Migration Architect

SourceFuse; Dadri; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

SourceFuse seeks a Cloud Migration Architect to lead AWS MAP engagements end-to-end, from discovery to Landing Zone setup, multi-account governance, and modernization. You will own migration roadmaps for enterprise clients while ensuring security, cost, and operational posture keep pace with delivery.

Experience required: 8+ years in cloud migrations; preferred location Noida/Mohali. Strong focus on security controls, FinOps, and IaC with Terraform/CloudFormation.

Qualifications

• 8+ years of experience in cloud migrations and AWS MAP.
• End-to-end MAP engagements for enterprise clients.
• Strong Landing Zone and multi-account governance background.
• Experience with HIPAA, SOC 2, GDPR, RBI compliance where applicable.
• Proficiency with IaC and CI/CD pipelines (Terraform, CloudFormation).
• Familiarity with FinOps and cost-optimization practices.
• Container platforms like Docker and Kubernetes are a plus.

Responsibilities

• Lead MAP engagements from discovery through migration wave planning.
• Migrate workloads using MGN, DMS with SCT, DataSync, and AI-assisted modernization.
• Stand up Landing Zone, AWS Organizations, and SCPs to govern client accounts.
• Implement security controls across IAM, GuardDuty, Security Hub, WAF, and Firewalls.
• Analyze usage, optimize costs with Cost Explorer, Trusted Advisor, and RI/Savings Plans.
• Automate provisioning with Terraform/CloudFormation; design DR plans for defined RTOs.

Skills

MAP engagements

Migration Strategy

Landing Zone

Security & Compliance

FinOps

IaC CI/CD

Terraform

CloudFormation

CodePipeline

DataMigration

Tools

AWS MGN

DMS

SCT

DataSync

Terraform

CloudFormation

CodePipeline

CodeBuild

CodeDeploy

Jenkins

Job description

SourceFuse is looking for a Cloud Migration Architect to lead clients through AWS Migration Acceleration Program (MAP) engagements end-to-end, from discovery and assessment through Landing Zone setup, multi-account governance, workload migration, and modernization.

You’ll own the migration roadmap for enterprise clients while ensuring security, cost,

and operational posture keep pace with delivery.

Experience Required - 8+ Years

Preferred Location - Noida/Mohali

Key Responsibilities:

• MIGRATION DISCOVERY & STRATEGY - Lead AWS Migration Acceleration Program (MAP) engagements — discovery, application portfolio assessment, and migration wave planning — to build a de-risked, sequenced migration roadmap for enterprise clients.
• WORKLOAD MIGRATION & MODERNIZATION - Execute migrations using AWS Application Migration Service (MGN), Database Migration Service (DMS) with Schema Conversion Tool (SCT), DataSync, and AWS Transform for AI-assisted application and code modernization.
• LANDING ZONE & MULTI-ACCOUNT ONBOARDING - Stand up AWS Control Tower / Landing Zone (incl. Landing Zone Accelerator for HIPAA and other compliance-driven environments), AWS Organizations, and Service Control Policies to onboard and govern client accounts.

Governance, Security & Optimization:

• SECURITY & COMPLIANCE - Implement and manage security controls across IAM, GuardDuty, Security Hub, Inspector, AWS WAF, and Network Firewall, ensuring migrated environments meet standards such as HIPAA, SOC 2, GDPR, and RBI where applicable.
• COST OPTIMIZATION / FINOPS - Analyze usage patterns and right-size resources using Cost Explorer, Trusted Advisor, and Compute Optimizer; apply Reserved Instances / Savings Plans and cost allocation tagging to reduce spend across multi-account environments.
• INFRASTRUCTURE AS CODE, CI/CD & DR - Automate infrastructure provisioning with Terraform and CloudFormation, build CI/CD pipelines (CodePipeline/CodeBuild/CodeDeploy or Jenkins) for repeatable deployments, and design disaster recovery plans against defined RTO targets.

REQUIRED TECHNICAL SKILLS:

• Landing Zone & Governance - Control Tower, Landing Zone Accelerator, AWS Organizations, Service Control Policies
• Compute & Orchestration - EC2, ECS, EKS, Lambda, Elastic Beanstalk, Auto Scaling
• Networking - VPC, Transit Gateway, Direct Connect, Route 53, PrivateLink, ELB, CloudFront

Security, Data & Operations -

• Security & Identity - IAM, GuardDuty, Security Hub, Inspector, WAF, Network Firewall, KMS, IAM Identity Center (SSO), Okta, Cognito (CIAM)
• Observability & Monitoring - CloudWatch, X-Ray, and third-party APM (New Relic, Dynatrace, Prometheus, SigNoz)
• Infrastructure as Code - Terraform and AWS CloudFormation — reusable modules, automated deployment workflows
• Systems Administration - server administration, hardening, and troubleshooting

PREFERRED CERTIFICATIONS

• AWS Certified Solutions Architect — Professional / Associate
• AWS Certified Advanced Networking — Specialty
• AWS Certified Advanced Security — Specialty

BONUS POINTS

• CONTAINER PLATFORMS - Hands-on experience with Docker and Kubernetes for containerized workloads.
• COMPLIANCE FRAMEWORKS - Experience supporting HIPAA, SOC 2, GDPR, or RBI (banking) compliance requirements.
• EMERGING PRACTICES - Exposure to FinOps, AIOps, AI-assisted DevOps, MCP servers, or Cloud Center of Excellence (CCoE) leadership.
• MULTI-CLOUD EXPOSURE - Hands-on migration experience moving workloads from Azure and/or GCP into AWS, plus rehosting on-premises VMware vSphere/ESXi and Proxmox VE virtualized environments.
• GENAI ON AWS - Exposure to Amazon Bedrock, Kendra, or Amazon Q for AI-assisted client solutions.
• REGULATED INDUSTRY DELIVERY - Proven delivery in Healthcare (HIPAA) and/or Banking & Financial Services (RBI) environments.