Job Description:

Position Overview

We are looking for a highly skilled Infrastructure Engineer with strong expertise in AWS Cloud Infrastructure, Platform Engineering, DevOps, Cloud Security, and Infrastructure Automation. The ideal candidate will be responsible for designing, implementing, securing, and optimizing highly available, scalable, and cloud-native infrastructure on AWS.

This role will play a key part in building secure enterprise platforms supporting modern cloud applications, containerized workloads, and next-generation AI/GenAI services powered by Amazon Bedrock and AWS AgentCore. You will collaborate closely with Platform Engineering, DevOps, Security, Architecture, and Application teams to deliver resilient, compliant, and automated cloud environments aligned with enterprise standards.

Key Responsibilities 1. AWS Cloud Infrastructure & Networking

- Design, implement, and manage scalable AWS infrastructure following Well-Architected Framework best practices.
- Configure and maintain AWS networking services including:

- Amazon VPC
- Public & Private Subnets
- Route Tables
- Security Groups
- Network ACLs
- Internet Gateway
- NAT Gateway
- AWS Transit Gateway
- VPC Endpoints / AWS PrivateLink
- Amazon Route 53
- Application & Network Load Balancers (ALB/NLB)
- AWS WAF
- Amazon CloudFront
- Build highly available, fault-tolerant, and disaster recovery-ready cloud environments.
- Optimize network performance, security, and connectivity across multi-account AWS environments.

2. Infrastructure as Code (IaC) & Automation
- Develop reusable Infrastructure-as-Code modules using:

- Terraform
- AWS CDK
- AWS CloudFormation
- Automate infrastructure provisioning and lifecycle management.
- Implement infrastructure versioning, modularization, and reusable deployment patterns.
- Enforce governance through Policy-as-Code and automated compliance validation.

3. Platform Engineering & Container Services
- Deploy and manage cloud-native applications using:

- Kubernetes
- Amazon EKS
- Amazon ECS/Fargate
- Docker
- Build scalable and secure container platforms.
- Support application modernization initiatives and cloud-native platform adoption.
- Improve platform reliability, scalability, and operational efficiency.

4. AI / GenAI Infrastructure
- Provision and manage secure infrastructure supporting:

- Amazon Bedrock
- AWS AgentCore
- Design secure networking and access controls for AI workloads.
- Implement monitoring, logging,



and operational controls for AI platform services.
- Collaborate with AI engineering teams to deliver scalable GenAI infrastructure.

5. Cloud Security & Compliance
- Design and implement AWS cloud security best practices.
- Configure and manage:

- AWS IAM
- AWS KMS
- AWS Secrets Manager
- Implement enterprise-grade security controls including:

- Mutual TLS (mTLS)
- OAuth 2.0 / OpenID Connect (OIDC)
- API Security
- Rate Limiting
- PHI Data Protection & Tokenization
- Ensure cloud infrastructure complies with organizational security standards and regulatory requirements.

6. Observability & Reliability Engineering
- Implement enterprise observability using:

- Amazon CloudWatch
- OpenTelemetry
- Develop dashboards, s, and operational runbooks.
- Perform production troubleshooting, root cause analysis (RCA), and incident remediation.
- Improve platform reliability through proactive monitoring and automation.

7. FinOps & Cloud Cost Optimization
- Monitor cloud resource utilization and infrastructure spend.
- Recommend and implement cost optimization strategies.
- Support cloud budgeting, forecasting, and governance initiatives.
- Optimize compute, storage, networking, and managed service costs without compromising performance.

8. DevOps & Collaboration
- Maintain Infrastructure-as-Code repositories using Git/GitHub.
- Integrate infrastructure deployments into CI/CD pipelines.
- Collaborate with Security, DevOps, SRE, Platform Engineering, and Application teams to deliver secure and automated cloud solutions.
- Promote DevSecOps best practices across engineering teams.

Required Technical Skills

AWS Cloud Services

- Amazon VPC
- Route 53
- Transit Gateway
- AWS PrivateLink
- ALB / NLB
- AWS WAF
- CloudFront
- IAM
- AWS KMS
- AWS Secrets Manager
- Amazon Bedrock
- AWS AgentCore

Infrastructure as Code
- Terraform
- AWS CDK
- AWS CloudFormation

Containers & Platform Engineering
- Kubernetes
- Amazon EKS
- Amazon ECS/Fargate
- Docker

Monitoring & Observability
- Amazon CloudWatch
- OpenTelemetry

Security
- IAM
- mTLS
- OAuth 2.0 / OIDC
- API Security
- Rate Limiting




- PHI Tokenization
- Encryption & Key Management

DevOps
- Git
- GitHub
- CI/CD Pipelines
- Infrastructure Automation

Cloud Operations
- Incident Management
- Root Cause Analysis
- Reliability Engineering
- Disaster Recovery
- High Availability
- FinOps / Cloud Cost Optimization

Preferred Qualifications

- Experience supporting Healthcare, Life Sciences, or other regulated industries.
- Good understanding of HIPAA, HITRUST, and cloud compliance frameworks.
- Hands-on experience with Amazon Bedrock, GenAI, and AI platform infrastructure.
- Exposure to Platform Engineering, Site Reliability Engineering (SRE), and DevSecOps practices.
- Experience implementing Policy-as-Code, cloud governance, and security automation.
- AWS certifications such as AWS Certified Solutions Architect – Associate/Professional, AWS Certified Security – Specialty, or AWS Certified DevOps Engineer – Qualified are highly desirable.

Required Experience

- 5–9 years of hands-on experience in AWS Cloud Infrastructure, Platform Engineering, DevOps, Cloud Security, and Infrastructure Automation.
- Proven experience designing and managing enterprise-scale AWS environments using Infrastructure as Code.
- Strong knowledge of container orchestration, cloud networking, cloud security, monitoring, and automation.
- Experience supporting mission-critical, highly available production environments with a focus on security, scalability, and operational excellence.

Primary Skills

AWS • Terraform • Kubernetes • Amazon EKS • Docker • AWS Networking • IAM • Cloud Security • CloudFormation • AWS CDK • CloudWatch • OpenTelemetry • Git • CI/CD • FinOps • Amazon Bedrock • AgentCore • DevSecOps • Platform Engineering • SRE

Skills:

Infrastructure as Code, AWS, Kubernetes, Amazon Bedrock

About Company:

UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world’s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients’ organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact—touching billions of lives in the process.

📌 AWS Cloud Engineer with Gen AI (Thiruvananthapuram)
🏢 UST
📍 Thiruvananthapuram