Platform Engineer - Healthcare Cloud Platform

UST is a mission-driven technology company that creates innovative, human-centered solutions for clients and partners worldwide. UST is seeking a Platform Engineer to design, secure, operate, and automate scalable AWS cloud platforms supporting regulated healthcare applications, with a focus on reliability, infrastructure as code, identity governance, compliance, observability, and CI/CD.

Responsibilities:

• Cloud Platform Engineering Design, implement, and maintain secure, scalable, and highly available AWS cloud platforms for healthcare applications
• Build reusable platform services and self-service infrastructure capabilities
• Implement AWS best practices for scalability, reliability, disaster recovery, and security
• Support multi-account AWS environments with centralized governance and controls
• Optimize cloud infrastructure performance and cost utilization
• Establish and monitor Service Level Indicators (SLIs), Service Level Objectives (SLOs), and Error Budgets
• Improve system reliability, availability, and operational efficiency through automation
• Develop runbooks and remediation automation to minimize operational toil. Perform capacity planning, resiliency testing, and disaster recovery exercises
• Develop and maintain cloud infrastructure using Terraform and AWS CloudFormation
• Create reusable infrastructure modules and platform templates
• Implement GitOps and automation-driven infrastructure provisioning strategies
• Design and manage AWS IAM policies, roles, permission boundaries, and trust relationships. Implement least-privilege access controls and role-based access management
• Manage AWS Identity Center (SSO), federated authentication, SAML, and OIDC integrations
• Support healthcare regulatory compliance through secure identity governance and compliance audits
• Manage AWS Systems Manager (SSM) and SSM Agent across enterprise environments
• Configure and maintain CloudWatch Agents for infrastructure observability
• Automate patching, software deployment, inventory management and configuration compliance
• Implement operational automation using SSM Automation Documents and Runbooks
• Implement and manage AWS CloudTrail for centralized logging and audit tracking
• Configure AWS Config, Security Hub, GuardDuty, and Audit Manager for governance and compliance monitoring
• Maintain audit trails supporting HIPAA, HITRUST, SOC 2, and healthcare compliance requirements
• Collaborate with Security, Risk, and Compliance teams to address audit findings and remediation activities
• Ensure encryption, data protection, and secure access controls for Protected Health Information (PHI)
• Implement enterprise monitoring and observability solutions
• Develop dashboards, s, and operational metrics
• Monitor platform health, performance, availability, and security events
• Utilize CloudWatch, Grafana, Prometheus, Datadog, Splunk, or ELK Stack
• Design and maintain CI/CD pipelines for infrastructure and application deployment
• Improve deployment reliability and reduce manual intervention through automation

Requirements:

• Bachelor's degree in Computer Science, Information Technology, Engineering, or related discipline
• 7+ years of experience in Platform Engineering, Cloud Engineering, DevOps, or SRE environments
• Expertise in Terraform and Infrastructure as Code implementation
• Strong experience with IAM governance and cloud security controls
• Hands-on experience with AWS Systems Manager (SSM), CloudWatch Agents, and operational automation
• Experience implementing AWS CloudTrail and audit logging solutions
• Experience supporting regulated healthcare applications handling PHI/PII data
• Strong understanding of healthcare security, compliance, and governance requirements
• Experience with Healthcare Provider, Payer, EMR/EHR, Clinical, or Health Insurance platforms
• Experience supporting HIPAA/HITECH-compliant cloud environments
• Familiarity with FHIR, HL7, and healthcare interoperability frameworks
• Exposure to HITRUST-certified environments
• AWS Certified DevOps Engineer
• Professional AWS Certified Solutions Architect - Professional
• AWS Certified Security
• Specialty AWS Certified SysOps Administrator