Sr Cloud Engineer- Infrastructure

megazone; Town of Texas (WI); On-site; USD 140,000 - 170,000; Full time

Job summary

Megazone Cloud is seeking a seasoned Cloud Engineer to design and operate secure AWS foundations and execute large-scale migrations from on-premise and VMware environments.

You will implement Control Tower, Landing Zone Accelerator, and multi-account architectures, while guiding migration strategies, automating workflows, and ensuring cost efficiency. Strong AWS, IaC, and virtualization experience are required.

Qualifications

• 6-10 years experience designing and operating infrastructure with deep hands-on AWS experience.
• Bachelor's degree in Computer Science or related field is required.
• Hands-on experience building AWS foundational environments - Control Tower, LZA, Organizations, and multi-account architecture.
• Demonstrated experience with cloud migrations; multi-wave migrations are a strong plus.
• Practical experience with rehost and replatform migrations and advising the right approach per workload.
• VMware background is a plus (vSphere/vCenter, ESXi, VM administration).

Responsibilities

• Design and deploy AWS foundational environments using Control Tower and LZA.
• Define and implement multi-account strategy with AWS Organizations, OU structure, and centralized logging and security tooling.
• Implement IAM and Identity Center, guardrails, and security baselines across accounts.
• Lead discovery of on-premises estates, dependency mapping, and migration wave planning.
• Determine migration strategy per workload—rehost or replatform—balancing speed and cost.
• Perform lift-and-shift replication of VMs into EC2 with image conversion and OS remediation.
• Replatform workloads onto managed AWS services (RDS, ALB/NLB, CloudFront).
• Automate migration workflows with AWS Transform, Lambda, and Step Functions.
• Design hybrid connectivity (Direct Connect, VPN, Transit Gateway) and integrate AD.
• Provision VPC, compute, storage, and DB via Terraform and CDK.
• Develop and maintain pipeline automation for infra and app deployments.
• Configure logging, metrics, tracing, and alerting with SRE practices.
• Produce design documents, runbooks, diagrams, and handover guides.

Skills

AWS foundational architecture

Cloud migration experience

IaC: Terraform & AWS CDK

Scripting: Python/Bash/PowerShell

Linux/Windows Server administration

CI/CD pipelines & DevSecOps

Documentation & customer-facing comms

Education

Bachelor's degree in Computer Science or similar

Tools

AWS Control Tower

Landing Zone Accelerator (LZA)

AWS Organizations

IAM and Identity Center

Terraform

AWS CDK

VMware (vSphere/vCenter/ESXi)

AWS Transform

DMS / DataSync / Snow Family

Job description

About the Role

Our Cloud Engineers design, build, and support secure, high-availability AWS environments that power our customer's transformation initiatives. Working within cross-functional delivery teams, you'll establish AWS foundational architecture - Control Tower, Landing Zone Accelerator, and multi-account strategy - and migrate on-premises and VMware-based estates onto that foundation, meeting rigorous performance, security, and cost-efficiency targets.

Key Responsibilities

• Design and deploy AWS foundational environments using Control Tower and Landing Zone Accelerator (LZA).

• Define and implement multi-account strategy - AWS Organizations, OU structure, account vending, SCPs, and centralized logging and security tooling.

• Implement IAM and Identity Center, guardrails, and security baselines across the account structure.

• Lead discovery and assessment of on-premises estates - application dependency mapping, right-sizing analysis, and migration wave planning.

• Determine and execute the appropriate migration strategy per workload - rehost (lift-and-shift) and replatform - balancing speed, risk, and long-term operating cost.

• Perform lift-and-shift replication of on-premises and VMware-based virtual machines into EC2, including image conversion and OS/driver remediation.

• Replatform workloads onto managed AWS services - migrating self-managed databases to RDS, load balancers to ALB/NLB, and static content delivery to CloudFront.

• Apply agentic and automated migration tooling, including AWS Transform, to accelerate VMware discovery, network conversion, and wave execution at scale.

• Design and build hybrid connectivity - Direct Connect, Site-to-Site VPN, Transit Gateway, DNS, and Active Directory integration.

• Provision and configure VPC networking, compute, storage, and database services using Terraform and AWS CDK.

