What success looks like in this role:
Key Responsibilities
- Define and own the target-state AWS infrastructure architecture and operational standards for production environments ensuring scalability resilience security and alignment to business objectives.
- Act as the technical authority for Linux and Windows OS engineering on AWS driving platform stability through proactive improvements advanced troubleshooting and performance tuning across complex environments.
- Establish enterprise-grade Infrastructure as Code (IaC) frameworks reusable patterns and governance using Terraform and/or CloudFormation; review and approve infrastructure changes for quality and risk.
- Lead security architecture and compliance implementation across IAM strategy network segmentation encryption/KMS centralized logging/auditing and continuous control validation in partnership with security and risk teams.
- Drive performance engineering and cost optimization strategy across AWS workloads including right-sizing scaling design storage optimization lifecycle policies and standard optimization playbooks.
- Own DR/BCP architecture and readiness including RTO/RPO definition support recovery designs runbooks testing cadence and continuous improvements based on lessons learned.
- Enable mature CI/CD and deployment practices by integrating infrastructure and platform controls with pipelines (CodePipeline/CodeDeploy and/or Jenkins/GitLab) including guardrails policy-as-code and release governance.
- Lead major incident and problem management for cloud infrastructure providing deep technical leadership during outages ensuring high-quality RCAs and driving corrective/preventive actions and reliability improvements.
- Provide technical leadership across teams: mentor L1L3 engineers conduct design reviews contribute to hiring/upskilling and promote best practices and standardization.
- Maintain high-quality documentation and reference architectures including standards blueprints operational procedures and knowledge base articles.
Skills (Must-haves)
- 8 years of infrastructure engineering/operations experience with 5 years delivering and operating AWS production environments at scale.
- Expert-level understanding of AWS services and architecture patterns including EC2 EBS S3 VPC IAM CloudWatch CloudTrail load balancing and scaling strategies.
- Deep Linux and Windows engineering expertise in cloud environments (hardening standards patching strategy automation performance tuning troubleshooting at scale).
- Expert-level IaC capability using Terraform and/or CloudFormation including reusable frameworks module design version control CI validation and drift/compliance management.
- Advanced AWS networking design expertise: VPC architecture routing segmentation NACL/security posture VPN/Direct Connect DNS fundamentals and traffic management patterns.
- Security engineering depth: IAM design patterns KMS/encryption strategy audit logging secure baselines threat detection integration and compliance control implementation.
- Strong observability and reliability engineering skills: monitoring strategy alert design log/metric correlation SLO/SLA awareness and operational readiness practices.
- Advanced automation/scripting proficiency (Python/Bash/PowerShell) with ability to build operational tooling and integrate automation into pipelines and runbooks.
- Ability to influence and communicate effectively with senior stakeholders including translating complex technical risk/decisions into clear options and recommendations.
You will be successful in this role if you have:
Qualifications
- Bachelors degree in Computer Science / IT / Engineering (or equivalent practical experience).
- AWS Professional-level certification required: AWS Certified Solutions Architect Professional and/or AWS Certified DevOps Engineer Professional (or equivalent expertise)
Good to Have / Desirable Skills
- Enterprise AWS connectivity and multi-account design: Transit Gateway Direct Connect VPC endpoints/PrivateLink landing zones cross-account IAM and governance.
- Strong AWS Systems Manager expertise (Automation Patch Manager Session Manager Run Command Inventory Parameter Store) and standard runbook automation.
- Security services experience: GuardDuty Security Hub AWS Config AWS Shield; familiarity with vulnerability management and compliance reporting.
- Experience operating regulated environments and implementing policy-as-code / guardrails at scale.
- Experience with AWS-managed databases (RDS/Aurora/DynamoDB) including availability monitoring backups and performance troubleshooting.
- Strong CI/CD and GitOps maturity including pipeline guardrails change governance and promotion strategies across environments.
- FinOps maturity exposure: chargeback/showback inputs cost governance savings tracking and continuous optimization operating model.
Unisys offers an outstanding benefits package featuring unlimited paid time off a 401(k) plan comprehensive healthcare HSA matching ongoing learning opportunities and more! Were committed to supporting work-life balance and investing in your future success.
At Unisys we incorporate video interviews as a key part of our hiring process. This allows us to get to know you better and provide a more engaging and convenient interview experience. We appreciate your understanding and look forward to connecting with you virtually!
#LI-AC1
This role may require access to export-controlled commodities and technology. Therefore to conform to U.S. export control regulations applicant should be eligible for any required authorizations from the U.S. Government.
Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age caste citizenship color disability family medical history family status ethnicity gender gender expression gender identity genetic information marital status national origin parental status pregnancy race religion sex sexual orientation transgender status veteran status or any other category protected by law.
This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers. If you are a US job seeker unable to review the job opportunities herein or cannot otherwise complete your expression of interest without additional assistance and would like to discuss a request for reasonable accommodation please contact our Global Recruiting organization at or alternatively Toll Free: (Prompt 4). US job seekers can find more information about Unisys EEO commitment here.