Hybrid Infrastructure Engineer (Cloud Migration Lead)

Federal Recovery Service, Inc.; Holladay (UT); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Health Insurance

Paid Time Off (PTO) & Holidays

401k with 4% Match

Company Wellness Program

Work-From-Home Flexibility

Access to On-Site Corporate Fitness

Job summary

Paramount is looking for a Hybrid Infrastructure Engineer to guide our transition from on-prem to a hybrid AWS-based environment. You will co-develop the cloud strategy with the VP of Technology and own the cloud architecture and migration pipeline.

You will collaborate with the On-Prem Operations Engineer to replicate workloads, ensure high availability and security, and maintain PCI-DSS Level 1 compliance across environments. Hybrid work and strong leadership are essential.

Qualifications

• 5+ years in infrastructure, with 3+ years leading AWS cloud migrations.
• 2) PCI-DSS Level 1 compliant infrastructure experience.
• 3) Proven history leading technical projects.

Responsibilities

• Architect secure, scalable AWS landing zones.
• Lead workload migration strategies to the cloud.
• Ensure high availability, security, and performance.
• Migrate Hyper-V VMs to AWS EC2 or containers.
• Establish IaC deployment standards with Terraform/CloudFormation.

Skills

Cloud leadership

Migration leadership

IaC expertise

Collaboration

Network design

Tools

AWS

Terraform

CloudFormation

Python scripting

PowerShell scripting

Veeam

Active Directory

Job description

Description

The Hybrid Infrastructure Engineer will help lead Paramount’s strategic transition from a fully on-premises footprint to a hybrid footprint with Amazon Web Services (AWS). In this role, you will partner directly with the VP of Technology to co-develop our cloud strategy, while owning the creation of the cloud architecture and migration pipeline. You will also collaborate closely with our dedicated On-Premises Systems Engineer, who manages daily local hardware operations, to safely replicate and transition workloads into a modern environment. A core focus of this role is to ensure the infrastructure is configured and maintained to meet high availability, security, and performance requirements across both environments, with strict adherence to PCI-DSS Level 1 compliance.

Requirements

Key Responsibilities

Cloud Leadership & Modernization

• Architect and build secure, scalable target AWS cloud landing zones.
• Lead the design and execution of workload migration strategies.
• Ensure the infrastructure is configured and maintained to meet high availability, security, and performance requirements.
• Migrate Hyper‑V virtual machines to AWS EC2 or container services.
• Evaluate opportunities to migrate legacy workflows directly to cloud-first technologies available in AWS.
• Establish deployment standards using Infrastructure as Code (IaC).

Compliance & Security (PCI-DSS Level 1)

• Design and enforce cardholder data environment (CDE) segmentation across hybrid zones.
• Implement strict encryption protocols for data at rest and in transit across AWS and on‑prem.
• Align AWS IAM and Windows Active Directory policies with PCI access control requirements.
• Maintain continuous logging, monitoring, and audit trails required for compliance validation.

Collaborative Hybrid Engineering

• Partner with the On‑Prem Engineer to coordinate system maintenance and local migrations.
• Collaborate on local hardware access for replication and migration tools.
• Design secure, low-latency network tunnels between local sites and AWS.
• Co‑develop business continuity plans combining Veeam and cloud-native backups.

Performance & Optimization

• Monitor and tune hybrid environments to guarantee uptime and speed.
• Optimize cloud spend and resource sizing during migration phases.
• Assist with safely decommissioning local hardware as workloads shift.

Required Technical Skills

Public Cloud & Modernization (Lead Level)

• AWS Services: Deep knowledge of EC2, VPC, IAM, S3, Route 53.
• Security & Compliance: AWS Security Hub, GuardDuty, AWS Config, IAM policies for PCI compliance.
• Cloud-First Tech: Familiarity with AWS serverless, containers, or native analytics.
• Migration Tooling: AWS Application Migration Service (MGN) or equivalent.
• Automation: Terraform, AWS CloudFormation, or Python/PowerShell scripting.

On-Premises Familiarity (Collaborative Level)

• Databases: Microsoft SQL Server administration and hosting concepts.
• Virtualization: Microsoft Hyper‑V, Failover Clustering.
• Storage & Backup: PureStorage FlashArray, Veeam Backup & Replication.
• Core Systems: Windows Server (2019/2022), Active Directory, Group Policy.

Qualifications

• Experience: 5+ years in infrastructure, with 3+ years leading AWS cloud migrations.
• Compliance Experience: Proven history building or maintaining PCI-DSS Level 1 compliant infrastructure.
• Leadership: Demonstrated success leading technical projects in a team setting.
• Certifications: AWS Certified Security - Specialty, AWS Certified Solutions Architect Professional, or AWS DevOps Engineer Professional.

Perks & Benefits:

• Health Insurance (Medical, Dental, Vision, Life)
• Paid Time Off (PTO) & Holidays
• 401k with 4% Match
• Company Wellness Program
• Free VASA Fitness Membership
• Work-From-Home Flexibility
• Access to On-Site Corporate Fitness Center