Role description
Lead Platform Engineer – Healthcare Cloud Platform
Experience: 8–12 Years
Location: Hybrid
Position Overview
We are seeking a highly skilled Platform Engineer to design, build, secure, and operate enterprise-scale cloud platforms supporting healthcare applications and services.
The ideal candidate will have strong expertise in AWS Cloud, Site Reliability Engineering (SRE), Infrastructure as Code (IaC), Identity & Access Management (IAM), AWS Systems Manager (SSM), CloudTrail, and healthcare security and compliance.
The candidate will play a key role in ensuring platform reliability, scalability, security, compliance, and operational excellence while supporting healthcare workloads handling sensitive patient and clinical data.
Experience working in regulated environments such as HIPAA, HITRUST, GDPR, HITECH, or healthcare payer/provider platforms is highly desirable.
Key Responsibilities
1. Cloud Platform Engineering
- Design, implement, and maintain secure, scalable, and highly available AWS cloud platforms for healthcare applications.
- Build reusable platform services and self-service infrastructure capabilities.
- Implement AWS best practices for scalability, reliability, disaster recovery, and security.
- Support multi-account AWS environments with centralized governance and controls.
- Optimize cloud infrastructure performance and cost utilization.
2. Site Reliability Engineering (SRE)
- Establish and monitor Service Level Indicators (SLIs), Service Level Objectives (SLOs), and Error Budgets.
- Improve system reliability, availability, and operational efficiency through automation.
- Develop runbooks and remediation automation to minimize operational toil.
- Perform capacity planning, resiliency testing, and disaster recovery exercises.
- Drive automation and operational excellence across the platform.
3. Infrastructure as Code (IaC)
- Develop and maintain cloud infrastructure using Terraform or AWS CloudFormation.
- Create reusable infrastructure modules and platform templates.
- Implement GitOps and automation-driven infrastructure provisioning strategies.
- Ensure infrastructure is version-controlled, repeatable, and compliant with organizational standards.
4. Identity & Access Management (IAM)
- Design and manage AWS IAM policies, roles, permission boundaries, and trust relationships.
- Implement least-privilege access controls and role-based access management.
- Manage AWS Identity Center (SSO) and federated authentication using SAML/OIDC.
- Support secure identity governance and compliance audits.
- Implement secure access controls for healthcare workloads and sensitive data.
5. AWS Systems Management & Automation
- Manage AWS Systems Manager (SSM) and SSM Agent across enterprise environments.
- Configure and maintain CloudWatch Agents for infrastructure observability.
- Automate patching, software deployment, inventory management, and configuration compliance.
- Implement operational automation using SSM Automation Documents and runbooks.
6. Audit, Compliance & Security Governance
- Implement and manage AWS CloudTrail for centralized logging and audit tracking.
- Configure and manage AWS Config, Security Hub, GuardDuty, and Audit Manager for governance and compliance monitoring.
- Maintain audit trails supporting HIPAA, HITRUST, and SOC 2 requirements.
- Collaborate with Security, Risk, and Compliance teams to address audit findings and remediation activities.
- Ensure encryption, data protection, and secure access controls for Protected Health Information (PHI).
7. Monitoring & Observability
- Implement enterprise monitoring and observability solutions.
- Develop dashboards, s, and operational metrics.
- Monitor platform health, performance, availability, and security events.
- Work with tools such as CloudWatch, Prometheus, Grafana, Datadog, Splunk, or ELK Stack.
8. DevOps & Automation
- Design and maintain CI/CD pipelines for infrastructure and application deployment.
- Improve deployment reliability and reduce manual intervention through automation.
- Collaborate with development, security, and operations teams to enable reliable platform delivery.
Technical Requirements
AWS Cloud
- AWS architecture and operations
- EC2, VPC, Route 53, S3, RDS, Lambda
- ECS/EKS, ELB
- CloudWatch, CloudTrail, Systems Manager (SSM)
- KMS, IAM, Secrets Manager
- AWS Config, GuardDuty, Security Hub
Site Reliability Engineering
- SLI / SLO / Error Budgets
- High Availability architecture
- Disaster Recovery and resiliency
- Capacity planning
- Automation and operational excellence
Infrastructure as Code
- AWS CloudFormation – Mandatory
- Terraform
- Infrastructure automation and reusable modules
Identity & Security
- AWS IAM and RBAC
- Least-privilege access
- Secrets Management
- Encryption and Key Management
- AWS Identity Center (SSO)
- Federation using SAML/OIDC
Audit & Compliance
- AWS CloudTrail
- AWS Config
- Security Hub
- GuardDuty
- Audit Manager
- HIPAA / HITECH
- HITRUST
- SOC 2 controls
- Healthcare security and compliance
Container & Platform Technologies
- Kubernetes / Amazon EKS
- Docker
- Helm
- ArgoCD / GitOps
Monitoring & Observability
- Amazon CloudWatch
- Prometheus
- Grafana
- Datadog
- Splunk
- ELK Stack
Programming & Automation
- Python
- Shell scripting
- Go – good to have
Required Qualifications
- Bachelor's degree in Computer Science, Information Technology, Engineering, or a related discipline.
- 7+ years of experience in Platform Engineering, Cloud Engineering, DevOps, or SRE environments.
- Strong hands-on experience with AWS Cloud and platform engineering.
- Strong experience with Infrastructure as Code, particularly Terraform and AWS CloudFormation.
- Strong experience with IAM governance and cloud security controls.
- Hands-on experience with AWS Systems Manager (SSM), SSM Agent, CloudWatch Agents, and operational automation.
- Experience implementing AWS CloudTrail and audit logging solutions.
- Strong understanding of SRE principles including SLIs, SLOs, error budgets, HA, and DR.
- Experience supporting regulated applications handling PHI/PII data.
- Strong understanding of healthcare security, compliance, and governance requirements.
Preferred Qualifications
- Experience with healthcare Provider, Payer, EMR/EHR, Clinical, or Health Insurance platforms.
- Experience supporting HIPAA/HITECH-compliant cloud environments.
- Exposure to HITRUST-certified environments.
- Familiarity with FHIR, HL7, and healthcare interoperability frameworks.
- Experience with Kubernetes/EKS, Helm, and ArgoCD.
- Experience with cloud observability platforms such as Prometheus, Grafana, Datadog, Splunk, or ELK.
Preferred Certifications
- AWS Certified DevOps Engineer – Professional
- AWS Certified Solutions Architect – Professional
- AWS Certified Security – Specialty
- AWS Certified SysOps Administrator
Key Competencies
- Healthcare Cloud Platform Engineering
- AWS Architecture & Operations
- Platform Modernization
- Site Reliability Engineering
- Infrastructure Automation
- Security & IAM Governance
- Audit & Compliance Management
- Cloud Monitoring & Observability
- Disaster Recovery & High Availability
- Operational Excellence
Skills
AWS, Infrastructure as Code, Terraform, CI/CD
About UST
UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world’s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients’ organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact—touching billions of lives in the process.
