AWS CDK DevOps Engineer

Role description

AWS CDK DevOps Engineer

Lead II - Software Engineering

Who We Are:

Born digital, UST transforms lives through the power of technology. We walk alongside our clients and partners, embedding innovation and agility into everything they do. We help them create transformative experiences and human-centered solutions for a better world.

UST is a mission-driven group of 29,000+ practical problem solvers and creative thinkers in more than 30 countries. Our entrepreneurial teams are empowered to innovate, act nimbly, and create a lasting and sustainable impact for our clients, their customers, and the communities in which we live.

With us, you'll create a boundless impact that transforms your career-and the lives of people across the world.

Visit us at UST.com.

You Are:

UST is searching for an AWS CDK DevOps Engineer to join our Cloud Platform Engineering team. This is a role for an engineer who thinks in code first, infrastructure second someone who can bridge complex business problems and cloud solutions, while enabling product teams to build faster through reusable frameworks, shared constructs, and DevSecOps best practices.

The opportunity:

* Design and build reusable CDK constructs and frameworks in TypeScript that product teams consume to provision AWS infrastructure consistently and securely

* Translate complex business and technical requirements into scalable cloud-native solutions on AWS

* Own and evolve CI/CD pipelines using AWS CodePipeline and CodeBuild, embedding DevSecOps practices at every stage

* Develop and maintain cloud-native applications using TypeScript, Python, and Java across Lambda, containerized, and serverless patterns

* Define and enforce cloud engineering standards, guardrails, and best practices across product teams

* Collaborate with and enable high-performing software and DevSecOps engineers acting as the technical bridge across disciplines

* Drive automated testing strategies for both application code and infrastructure as code

This position description identifies the responsibilities and tasks typically associated with the performance of the position. Other relevant essential functions may be required.

What you need:

* Required Qualifications (Must Have)

* TypeScript - Application / OOP Level

* 5+ years writing TypeScript at application depth classes, interfaces, generics, design patterns

* Demonstrates OOP principles; can build maintainable, testable TypeScript codebases

* TypeScript used for application logic, not just infrastructure scripting

* AWS CDK - L2 / L3 Construct Authoring

* Hands-on experience authoring custom L2 and L3 CDK constructs from scratch

* Has built or maintained a reusable CDK construct library consumed by multiple teams

* Understands CDK pipeline patterns, bootstrapping, and cross-account deployments

* CloudFormation

* Able to read, write, and troubleshoot raw CloudFormation templates not just via CDK abstraction

* Experience with nested stacks, stack drift detection, and change sets

* Understands the relationship between CDK synth output and underlying CloudFormation

* CI/CD - AWS CodePipeline & CodeBuild

* Designed and implemented production CI/CD pipelines using CodePipeline and CodeBuild

* Experience with pipeline-as-code, artifact management via ECR, and multi-stage deployments

* Integrates security scanning and automated gates into pipeline stages

* DevSecOps Practices

* Embeds security controls across the SDLC not treated as a separate phase

* Experience with IAM least-privilege design, secrets management, and policy-as-code

* Familiar with SAST/DAST tools, container image scanning, and compliance guardrails

* Preferred Qualifications (Nice to Have)

* These skills will strengthen a candidate's profile but are not a hard requirement.

* Additional Languages: Python & Java

* Production experience with Python for Lambda functions, automation, or data pipelines

* Java experience in cloud-native or microservices contexts

* AWS Certifications

* AWS Solutions Architect - Professional

* AWS DevOps Engineer - Professional

* AWS Developer - Associate

* Automated Testing - Infrastructure & Application

* Experience with Jest and the CDK Assertions Library for unit testing infrastructure code

* Has implemented test strategies covering both app code and IaC in a single pipeline

* Platform Engineering & Developer Experience

* Has published internal npm packages or maintained shared infrastructure libraries

* Experience building developer tooling, CLIs, or internal platforms for engineering teams

* Worked in a monorepo where application and infrastructure code coexist

* Core Technology Stack

* Area

* Technologies

* Languages

* TypeScript (Must), Python (Nice), Java (Nice)

* Infrastructure as Code

* AWS CDK - L2/L3 Constructs (Must), CloudFormation (Must)

* CI/CD & DevSecOps

* CodePipeline, CodeBuild, ECR (Must), GitHub Actions (Nice)

* AWS Services

* Lambda, IAM, VPC, S3, RDS, CloudWatch, ECS/EKS

* Testing

* Jest, CDK Assertions Library (Nice)

* Practices

* DevSecOps (Must), GitOps, Disaster Recovery, Operational Excellence

Compensation can differ depending on factors including but not limited to the specific office location, role, skill set, education, and level of experience. UST provides a reasonable range of compensation for roles that may be hired in various U.S. markets as set forth below.

Role Location: Remote-US

Compensation Range: $82,000-$123,000

Benefits

Full-time, regular employees accrue a minimum of 10 days of paid vacation per year, receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year), 10 paid holidays, and are eligible for paid bereavement leave and jury duty. They are eligible to participate in the Company's 401(k) Retirement Plan with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance, as well as the following Company-paid Employee Only benefits: basic life insurance, accidental death and disability insurance, and short- and long-term disability benefits. Regular employees may purchase additional voluntary short-term disability benefits, and participate in a Health Savings Account (HSA) as well as a Flexible Spending Account (FSA) for healthcare, dependent child care, and/or commuting expenses as allowable under IRS guidelines. Benefits offerings vary in Puerto Rico.

Part-time employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company's 401(k) Retirement Plan with employer matching.

Full-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company's 401(k) program with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance.

Part-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year).

All US employees who work in a state or locality with more generous paid sick leave benefits than specified here will receive the benefit of those sick leave laws.

What we believe:

We proudly embrace the values that have shaped UST since day one. We build our culture of Humility, Humanity, and Integrity. These values inspire us to nurture a people-first, human centric culture that fosters diversity, prioritizes sustainable solutions, and keeps our people and clients at the forefront of all decisions.

Humility:

We will listen, learn, be empathetic and help selflessly in our interactions with everyone.

Humanity:

Through business, we will better the lives of those less fortunate than ourselves.

Integrity:

We honor our commitments and act with responsibility in all our relationships.

Equal Employment Opportunity Statement

UST is an Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other applicable characteristics protected by law. We will consider qualified applicants with arrest or conviction records in accordance with state and local laws and "fair chance" ordinances.

UST reserves the right to periodically redefine your roles and responsibilities based on the requirements of the organization and/or your performance.

#UST

#CB

#LI-IS1

#LI-Remote

Skills

aws,typescript,aws cdk,iam,devsecops,cloudformation,aws codepipeline,aws codebuild,containerization,vpc,s3,rds

Benefits
Compensation range: $ 82,000.00 to 123,000.00 per year