• Automate operational and migration workflows using Lambda and Step Functions.

• Execute storage and database migrations (DMS, DataSync, Storage Gateway, Snow Family) and validate data integrity.

• Develop and maintain pipeline automation for infrastructure and application deployments.

• Configure logging, metrics, tracing, and alerting - apply SRE practices to migrated workloads.

• Produce cost-and-capacity reports with FinOps tooling; drive post-migration cost optimization.

• Produce well-structured design documents, migration runbooks, diagrams, and hand-over guides.

AWS Foundational & Migration Tools

Foundation

• AWS Control Tower - Automated landing zone setup and account governance.

• Landing Zone Accelerator (LZA) - Deployable foundational architecture for regulated and complex environments.

• AWS Organizations / Identity Center - Multi-account structure, OUs, SCPs, and centralized identity.

Migration

• AWS Transform - Agentic AI-driven acceleration of VMware migration workflows.

• AWS Migration Hub - Centralized tracking of migration progress.

• AWS Application Migration Service (MGN) - Lift-and-shift replication of VMs to EC2.

• VM Import/Export - Converting VM images.

• AWS Application Discovery Service - Inventory and dependency mapping of source environments.

• AWS Database Migration Service (DMS) - Homogeneous and heterogeneous database migration.

• AWS DataSync / Storage Gateway / Snow Family - Bulk and hybrid data transfer.

Target Platform Services

• EC2, EBS, S3, EFS/FSx - Compute and storage for migrated workloads.

• RDS / Aurora - Managed relational databases for replatformed workloads.

• ALB / NLB / Route 53 - Application and network load balancing, DNS, and traffic management.

• CloudFront - Content delivery and edge caching.

• Lambda / Step Functions - Serverless automation and workflow orchestration.

• CloudWatch / CloudTrail / Systems Manager - Observability, audit, and fleet operations.

Qualifications

• 6-10 years experience designing and operating infrastructure, with deep hands-on AWS experience.

• Bachelor's degree in Computer Science, or similar.

• Hands-on experience building AWS foundational environments - Control Tower, Landing Zone Accelerator, AWS Organizations, and multi-account architecture.

• Demonstrated experience with cloud migrations; large-scale, multi-wave migrations a strong plus.

• Practical experience executing rehost and replatform migrations, and the judgment to recommend the right approach per workload.

• VMware background a plus (vSphere/vCenter, ESXi, virtual machine administration).

• Hands-on experience with AWS Migration Hub, AWS Application Migration Service (MGN), and VM Import/Export.

• Hands-on experience with core AWS services including EC2, S3, RDS, ALB/NLB, CloudFront, Lambda, and Step Functions.

• Strong AWS networking fundamentals - VPC design, routing, Transit Gateway, Direct Connect/VPN, and DNS.

• Experience with Infrastructure as Code (IaC) - Terraform and AWS CDK - and at least one scripting language (Python, Bash, or PowerShell).

• Solid Linux and/or Windows Server administration background.

• Experience building CI/CD pipelines and integrating DevSecOps controls.

• Familiarity with monitoring/observability stacks and incident-management processes.

• Strong troubleshooting, documentation, and customer-facing communication skills.

• Working knowledge of container runtime fundamentals and application modernization patterns.

• Knowledge of compliance frameworks (SOC 2, HIPAA, PCI) and security hardening.

• Experience or strong working knowledge of AWS Transform for VMware is a significant plus.

AWS certification required: AWS Solutions Architect - Professional.

Why You'll Love It Here

• Our Product is Our People: We live by this. We invest in people who invest in themselves. Your growth is our growth.

• True Servant Leadership: Our CTO leads with a "force multiplier" philosophy. Management is here to empower you and clear roadblocks, not to micromanage. We won't ask you to do anything we're not willing to do ourselves.

• Flat Organization, Real Impact: Your voice and designs will directly shape our technical roadmap and our clients' success. You'll work on the latest tech to solve real problems.

• A "Learn-from-it" Culture: We're moving fast and building new things. We believe mistakes are learning opportunities, not failures.

Megazone Cloud is an Equal Opportunity Employer and participates in E-Verify to confirm the employment eligibility of all new hires.