Description

You will design and execute large-scale AWS migrations, focusing on landing zone implementation, security governance, and operational readiness.

Responsibilities

• Plan and execute AWS account migrations across organizations with minimal downtime.
• Design AWS Landing Zone architectures using AWS Control Tower and multi-account strategies.
• Define governance frameworks, including Service Control Policies (SCPs) and security guardrails.
• Secure IAM roles, users, and policies, enforcing least-privilege access models.
• Configure multi-account networking (VPCs, Transit Gateways) and establish CloudWatch monitoring.

Required Skills

• 10+ years of IT infrastructure experience with 5+ years focused on AWS architecture.
• Deep expertise in AWS Organizations, Control Tower, and Landing Zone implementation.
• Strong knowledge of AWS KMS encryption, data migration, and re-encryption processes.
• Proficiency in designing VPC architectures, routing, and hybrid connectivity solutions.
• Experience implementing FinOps practices, cost allocation, and tagging strategies.
• Ability to create detailed migration runbooks and validation frameworks.
• Proven track record leading enterprise cloud migration programs.

Preferred Skills

• AWS Certified Solutions Architect – Professional or Security Specialty Certification.
• Experience with infrastructure automation using Terraform or CloudFormation.
• Background in regulated industry environments.

Key Skills

Education

Bachelor's degree