Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
qode.world

Cloud Migration Engineer – AWS Landing Zone, Migration

qode.world

. Design, build, and operate AWS Landing Zones for banking clients .

Posted 11/11/2026full-timeHa Noi • VietnamMid-LevelSeniorWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and operating AWS Landing Zones, managing hybrid cloud environments, and executing infrastructure migrations while ensuring compliance with security and governance standards. Proficient in automation scripting and infrastructure as code using Terraform, with a strong focus on client collaboration and risk management.

Highest-signal resume keywords
AWS Landing Zone ImplementationInfrastructure As Code (Terraform)Hybrid Cloud NetworkingMigration Strategy and ExecutionInformation Security Governance

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
AWS OrganizationsVPC/IP PlanningPython ScriptingBash ScriptingTCP/IP NetworkingVM MigrationCI/CD PipelinesControl TowerTraffic InspectionDisaster Recovery Planning
Soft Skills
Client CollaborationTechnical PresentationRisk IdentificationWritten CommunicationStakeholder Engagement
Tools & Technologies
TerraformCloudFormationAWS-native ToolsVMwareDirect ConnectTransit GatewayFlow LogsReachability AnalyzerHybrid DNSPrivateLink
Certifications & Qualifications
AWS Professional CertificationAWS Specialty CertificationISO 27001 Certification
Industry Keywords
Banking CompliancePCI DSSCircular 09/2020/TT-NHNNTechnology GovernanceInfrastructure Migration

Tech Stack

Tools & technologies
AWSCloudDNSFirewallsOraclePythonSQLTCP/IPTerraformVMware

About the role

Key responsibilities & impact
  • Design, build, and operate AWS Landing Zones for banking clients
  • Configure AWS Organizations, OUs, SCPs, Control Tower/LZA, IAM Identity Center, centralized logging, and security tooling
  • Design hybrid networking including VPC/IP planning, Transit Gateway segmentation, centralized egress, traffic inspection, Direct Connect/VPN redundancy, hybrid DNS, and PrivateLink
  • Build reusable infrastructure-as-code modules and CI/CD pipelines using Terraform or CloudFormation/CDK
  • Develop Python/Bash automation scripts
  • Assess on-premises estates, map dependencies, apply the 7Rs, and plan migration waves
  • Manage coexistence while on-premises and AWS environments run side by side
  • Migrate virtual machines, applications, and databases using third-party and AWS-native tools
  • Own migration cutovers, including runbooks, rehearsals, go/no-go decisions, and rollback
  • Validate migrated workloads, right-size for cost, establish monitoring, backup, disaster recovery, and RTO/RPO
  • Hand over migrated workloads to operations
  • Act as technical counterpart to client infrastructure, network, security, and application leads
  • Run workshops and present designs and trade-offs to technical and non-technical stakeholders
  • Guide designs and cutovers through security, risk, and change-approval processes
  • Identify risks and limitations early and provide practical mitigations
  • Maintain design documents, runbooks, and status reports
  • Support AWS partner programs including Partner Central, ACE, MAP, and MPE tagging when applicable

Requirements

What you’ll need
  • 4+ years in cloud infrastructure, infrastructure migration, or VMware administration
  • Experience setting up and operating at least one AWS Landing Zone in banking or financial services, including multi-account management
  • Strong networking and hybrid cloud skills: TCP/IP, BGP, NAT, firewalls, Transit Gateway, Direct Connect/VPN, hybrid DNS
  • Troubleshooting across on-premises and AWS using Flow Logs and Reachability Analyzer
  • Hands-on migration of VMs, applications, and databases to AWS using third-party and/or AWS-native tools
  • Understanding of migration risks including legacy or unsupported platforms, bandwidth and large data synchronization, live database replication, licensing, hard-coded IPs, hidden dependencies, and tight downtime windows
  • Infrastructure as code skills, preferably Terraform
  • Python or Bash scripting
  • Proven ownership of cutover, rollback, and go/no-go decisions
  • Confidence working directly with client technical leads
  • Good written and spoken English
  • Strong understanding of information security and technology governance
  • Experience ensuring engineering practices follow company security policies and ISO 27001-aligned procedures
  • Nice to have: Banking compliance knowledge including Circular 09/2020/TT-NHNN, PCI DSS, and ISO 27001
  • Nice to have: Amazon EVS, VMware VCF/HCX, Windows Server, Active Directory, Oracle, and SQL Server
  • Nice to have: AWS Professional or Specialty certification

Benefits

Comp & perks
  • Competitive salary, negotiable for strong candidates
  • Performance bonus
  • Referral bonus
  • Transportation allowance
  • 12 days of annual leave plus 3 emergency leave days
  • Up to 22 days of leave from the 5th year
  • Hybrid, remote-friendly, and client-site work depending on project and team setup
  • Laptop support
  • Certification and training allowance
  • 50% sponsorship for AWS Certification Vouchers
  • Clear career path with ongoing coaching
  • Open, trust-based culture with no micromanagement
  • Access to modern AI-powered tools
  • Team building activities
  • Company trips
  • Gifts for onboarding, holidays, and milestones