Sr Cloud Engineer- Infrastructure

About the role

ABOUT THE ROLE

Our Cloud Engineers design, build, and support secure, high-availability AWS environments that power our customer's transformation initiatives. Working within cross-functional delivery teams, you'll establish AWS foundational architecture — Control Tower, Landing Zone Accelerator, and multi-account strategy — and migrate on-premises and VMware-based estates onto that foundation, meeting rigorous performance, security, and cost-efficiency targets.

KEY RESPONSIBILITIES

- Design and deploy AWS foundational environments using Control Tower and Landing Zone Accelerator (LZA).

- Define and implement multi-account strategy — AWS Organizations, OU structure, account vending, SCPs, and centralized logging and security tooling.

- Implement IAM and Identity Center, guardrails, and security baselines across the account structure.

- Lead discovery and assessment of on-premises estates — application dependency mapping, right-sizing analysis, and migration wave planning.

- Determine and execute the appropriate migration strategy per workload — rehost (lift-and-shift) and replatform — balancing speed, risk, and long-term operating cost.

- Perform lift-and-shift replication of on-premises and VMware-based virtual machines into EC2, including image conversion and OS/driver remediation.

- Replatform workloads onto managed AWS services — migrating self-managed databases to RDS, load balancers to ALB/NLB, and static content delivery to CloudFront.

- Apply agentic and automated migration tooling, including AWS Transform, to accelerate VMware discovery, network conversion, and wave execution at scale.

- Design and build hybrid connectivity — Direct Connect, Site-to-Site VPN, Transit Gateway, DNS, and Active Directory integration.

- Provision and configure VPC networking, compute, storage, and database services using Terraform and AWS CDK.

- Automate operational and migration workflows using Lambda and Step Functions.

- Execute storage and database migrations (DMS, DataSync, Storage Gateway, Snow Family) and validate data integrity.

- Develop and maintain pipeline automation for infrastructure and application deployments.

- Configure logging, metrics, tracing, and alerting — apply SRE practices to migrated workloads.

- Produce cost-and-capacity reports with FinOps tooling; drive post-migration cost optimization.

- Produce well-structured design documents, migration runbooks, diagrams, and hand-over guides.

AWS FOUNDATIONAL & MIGRATION TOOLS

Foundation

- AWS Control Tower — Automated landing zone setup and account governance.

- Landing Zone Accelerator (LZA) — Deployable foundational architecture for regulated and complex environments.

- AWS Organizations / Identity Center — Multi-account structure, OUs, SCPs, and centralized identity.