AWS GovCloud Cloud Migration Architect — Security & Zero Trust

Logoslabs; San Francisco (CA); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Competitive salary

Best in class medical coverage

100% of medical premiums covered

401k Program with company match

PTO 3 weeks + 11 holidays

Cell phone/Home Internet reimbursement

Parental leave

Training and certifications support

Job summary

True Zero Technologies is seeking a Cloud Migration Engineer/Architect to assess portfolios, define migration strategies using the 7 Rs, and design secure, scalable AWS GovCloud architectures for mission-critical workloads.

You will orchestrate migration waves, automate infrastructure with Terraform, and collaborate across teams to minimize downtime while ensuring security, compliance, and operational readiness.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline.
• Demonstrated experience designing and implementing AWS cloud architectures, preferably within AWS GovCloud.
• Strong understanding of enterprise application migration strategies and the 7 Rs migration framework.
• Hands-on experience with AWS migration tooling such as MGN, DMS, DataSync, Application Discovery Service, and Migration Hub.
• Experience migrating enterprise applications, servers, databases, storage platforms, and data to AWS.
• Strong experience with EC2, EKS, ECS, storage services, database services, and cloud-native application architectures.
• Experience designing hybrid cloud networking with Transit Gateway, Direct Connect, VPNs, routing, DNS, and network-security controls.
• Hands-on experience developing infrastructure using Terraform and infrastructure-as-code practices.
• Experience with Landing Zone Accelerator on AWS, AWS Organizations, account structures, guardrails, and standardized cloud foundations.
• Understanding of FIPS endpoints, encryption requirements, and secure data-transfer patterns within government cloud environments.
• Experience designing micro-segmented network architectures and security-group policies aligned with Zero Trust principles.
• Strong understanding of application dependency analysis, migration-wave planning, cutover management, rollback planning, and technical risk management.
• Experience with cloud monitoring, logging, operational readiness, backup, disaster recovery, and post-migration optimization.
• Familiarity with application modernization, containerization, managed services, and cloud-native architecture patterns.
• Experience supporting government, defense, regulated, or other compliance-driven environments is preferred.
• Strong architecture, troubleshooting, documentation, governance, stakeholder coordination, and cross-functional collaboration skills.
• Preferred Certifications: AWS Architect/DevOps/Security/Advanced Networking.

Responsibilities

• Assess enterprise application portfolios and determine the appropriate migration approach for each workload using the 7 Rs: rehost, replatform, refactor, repurchase, retire, retain, and relocate.
• Design secure, scalable, highly available AWS GovCloud architectures that meet application, mission, security, and operational requirements.
• Develop migration plans, dependency mappings, migration runbooks, cutover procedures, rollback strategies, and validation criteria.
• Use AWS migration services including AWS Application Migration Service (MGN), AWS Database Migration Service (DMS), AWS DataSync, AWS Application Discovery Service, and AWS Migration Hub.
• Migrate applications, virtual machines, databases, file systems, and enterprise data to AWS GovCloud while minimizing downtime and operational disruption.
• Design and deploy compute and container platforms using Amazon EC2, Amazon EKS, and Amazon ECS as appropriate to workload requirements.
• Plan and execute storage, database, and data migrations, including data synchronization, replication, validation, and cutover activities.
• Design hybrid and cloud networking architectures using AWS Transit Gateway, AWS Direct Connect, VPN connectivity, routing, DNS, and security controls.
• Develop and maintain infrastructure using Terraform and other approved infrastructure-as-code technologies.
• Implement standardized AWS GovCloud environments using the Landing Zone Accelerator on AWS (LZA) and approved enterprise landing-zone patterns.
• Use FIPS endpoints and approved cryptographic configurations where required by security and compliance requirements.
• Design secure approaches for on-premises-to-GovCloud data transfer, accounting for the absence of a native cross-partition transfer path where applicable.
• Implement micro-segmentation and security-group architectures aligned with Zero Trust principles and workload-specific access requirements.
• Coordinate migration waves across application, infrastructure, cybersecurity, networking, database, and business teams.
• Identify and manage migration dependencies, technical risks, business risks, outage windows, resource constraints, and remediation activities.
• Validate migrated workloads for functionality, performance, security, resilience, observability, and operational readiness before production acceptance.
• Implement monitoring, logging, alerting, backup, recovery, and operational support capabilities for migrated environments.
• Identify and execute application modernization opportunities, including containerization, managed services, automation, and cloud-native architectural improvements where appropriate.

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline

Tools

Terraform

MGN (AWS Application Migration Service)

DMS

DataSync

Application Discovery Service

Migration Hub

EC2

EKS

ECS

Job description

True Zero Technologies is seeking a Cloud Migration Engineer/Architect to assess portfolios, define migration strategies using the 7 Rs, and design secure, scalable AWS GovCloud architectures for mission-critical workloads.

You will orchestrate migration waves, automate infrastructure with Terraform, and collaborate across teams to minimize downtime while ensuring security, compliance, and operational readiness.