Description

Architect end-to-end AWS infrastructure solutions, focusing on scalable multi-account landing zones, VPC designs, and workload isolation. Lead complex on-premises and intra-AWS migrations, including transitions to AWS Dedicated Hosts for compliance and performance. Manage large-scale Kubernetes environments, defining compute strategies using EKS, Bottlerocket, and EC2.

Responsibilities

• Design secure, multi-account landing zones and enterprise networking architectures aligned with the AWS Well-Architected Framework.
• Lead large-scale migrations, executing rehost, replatform, and refactor strategies with detailed cutover planning.
• Architect and manage multi-cluster Kubernetes platforms, implementing service meshes, workload identity, and observability.
• Optimize AWS Dedicated Hosts for compute planning, licensing, capacity, and high-availability requirements.
• Enforce IAM architectures, cloud governance, and security policies aligned with CIS, NIST, and organizational standards.

Required Skills

• 8+ years of experience in Cloud Architecture, Infrastructure Engineering, or Platform Engineering.
• 5+ years of advanced AWS experience across EC2, VPC, IAM, EKS, RDS, Route53, S3, CloudWatch, CloudTrail, and Config.
• Proven expertise leading large-scale AWS migrations, including on-premises to AWS and shared-tenant Dedicated Host transitions.
• Deep hands-on knowledge of AWS Dedicated Hosts, tenancy management, and infrastructure lifecycle planning.
• Strong proficiency with Kubernetes, Terraform, cloud networking, and infrastructure automation.
• Experience with multi-account governance, security controls, and workload isolation strategies.
• Ability to mentor engineering teams on AWS patterns, DevOps practices, and migration execution.

Preferred Skills

• Experience with Bottlerocket OS and advanced autoscaling group configurations.
• Background in regulatory compliance and physical isolation for sensitive workloads.

Key Skills

Education

Any Graduate