Title: Senior AWS Platform Engineer (Remote) Location: US Job Description: Want to energize your career? Looking for stability with the freedom to innovate? At CertiPath you can have both while making the world more secure and simplifying access processes. We are seeking an experienced Senior AWS Platform Engineer to lead the design, security, and scaling of our AWS EKS-based CI/CD platform and bootstrap our IVIP production cloud services. Join our team of engineers, make a difference, and crush your goals at CertiPath. I’ve never heard of CertiPath. What do you do?   We are the experts in software and services for high-assurance digital identity verification and management. We are an established organization with a 21-year track record of delivering on our promises with the drive and entrepreneurial spirit of a start-up. CertiPath is focused on bringing facility and network access management for commercial clients and government agencies into the 21st century.   What will the Senior AWS Platform Engineer at CertiPath Do? You will be a technical leader and individual contributor who sets the bar for AWS Kubernetes and SaaS infrastructure excellence across the organization. You’ll design and deliver secure, high-performance, production-grade CI/CD systems on AWS EKS using GitHub Actions and partner closely with platform, security, and executive leadership to shape the technical roadmap for our AWS EKS. This is not a people-management role; it’s a deeply technical position for infrastructure engineers who still love building and automating while influencing architecture and strategy at the highest level.   What does a typical day look like for the Senior AWS Platform Engineer at CertiPath? - Lead the design, provisioning, and ongoing maintenance of production-grade AWS EKS clusters (Rancher-managed) using Infrastructure as Code. - Own the reliability, availability, performance, and security of production cloud services, including participation in an on-call rotation and off-hours incident response. - Architect, deploy, and scale Actions Runner Controller (both legacy and the new GitHub-supported gha-runner-scale-set) on AWS EKS with ephemeral runner pods, autoscaling, and GitHub App-based authentication. - Champion cybersecurity best practices across the entire platform, including least-privilege IAM, pod security policies, network policies, secrets management, vulnerability scanning, and compliance controls. - Optimize container image building pipelines (Docker-in-Docker →Kaniko) and manage internal registries (Nexus, Harbor) to support our SaaS delivery platforms. - Write and maintain Terraform, Helm, and Kubernetes manifests for EKS, networking, node pools, storage, and CI/CD components while driving GitOps practices. - Help design and manage hybrid networking between AWS EKS and on-prem Nutanix environments, including VLANs, routing, Load Balancer services, and secure egress to GitHub Enterprise and other SaaS services. - Instrument Prometheus/Grafana stacks, monitor runner pod lifecycle, build performance, and cluster resource utilization while implementing proactive scaling.   What qualifications do you look for?   You might be the Senior AWS Platform Engineer we’re looking for if you have:  - U.S. citizenship and the ability to obtain a government clearance. - At least a bachelor's degree in computer science or a related field (or equivalent experience). - AWS CloudOps Engineer- Associate Certification. - 8+ years of progressive professional software engineering experience or DevOps experience. - 5+ years of expert-level AWS Kubernetes experience with EKS (Rancher-managed), EC2 (spot + reserved instances), VPC networking, IAM, Security Groups, Transit Gateway, and cost-optimized SaaS infrastructure on AWS. - Deep expertise building and operating production CI/CD platforms at scale, including on-call support and incident response. - Expert-level Kubernetes and CI/CD experience, including Actions Runner Controller (legacy + new gha-runner-scale-set), Helm, ephemeral runners, Docker-in-Docker, Kaniko, and GitHub Enterprise (ghe.com). - Strong IaC and automation skills with Terraform, Helm, Kubernetes manifests, and GitOps workflows. - A strong security-first mindset with hands-on experience implementing cybersecurity best practices in SaaS and hybrid cloud environments. - Proven experience successfully working with CI/CD, container platforms, and workloads in AWS EKS (Nutanix NKP experience is a big plus). - Strong experience with Python for writing scripts and debugging. - Familiarity with Agentive Artificial Intelligence in Engineering - Excellent written and verbal communication skills; you can explain complex technical concepts to engineers and non-engineers. - A demonstrated ability to balance speed and quality; you ship fast without sacrificing long-term maintainability. We’re extra impressed by folks who have:  - AWS DevOps Engineer - Professional certification. - Experience with Nutanix Kubernetes Platform (NKP), or Prism Central. - Familiarity with Harbor Registry (RBAC, robot accounts, garbage collection). - Experience with air-gapped or restricted network deployment. - Python or Go scripting for automation. - A background in FinTech or regulated SaaS environments. - What kind of benefits does CertiPath offer?  CertiPath offers outstanding benefits, including health, dental, and vision coverage; a Health Savings Account plan; and a 401(k) plan with a generous employer match. We also believe strongly in maintaining a quality work-life balance, so we offer an unlimited PTO policy, seven company holidays, and a week-long break at the end of each year.    All qualified applicants will receive consideration for employment without regard to disability; status as a protected veteran; or any other status protected by applicable federal, state, local, or international law.

