Senior AWS & Liferay Cloud Migration Engineer || Remote || 6+ months || Video

Title: Senior AWS & Liferay Cloud Migration Engineer

Location: Remote

Duration: 6+ months

MOI: Video

Project background and description:

We are seeking an experienced AWS Cloud Migration Specialist / Liferay Systems Engineer to design and execute a secure, cross-organization migration of an enterprise Liferay DXP deployment. The environment including compute, Amazon RDS database, document store (Amazon S3), search cluster (OpenSearch/Elasticsearch), and networking dependencies must be cleanly transitioned from a source AWS account owned by Company A to an isolated, greenfield AWS account owned by Company B.

The ideal contractor brings hands-on expertise in AWS cross-account data transfer patterns (IAM role trust, KMS key sharing, RDS cross-account snapshot restoration), combined with deep knowledge of Liferay runtime dependencies (document library pointers, database schemas, clustering, search indexing, and licensing).

Project scope

2.1 Discovery, Architecture & Migration Planning

• Audit existing infrastructure across both AWS accounts (VPC CIDRs, security groups, EC2/ECS/EKS instances, RDS engine/parameters, S3 buckets, Elasticsearch/OpenSearch, Route 53, and load balancers).
• Produce a detailed Migration Runbook outlining prerequisites, step-by-step technical procedures, roll-back plans, data freeze windows, and cutover checklists.
• Design destination account architecture using Infrastructure as Code (Terraform preferred), adhering to target company security, tagging, and network standards.

2.2 Cross-Account Data & Database Migration

• Establish cross-account access mechanisms (IAM assume-role policies, custom KMS CMK sharing).
• Migrate Amazon RDS (PostgreSQL/MySQL/Oracle):
• Share unencrypted snapshots or copy/re-encrypt KMS-encrypted RDS snapshots into the destination account.
• Evaluate and execute replication via native tooling, AWS Database Migration Service (AWS DMS), or logical dumps if minimal downtime is required.
• Migrate Liferay Document Library:
• Sync S3 document store assets using cross-account S3 bucket policies, AWS DataSync, or the AWS CLI (aws s3 sync).
• Verify object ownership and permissions in the target account.

2.3 Liferay DXP Application Deployment & Configuration

• Stand up Liferay compute tier in the destination AWS account (EC2 or containerized ECS/EKS).
• Reconfigure Liferay configuration properties (portal-ext.properties, OSGi configs) for new RDS endpoints, credentials, S3 buckets, and cache cluster settings.
• Provision and connect search tier (Amazon OpenSearch / standalone Elasticsearch), execute full search re-indexing, and validate search node status.
• Coordinate Liferay license activation (deploying new production licenses tied to destination server IP/MAC/cluster configurations).

2.4 Testing, Cutover & Handover

• Conduct dry-run/UAT migration in a non-production or staging target environment.
• Execute final production cutover during an approved maintenance window, including DNS updates (Route 53) and SSL/TLS certificate binding (AWS Certificate Manager).
• Validate end-to-end portal functionality: user authentication, document access, custom modules/portlets, and scheduled background tasks.
• Deliver as-built architectural diagrams, credential handoff, and provide 1 2 weeks of post-cutover hypercare support.

High-level requirements

• AWS Infrastructure & Security: Extensive experience with cross-account AWS architectures, VPC peering/Transit Gateway, Route 53, ALB/NLB, IAM cross-account roles, and AWS KMS (specifically CMK sharing and re-encryption across AWS Organizations).
• Database Migration (Amazon RDS): Demonstrated track record moving production RDS databases cross-account with minimal downtime (snapshot sharing, DMS, or native engine replication).
• Liferay DXP Expertise: Direct administration experience with Liferay DXP (versions 7.2, 7.3, or 7.4), including knowledge of:
• Database schema dependencies and connection pooling.
• Liferay Document Library storage mechanisms ( S3 Store vs. Advanced File Syste m).
• Search engine integrations ( Elasticsearch/OpenSearch ).
• Cluster cache replication (Ehcache/Infinispan) and OSGi configurations.
• Storage & Data Transfer: Proficient in AWS DataSync, cross-account S3 bucket policies, and cross-region/cross-account data integrity verification.
• Infrastructure as Code (IaC): Solid working knowledge of Terraform or AWS CloudFormation for provisioning destination infrastructure.
• Scripting & Automation: Strong proficiency in Bash and Python (boto3) for cutover automation and health checks.

Preferred Qualifications

• Official AWS Certified Solutions Architect Professional or AWS Certified DevOps Engineer.
• Direct experience handling IT separations, divestitures, or corporate carve-out migrations.
• Familiarity with third-party SSO integrations (SAML, OpenID Connect, Okta, Azure AD) linked to Liferay.

Deliverables

• | Phase 1: Discovery & Strategy | Infrastructure audit, target architecture spec, and draft Migration Runbook | Week 1 |
• | Phase 2: Target Build & Staging Test | Destination VPC/RDS/Search provisioned via IaC; dry-run migration executed | Weeks 2 3 |
• | Phase 3: Production Cutover | Final delta sync, DNS switch, verification, and go-live | Week 4 |
• | Phase 4: Hypercare & Handover | Post-launch monitoring, documentation handover, and decommissioning advice | Week 5 |

Specific exclusions from scope

The project will not include the development of new products or services.

Senior Talent Acquisition

E- View email address on us.fitly.work

STELLENT IT A Nationally Recognized Minority Certified Enterprise