Cloud Infrastructure Architect

Cloud Infrastructure Architect


Contract


Edision, NJ


We are seeking an experienced Cloud Infrastructure Architect to lead and execute AWS account migrations, Landing Zone setup, and enterprise cloud governance implementation. The role requires deep expertise in AWS multi-account architecture, security, networking, governance, and operational readiness to ensure secure, scalable, and compliant cloud environments.


The architect will work closely with security, networking, DevOps, and application teams to migrate workloads, establish governance guardrails, and ensure seamless account transitions with minimal business disruption.


Key Responsibilities

• AWS Account Migration & Setup
• Plan and execute AWS account migrations and transfers across organizations or business units.
• Migrate workloads while ensuring minimal downtime and business continuity.
• Validate migrated environments and ensure service integrity.
• Develop migration and operational runbooks.
• Landing Zone & Control Tower Implementation
• Design and implement AWS Landing Zone architecture.
• Deploy and configure AWS Control Tower environments.
• Define organizational structure with multi-account strategy.
• Implement baseline security, networking, and operational guardrails.
• Security & Encryption Management
• Create and manage AWS KMS keys.
• Handle encryption, decryption, and re-encryption of data during migration.
• Ensure encryption compliance across services.
• Implement security guardrails and governance policies.

Governance & Guardrails

• Define and implement Service Control Policies (SCPs).
• Set up compliance and governance frameworks.
• Implement enterprise cloud security standards.
• Enable automated guardrails and monitoring.

Networking & Connectivity

• Design multi-account networking architecture.
• Configure VPCs, Transit Gateways, and inter-account connectivity.
• Validate external connections and integrations.
• Ensure firewall and network security compliance.
• Monitoring & Operational Readiness
• Configure CloudWatch monitoring and alerts.
• Enable logging, monitoring, and operational dashboards.
• Ensure operational readiness with proper runbooks and support documentation.

IAM & Policy Migration

• Migrate IAM roles, users, and policies securely.
• Implement least privilege access.
• Align IAM structures with enterprise governance.
• FinOps & Cost Governance
• Enable cost allocation, tagging strategies, and budget controls.
• Implement cost monitoring and optimization practices.
• Establish governance models for spend management.
• Validation & Documentation
• Validate account migrations and environment configurations.
• Create migration validation frameworks and operational runbooks.
• Ensure operational handover readiness.

Required Skills & Experience

• Core AWS Expertise
• AWS multi-account architecture
• AWS Organizations & Control Tower
• Landing Zone implementation
• Account migration strategies
• Security & Governance
• AWS KMS encryption management
• SCP and governance frameworks
• Cloud compliance standards

Networking

• VPC architecture, routing, firewalls
• Hybrid connectivity & external integrations
• Monitoring & Operations
• CloudWatch monitoring and logging
• Incident readiness and operational processes
• Identity & Access Management
• IAM role and policy design
• Policy migration strategies

Financial Governance

• AWS cost optimization & FinOps practices

Preferred Qualifications

• AWS Certified Solutions Architect - Professional
• AWS Security Specialty Certification
• Experience in large-scale enterprise cloud migration programs
• Infrastructure automation using Terraform or CloudFormation
• Experience in regulated industry environments

Experience Required

• 10+ years IT infrastructure experience
• 5+ years AWS architecture experience
• Proven experience leading AWS migration or Landing Zone programs

Soft Skills

• Strong stakeholder communication
• Leadership and mentoring capability
• Problem-solving mindset

Documentation and governance discipline