Role Description The Marketplace team builds the core decision systems that keep Waymo running smoothly. They design the algorithms that match riders to vehicles, optimize routing, balance supply and demand, forecast rider demand, and power dynamic pricing. Their work ensures the fleet stays efficient, riders get fast pickups, and the AV network operates safely and profitably across cities. The Platform team is part of the Marketplace engineering: we provide specialized business platforms supporting Marketplace ML and Optimization products. We own and host core ML models used throughout the Marketplace; we automate all parts of the model life cycle, such as feature engineering, training workflows, and inference services; we are working on next-generation Marketplace Simulation system capable to run high-fidelity virtual experiments; we also streamline diverse Marketplace Experimentation practices with the goal of providing a unified user-friendly Experimentation platform. You will: - Implement and scale the core economic engine for Waymo's ride-hailing commercial services. - Develop high-level infrastructure code for automatically training and deploying sophisticated optimization and prediction ML models to make real-time decisions for pricing, matching, and positioning. Qualifications - BS degree in Computer Science or equivalent practical experience. - 4+ years of experience programming in backend coding languages such as Java or C++. - Experience in building backend platforms supporting multiple product use-cases/services. - Prior Machine Learning Engineering experience in Python using mature ML frameworks such as TensorFlow, PyTorch, or Keras. Requirements - MS in Computer Science, or equivalent practical experience. - Experience building and deploying ML / Optimization models into production environments. - Experience developing ML data pipelines and ML workflow automation code on top of a mature ML infra. - Experience working at another Ride hailing or Marketplace company. - Coursework background in ML and Optimization. Benefits - Waymo employees are also eligible to participate in Waymo’s discretionary annual bonus program. - Equity incentive plan. - Generous Company benefits program, subject to eligibility requirements. Salary Range The expected base salary range for this full-time position across US locations is listed below. Actual starting pay will be based on job-related factors, including exact work location, experience, relevant training and education, and skill level. Your recruiter can share more about the specific salary range for the role location or, if the role can be performed remote, the specific salary range for your preferred location, during the hiring process. Salary Range: $175,000 — $215,000 USD

• Resolve technical problems by troubleshooting incidents, including but not limited to collecting detailed problem description, traces, log files, and replication. • Communicate progress of investigation with clients while ensuring all related records are properly updated in the CRM system. • Proficient in utilizing all support tools and processes to resolve cases. • Share best practices for the utilization and deployment of Varicent products. • Support KPI targets (SLA, QA, Resolution, etc.). • Available for scheduled weekend coverage for on call rotation.

Role Description - Leads and/or advises on site, regional and or cross-organizational network and systems-related infrastructure initiatives. - Contributes to planning and implementing new releases, updates or corrections to hardware, software, applications or connectivity. - Participates in strategic planning and development associated with future design, performance and capacity management. - Effectively translates, communicates and relays technical subject matter content to non-technical audiences. - Evaluates, recommends and maintains hardware and software management and monitoring tools to meet current and future organizational needs. - Defines and develops comprehensive user and related training and information. - Contributes in different stages of projects, evaluates architecture, implementation of projects and post-implementation support, follow up on best practices and frameworks for management of new and existing resources. - Participates in the creation, maintenance and improvement of the strategy of governance, policies, guidelines of public and hybrid cloud following industry-standards and customizing those for specific needs. - Contributes to the strategy of security posture and internal and external audits. - Contributes to the development of cybersecurity strategies, cost optimization, platform stability, performance maintenance. - Contributes to develop new strategies to adopt, implement and manage new technologies like: Containers / OpenShift / Observability / APM, etc. Qualifications - Core Azure Skills - Deep knowledge of Azure IaaS and PaaS services (e.g., Virtual Machines, App Services, AKS, Azure Functions, Logic Apps). - Strong experience with Azure networking (VNets, NSGs, Application Gateway, Load Balancers, VPN/ExpressRoute, Private Endpoints). - Proficiency in Azure Active Directory / Microsoft Entra ID, RBAC, Conditional Access, and Managed Identities. - Experience with Azure Storage, Azure SQL, and Azure Monitor / Application Insights. - Knowledge of Azure Security Center (Defender for Cloud) and Azure Policy / Blueprints for governance. - Infrastructure as Code (IaC) - Expert-level skills in Terraform, Bicep, or ARM templates. - CI/CD pipeline integration (Azure DevOps, GitHub Actions, or Jenkins). - Automation & Scripting - Proficient in PowerShell, Azure CLI, and optionally Python for automation. - Experience building automated deployment pipelines and infrastructure automation frameworks. - Containerization & DevOps - Experience deploying workloads on Azure RedHat OpenShift (ARO) and container registries (ACR). - Familiarity with DevOps practices, including CI/CD pipelines, GitOps, and shift-left security. - Monitoring & Operations - Hands-on experience with monitoring, alerting, and logging solutions (Azure Monitor, Log Analytics, Dynatrace, Grafana, FluentBit etc.). - Performance optimization and cost management through Azure Cost Management and Advisor. - Security & Compliance - Deep understanding of cloud security principles, Zero Trust, and least privilege access. - Experience implementing Defender for Cloud, Key Vault, Sentinel, and Private Link for secure architectures. - Familiarity with compliance frameworks (CIS, NIST, ISO 27001, SOC 2) and Azure Policy enforcement. - Architecture & Design - Proven ability to design scalable, secure, and highly available architectures. - Experience with hybrid and multi-cloud designs, including on-prem integration via ExpressRoute or VPN gateways. - Ability to create architecture diagrams, runbooks, and design documentation. - Leadership & Collaboration - Lead and mentor a team of hybrid cloud engineer / other support towers. - Collaborate with security, development, and operations teams to align cloud strategy. - Excellent communication skills — able to translate technical requirements into business impact. - Strong experience in project planning, prioritization, and stakeholder management. Company Description Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law. This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers. If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at GlobalRecruiting@unisys.com or alternatively Toll Free: 888-560-1782 (Prompt 4). US job seekers can find more information about Unisys’ EEO commitment here.