AWS Cloud Architect

UST Inc
Chicago, IL, United States
12 days ago

Role details

Contract type
Temporary contract
Employment type
Part-time / full-time
Compensation
$134,000.0 - $201,000.0
Working hours
Regular working hours
Job source

Tech stack

Amazon Web Services Amazon Cloudfront Amazon Elastic Compute Cloud Amazon S3 Applications Architecture Application Portfolio Management Cloud Computing Cloud Engineering Encodings Databases System Configuration Continuous Integration
+40 more
Extract Transform Load (ETL) DevOps Domain Name System (DNS) Federated Identity Management Github Identity and Access Management Virtual Private Networks (VPN) Node.Js OAuth OpenID Cloud Services Migration Manager Security Assertion Markup Language (SAML) Single Sign-On Systems Integration AWS Cdk Data Processing Load Balancing Delivery Pipeline Liferay Software Troubleshooting Amazon Virtual Private Cloud (VPC) Backend Cloudformation Database Migration Containerization Pingfederate AngularJS Infrastructure Automation Frameworks Deployment Automation Front End Software Development Sitecore Route53 Cloudwatch Api Gateway Code Restructuring Dynatrace Devsecops Docker Service Stack

Job description

UST is searching for an AWS Cloud Architect to lead the architecture and execution of our on-premises to AWS migration. This role owns the end-to-end target-state design for a complex application landscape that includes Liferay, SiteCore, PingFederate, ETL jobs, and Angular/Node.js applications - and works hands-on with DevOps practices to get workloads safely into production on AWS.

The opportunity:

  • Own the target-state AWS architecture for the on-premises to AWS migration across the application portfolio

  • Assess existing on-prem applications - Liferay, SiteCore, PingFederate, ETL jobs, Angular/Node.js services - and define per-application migration strategy (rehost, replatform, refactor)

  • Design AWS infrastructure and integration patterns for portal/CMS platforms (Liferay, SiteCore) and identity/SSO (PingFederate)

  • Architect migration and re-platforming of ETL jobs onto AWS-native or AWS-compatible data processing services

  • Define CI/CD pipelines and DevOps practices (build, test, deploy, containerization) for migrated applications

  • Establish cloud engineering standards, guardrails, and reference architectures for teams to follow during migration

  • Lead technical design reviews, migration runbooks, and cutover planning across application teams

  • Partner with security and DevSecOps to ensure migrated applications meet compliance and security requirements

  • Provide hands-on architectural guidance and troubleshooting support during build and cutover phases

  • Define and implement the observability strategy for migrated applications using Dynatrace

  • Design certificate management architecture using AWS Certificate Manager (ACM) for migrated applications and load balancers

This position description identifies the responsibilities and tasks typically associated with the performance of the position. Other relevant essential functions may be required., AWS Application Migration Service, AWS, Infrastructure as Code, Cloud Infrastructure, AWS CDK, AWS CodePipeline, AWS Database Migration Service, AWS IAM, Amazon EC2, Dynatrace, DevOps

Requirements

  • (Must Have) AWS Cloud Architecture

  • Extensive hands-on experience architecting and delivering solutions on AWS

  • Experience leading on-premises to AWS migration projects, including migration strategy and target-state design

  • Strong understanding of AWS core services - compute, networking, storage, security, and database Observability (Dynatrace)

  • Hands-on experience implementing and configuring Dynatrace for application and infrastructure observability

  • Experience defining monitoring, ing, and dashboarding strategy for migrated cloud workloads

  • Comfortable using Dynatrace for root-cause analysis and performance troubleshooting during and after migration AWS Certificate Manager (ACM)

  • Hands-on expertise provisioning and managing SSL/TLS certificates using AWS Certificate Manager

  • Experience integrating ACM with CloudFront, load balancers (ALB/NLB), and API Gateway

  • Understands certificate renewal automation, validation methods (DNS/email), and cross-account/cross-region certificate strategies DevOps

  • Hands-on DevOps experience - CI/CD pipeline design, automation, and containerization (Docker)

  • Experience embedding DevOps and DevSecOps practices into migration and deployment workflows

  • Comfortable working across infrastructure as code, build pipelines, and deployment automation Application Stack Experience

  • Experience with Liferay portal architecture, deployment, and integration

  • Experience with SiteCore architecture and hosting on cloud infrastructure

  • Experience with PingFederate for SSO/federated identity and integration with cloud applications

  • Experience with ETL job design, migration, and orchestration

  • Experience with Angular front-end and Node.js backend application architectures

