Description

You will design and execute large-scale AWS migrations, focusing on landing zone implementation, security governance, and operational readiness.

Responsibilities

• Plan and execute AWS account migrations across organizations, ensuring minimal downtime and service integrity.
• Design and implement AWS Landing Zone architectures using AWS Control Tower with multi-account strategies.
• Define and enforce governance frameworks, including Service Control Policies (SCPs) and security guardrails.
• Migrate and secure IAM roles, users, and policies, implementing least-privilege access models.
• Configure multi-account networking (VPCs, Transit Gateways) and establish CloudWatch monitoring and logging.

Required Skills

• 10+ years of IT infrastructure experience with 5+ years focused on AWS architecture.
• Deep expertise in AWS Organizations, Control Tower, and Landing Zone implementation.
• Strong knowledge of AWS KMS encryption, data migration, and re-encryption processes.
• Proficiency in designing VPC architectures, routing, and hybrid connectivity solutions.
• Experience implementing FinOps practices, cost allocation, and tagging strategies.
• Ability to create detailed migration runbooks and validation frameworks.
• Proven track record leading enterprise cloud migration programs.

Preferred Skills

• AWS Certified Solutions Architect – Professional or Security Specialty Certification.
• Experience with infrastructure automation using Terraform or CloudFormation.
• Background in regulated industry environments.

Key Skills

Education

Bachelor's degree