Cloud Migration Engineer / Architect (R-00199)

The Cloud Migration Engineer / Architect assesses application portfolios, defines migration strategies for individual workloads using the 7 Rs of cloud migration, and designs secure, scalable architectures within AWS GovCloud. The role is responsible for planning and executing application and data migrations, automating infrastructure deployment, coordinating migration waves, minimizing downtime, and managing technical and business risk throughout the migration lifecycle.

This position ensures migrated environments meet applicable security, compliance, performance, resiliency, and operational requirements. The engineer/architect will also support modernization initiatives, enterprise migration governance, Zero Trust architecture, secure connectivity between on-premises environments and AWS GovCloud, and standardized cloud landing-zone patterns.

• Assess enterprise application portfolios and determine the appropriate migration approach for each workload using the 7 Rs: rehost, replatform, refactor, repurchase, retire, retain, and relocate.
• Design secure, scalable, highly available AWS GovCloud architectures that meet application, mission, security, and operational requirements.
• Develop migration plans, dependency mappings, migration runbooks, cutover procedures, rollback strategies, and validation criteria.
• Use AWS migration services including AWS Application Migration Service (MGN), AWS Database Migration Service (DMS), AWS DataSync, AWS Application Discovery Service, and AWS Migration Hub.
• Migrate applications, virtual machines, databases, file systems, and enterprise data to AWS GovCloud while minimizing downtime and operational disruption.
• Design and deploy compute and container platforms using Amazon EC2, Amazon EKS, and Amazon ECS as appropriate to workload requirements.
• Plan and execute storage, database, and data migrations, including data synchronization, replication, validation, and cutover activities.
• Design hybrid and cloud networking architectures using AWS Transit Gateway, AWS Direct Connect, VPN connectivity, routing, DNS, and security controls.
• Develop and maintain infrastructure using Terraform and other approved infrastructure-as-code technologies.
• Implement standardized AWS GovCloud environments using the Landing Zone Accelerator on AWS (LZA) and approved enterprise landing-zone patterns.
• Use FIPS endpoints and approved cryptographic configurations where required by security and compliance requirements.
• Design secure approaches for on-premises-to-GovCloud data transfer, accounting for the absence of a native cross-partition transfer path where applicable.
• Implement micro-segmentation and security-group architectures aligned with Zero Trust principles and workload-specific access requirements.
• Coordinate migration waves across application, infrastructure, cybersecurity, networking, database, and business teams.
• Identify and manage migration dependencies, technical risks, business risks, outage windows, resource constraints, and remediation activities.
• Validate migrated workloads for functionality, performance, security, resilience, observability, and operational readiness before production acceptance.
• Implement monitoring, logging, alerting, backup, recovery, and operational support capabilities for migrated environments.
• Identify and execute application modernization opportunities, including containerization, managed services, automation, and cloud-native architectural improvements where appropriate.

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline.
• Demonstrated experience designing and implementing AWS cloud architectures, preferably within AWS GovCloud.
• Strong understanding of enterprise application migration strategies and the 7 Rs migration framework.
• Hands-on experience with AWS migration tooling such as MGN, DMS, DataSync, Application Discovery Service, and Migration Hub.
• Experience migrating enterprise applications, servers, databases, storage platforms, and data to AWS.
• Strong experience with EC2, EKS, ECS, storage services, database services, and cloud-native application architectures.
• Experience designing hybrid cloud networking with Transit Gateway, Direct Connect, VPNs, routing, DNS, and network-security controls.
• Hands-on experience developing infrastructure using Terraform and infrastructure-as-code practices.
• Experience with Landing Zone Accelerator on AWS, AWS Organizations, account structures, guardrails, and standardized cloud foundations.
• Understanding of FIPS endpoints, encryption requirements, and secure data-transfer patterns within government cloud environments.
• Experience designing micro-segmented network architectures and security-group policies aligned with Zero Trust principles.
• Strong understanding of application dependency analysis, migration-wave planning, cutover management, rollback planning, and technical risk management.
• Experience with cloud monitoring, logging, operational readiness, backup, disaster recovery, and post-migration optimization.
• Familiarity with application modernization, containerization, managed services, and cloud-native architecture patterns.
• Experience supporting government, defense, regulated, or other compliance-driven environments is preferred.
• Strong architecture, troubleshooting, documentation, governance, stakeholder coordination, and cross-functional collaboration skills.

Preferred Certifications:

• AWS Certified Solutions Architect – Professional
• AWS Certified DevOps Engineer – Professional
• AWS Certified Advanced Networking – Specialty
• AWS Certified Security – Specialty

Originally posted on Himalayas