  • Preferred Qualifications (Nice to Have)

  • These skills will strengthen a candidate’s profile but are not a hard requirement. AWS Certifications

  • AWS Certified Solutions Architect - Professional

  • AWS Certified DevOps Engineer - Professional Additional Experience

  • Familiarity with AWS Application Migration Service (MGN), AWS DMS, or AWS DataSync

  • Experience with containerized deployments on ECS/EKS

  • Exposure to hybrid connectivity (Direct Connect, Site-to-Site VPN) for phased migrations Core Technology Stack Area Technologies Migration Scope On-premises to AWS lift-and-shift / re-architecture migration Portal / CMS Liferay (Must), SiteCore (Must) Identity & Access PingFederate (Must) - SSO, SAML, OAuth/OIDC Data Processing ETL Jobs (Must) Application Stack Angular (Must), Node.js (Must) DevOps & CI/CD CodePipeline, CodeBuild, Docker, GitHub, Infrastructure as Code (CDK/CloudFormation) Compute & Networking EC2, ECS/EKS, VPC, ELB/ALB, Route 53 Storage & Database S3, RDS, EFS Security & IAM IAM, KMS, WAF, Secrets Manager, AWS Certificate Manager (ACM) (Must) Migration Tooling AWS Application Migration Service (MGN), AWS DMS, AWS DataSync Observability Dynatrace (Must) Monitoring & Ops CloudWatch, CloudTrail, Systems Manager

Benefits & conditions

Pulled from the full job description

  • Health insurance
  • 401(k) matching
  • Vision insurance
  • Health savings account
  • Dental insurance
  • Paid sick time
  • Paid jury duty, Compensation can differ depending on factors including but not limited to the specific office location, role, skill set, education, and level of experience. UST provides a reasonable range of compensation for roles that may be hired in various U.S. markets as set forth below., Full-time, regular employees accrue a minimum of 10 days of paid vacation per year, receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year), 10 paid holidays, and are eligible for paid bereavement leave and jury duty. They are eligible to participate in the Company’s 401(k) Retirement Plan with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance, as well as the following Company-paid Employee Only benefits: basic life insurance, accidental death and disability insurance, and short- and long-term disability benefits. Regular employees may purchase additional voluntary short-term disability benefits, and participate in a Health Savings Account (HSA) as well as a Flexible Spending Account (FSA) for healthcare, dependent child care, and/or commuting expenses as allowable under IRS guidelines. Benefits offerings vary in Puerto Rico.

Part-time employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company’s 401(k) Retirement Plan with employer matching.

Full-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year) and are eligible to participate in the Company’s 401(k) program with employer matching. They and their dependents residing in the US are eligible for medical, dental, and vision insurance.

Part-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year).

All US employees who work in a state or locality with more generous paid sick leave benefits than specified here will receive the benefit of those sick leave laws., Compensation range: $134,000.00 to $201,000.00 per year

About the company

Born digital, UST transforms lives through the power of technology. We walk alongside our clients and partners, embedding innovation and agility into everything they do. We help them create transformative experiences and human-centered solutions for a better world.

UST is a mission-driven group of 29,000+ practical problem solvers and creative thinkers in more than 30 countries. Our entrepreneurial teams are empowered to innovate, act nimbly, and create a lasting and sustainable impact for our clients, their customers, and the communities in which we live.

With us, you’ll create a boundless impact that transforms your career-and the lives of people across the world., We proudly embrace the values that have shaped UST since day one. We build our culture of Humility, Humanity, and Integrity. These values inspire us to nurture a people-first, human centric culture that fosters diversity, prioritizes sustainable solutions, and keeps our people and clients at the forefront of all decisions., UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world’s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients’ organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact-touching billions of lives in the process.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:49 min

Adopting OAuth best practices and removing outdated grants

Alexander Schwartz Alexander Schwartz · WWC Europe 2026

2:07 min

Inspecting default bridge architectures and custom Docker networks

Oliver Seitz Oliver Seitz · WWC 2025

4:35 min

Setting up passwordless federated identity configuring OpenID Connect patterns

Marcel Lupo · LIVE

3:46 min

Navigating a career in cloud transformation consulting

Piet Van Dongen · LIVE

2:22 min

Adapting OpenID Connect for decentralized data sharing

Adam Larter Adam Larter · WWC 2024

1:34 min

Analyzing vulnerabilities in standard OAuth 2.0 authorization flows

Alexander Schwartz Alexander Schwartz · WWC Europe 2026

Videos

See all

Related articles

See all