75,000-$113,000

Benefits

Full-time, regular employees accrue a minimum of 10 days of paid vacation per year, receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year), 10 paid holidays, and are eligible for paid bereavement leave and jury duty. They are eligible to participate in the Company's 401(k) Retirement Plan with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance, as well as the following Company-paid Employee Only benefits: basic life insurance, accidental death and disability insurance, and short- and long-term disability benefits. Regular employees may purchase additional voluntary short-term disability benefits, and participate in a Health Savings Account (HSA) as well as a Flexible Spending Account (FSA) for healthcare, dependent child care, and/or commuting expenses as allowable under IRS guidelines. Benefits offerings vary in Puerto Rico.

Part-time employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company's 401(k) Retirement Plan with employer matching.

Full-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company's 401(k) program with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance.

Part-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year).

All US employees who work in a state or locality with more generous paid sick leave benefits than specified here will receive the benefit of those sick leave laws.

What we believe:

We proudly embrace the values that have shaped UST since day one. We build our culture of Humility, Humanity, and Integrity. These values inspire us to nurture a people-first, human centric culture that fosters diversity, prioritizes sustainable solutions, and keeps our people and clients at the forefront of all decisions.

Humility:

We will listen, learn, be empathetic and help selflessly in our interactions with everyone.

Humanity:

Through business, we will better the lives of those less fortunate than ourselves.

Integrity:

We honor our commitments and act with responsibility in all our relationships.

Equal Employment Opportunity Statement

UST is an Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other applicable characteristics protected by law. We will consider qualified applicants with arrest or conviction records in accordance with state and local laws and "fair chance" ordinances.

UST reserves the right to periodically redefine your roles and responsibilities based on the requirements of the organization and/or your performance.

#UST

#CB

Skills

AWS, HIPAA, Infrastructure as Code, Security Engineering

Benefits
Compensation range: $ 75,000.00 to 113,000.00 per year