About the Role Our Cloud Engineers design, build, and support secure, high-availability AWS environments that power our customer's transformation initiatives. Working within cross-functional delivery teams, you'll establish AWS foundational architecture — Control Tower, Landing Zone Accelerator, and multi-account strategy — and migrate on-premises and VMware-based estates onto that foundation, meeting rigorous performance, security, and cost-efficiency targets. Key Responsibilities • Design and deploy AWS foundational environments using Control Tower and Landing Zone Accelerator (LZA). • Define and implement multi-account strategy — AWS Organizations, OU structure, account vending, SCPs, and centralized logging and security tooling. • Implement IAM and Identity Center, guardrails, and security baselines across the account structure. • Lead discovery and assessment of on-premises estates — application dependency mapping, right-sizing analysis, and migration wave planning. • Determine and execute the appropriate migration strategy per workload — rehost (lift-and-shift) and replatform — balancing speed, risk, and long-term operating cost. • Perform lift-and-shift replication of on-premises and VMware-based virtual machines into EC2, including image conversion and OS/driver remediation. • Replatform workloads onto managed AWS services — migrating self-managed databases to RDS, load balancers to ALB/NLB, and static content delivery to CloudFront. • Apply agentic and automated migration tooling, including AWS Transform, to accelerate VMware discovery, network conversion, and wave execution at scale. • Design and build hybrid connectivity — Direct Connect, Site-to-Site VPN, Transit Gateway, DNS, and Active Directory integration. • Provision and configure VPC networking, compute, storage, and database services using Terraform and AWS CDK. • Automate operational and migration workflows using Lambda and Step Functions. • Execute storage and database migrations (DMS, DataSync, Storage Gateway, Snow Family) and validate data integrity. • Develop and maintain pipeline automation for infrastructure and application deployments. • Configure logging, metrics, tracing, and alerting — apply SRE practices to migrated workloads. • Produce cost-and-capacity reports with FinOps tooling; drive post-migration cost optimization. • Produce well-structured design documents, migration runbooks, diagrams, and hand-over guides. AWS Foundational & Migration Tools Foundation • AWS Control Tower — Automated landing zone setup and account governance. • Landing Zone Accelerator (LZA) — Deployable foundational architecture for regulated and complex environments. • AWS Organizations / Identity Center — Multi-account structure, OUs, SCPs, and centralized identity. Migration • AWS Transform — Agentic AI-driven acceleration of VMware migration workflows. • AWS Migration Hub — Centralized tracking of migration progress. • AWS Application Migration Service (MGN) — Lift-and-shift replication of VMs to EC2. • VM Import/Export — Converting VM images. • AWS Application Discovery Service — Inventory and dependency mapping of source environments. • AWS Database Migration Service (DMS) — Homogeneous and heterogeneous database migration. • AWS DataSync / Storage Gateway / Snow Family — Bulk and hybrid data transfer. Target Platform Services • EC2, EBS, S3, EFS/FSx — Compute and storage for migrated workloads. • RDS / Aurora — Managed relational databases for replatformed workloads. • ALB / NLB / Route 53 — Application and network load balancing, DNS, and traffic management. • CloudFront — Content delivery and edge caching. • Lambda / Step Functions — Serverless automation and workflow orchestration. • CloudWatch / CloudTrail / Systems Manager — Observability, audit, and fleet operations. Qualifications • 6-10 years experience designing and operating infrastructure, with deep hands-on AWS experience. • Bachelor's degree in Computer Science, or similar. • Hands-on experience building AWS foundational environments — Control Tower, Landing Zone Accelerator, AWS Organizations, and multi-account architecture. • Demonstrated experience with cloud migrations; large-scale, multi-wave migrations a strong plus. • Practical experience executing rehost and replatform migrations, and the judgment to recommend the right approach per workload. • VMware background a plus (vSphere/vCenter, ESXi, virtual machine administration). • Hands-on experience with AWS Migration Hub, AWS Application Migration Service (MGN), and VM Import/Export. • Hands-on experience with core AWS services including EC2, S3, RDS, ALB/NLB, CloudFront, Lambda, and Step Functions. • Strong AWS networking fundamentals — VPC design, routing, Transit Gateway, Direct Connect/VPN, and DNS. • Experience with Infrastructure as Code (IaC) — Terraform and AWS CDK — and at least one scripting language (Python, Bash, or PowerShell). • Solid Linux and/or Windows Server administration background. • Experience building CI/CD pipelines and integrating DevSecOps controls. • Familiarity with monitoring/observability stacks and incident-management processes. • Strong troubleshooting, documentation, and customer-facing communication skills. • Working knowledge of container runtime fundamentals and application modernization patterns. • Knowledge of compliance frameworks (SOC 2, HIPAA, PCI) and security hardening. • Experience or strong working knowledge of AWS Transform for VMware is a significant plus. AWS certification required: AWS Solutions Architect – Professional. Why You'll Love It Here • Our Product is Our People: We live by this. We invest in people who invest in themselves. Your growth is our growth. • True Servant Leadership: Our CTO leads with a "force multiplier" philosophy. Management is here to empower you and clear roadblocks, not to micromanage. We won't ask you to do anything we're not willing to do ourselves. • Flat Organization, Real Impact: Your voice and designs will directly shape o