AWS | Cloud Migration | immediate joiners

Hexaware Technologies; Pune District, Chennai District, Bengaluru; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Hexaware Technologies is seeking an AWS Architect to design and implement scalable cloud infrastructure in Pune, India. The role focuses on Terraform/CloudFormation/CDK-based deployments, CI/CD pipelines, and secure, compliant release practices across development, testing, and production environments.

The candidate will drive lift-and-shift migrations, configure networking and security, and ensure observability with CloudWatch.

Qualifications

• Experience designing and implementing AWS infrastructure using Terraform, CloudFormation, or AWS CDK.
• Experience building CI/CD pipelines with AWS tools or GitHub Actions and Jenkins.
• Experience with AWS migrations using MGN, Migration Hub, and DataSync.
• Knowledge of networking concepts including VPCs, Direct Connect, VPNs, and Route 53.
• Security and compliance controls in deployment pipelines are essential.
• Ability to collaborate with architects and dev teams to create reusable Terraform/AWS CDK modules.

Responsibilities

• Design, build, and maintain AWS infrastructure using IaC (Terraform, CloudFormation, AWS CDK).
• Develop and optimize CI/CD pipelines using CodePipeline, CodeBuild, CodeDeploy, GitHub Actions, Jenkins.
• Implement GitOps and pipeline-as-code practices with proper branching and PR approvals.
• Configure Terraform remote state using S3 and DynamoDB locking.
• Implement Secrets Manager and Parameter Store for secure configs.
• Automate provisioning of multiple environments (dev/test/staging/prod).
• Incorporate security checks and policy validation into pipelines; monitor for vulnerabilities.
• Collaborate with architects and teams to create reusable deployment modules.
• Implement AWS networking services including VPCs, Security Groups, ALB/NLBs, IAM, Route 53, KMS.
• Enable observability with CloudWatch dashboards, alarms, logs, and traces.
• Execute lift-and-shift migrations using AWS MGN, Migration Hub, and DataSync.
• Configure hybrid networking with Transit Gateway, Direct Connect, and Site-to-Site VPN.

Skills

AWS

Terraform

CI/CD

GitOps

Automation

Tools

Terraform

CloudFormation

AWS CDK

CodePipeline

CodeBuild

CodeDeploy

GitHub Actions

Jenkins

Secrets Manager

Parameter Store

MGN

Migration Hub

DataSync

CloudWatch

VPC

Security Groups

IAM

Route 53

KMS

Transit Gateway

Direct Connect

Site-to-Site VPN

Job description

Role & responsibilities

AWS Architect+ AWS Cloud Migration + AWS Landing zone creation + Terraform

AWS Engineer+ AWS Cloud Migration + AWS Landing zone creation + Terraform

Build and automate AWS cloud environments, CI/CD pipelines, and Infrastructure-as-Code deployments. Key Responsibilities

• Design, build, and maintain AWS infrastructure using Terraform, CloudFormation, or AWS CDK.
• Develop and optimize CI/CD pipelines using AWS CodePipeline, CodeBuild, CodeDeploy, GitHub Actions, Jenkins, or equivalent.
• Implement GitOps and pipeline-as-code practices including branching strategies, pull request approvals, and deployment automation.
• Configure Terraform remote state using S3 and DynamoDB locking.
• Implement secrets management using AWS Secrets Manager and Systems Manager Parameter Store.
• Automate provisioning of development, test, staging, and production environments.
• Integrate security and compliance controls into deployment pipelines including code scanning, Terraform validations, policy validation, and vulnerability monitoring.
• Collaborate with architects and application teams to create reusable modules and deployment patterns.
• Implement AWS network, security, identity, and platform services including VPCs, Security Groups, ALB/NLBs, IAM, Route 53, and KMS.
• Enable observability through CloudWatch dashboards, alarms, logs, traces, and automated notifications.
• Execute lift-and-shift (rehost) migrations using AWS Application Migration Service (MGN), AWS Migration Hub, and AWS DataSync.
• Configure networking and hybrid connectivity using VPCs, Transit Gateway, Direct Connect, Site-to-Site VPN, and Route 53