Demonstrates expertise in designing and operating AWS Landing Zones, managing hybrid cloud environments, and executing infrastructure migrations while ensuring compliance with banking regulations. Proficient in automation using Infrastructure as Code and scripting languages, with a strong focus on security and governance.

Highest-signal resume keywords

AWS Landing Zone ImplementationInfrastructure As Code (Terraform)Hybrid Cloud NetworkingMigration Strategy DevelopmentInformation Security Governance

Tech Stack

Tools & technologies

AWSCloudDNSFirewallsOraclePythonSQLTCP/IPTerraformVMware

About the role

Key responsibilities & impact

Design, build and operate AWS Landing Zones for banking clients
Manage AWS Organizations, OUs, SCPs, Control Tower/LZA, IAM Identity Center integration with Active Directory, centralized logging and security tooling
Design hybrid networking including VPC and IP planning, Transit Gateway segmentation, centralized egress, traffic inspection, Direct Connect/VPN redundancy, hybrid DNS, and PrivateLink
Automate infrastructure using reusable Terraform or CloudFormation/CDK modules, CI/CD pipelines, and Python/Bash scripting
Assess on-premises estates, map dependencies, apply the 7Rs, and plan migration waves
Manage coexistence while on-premises and AWS environments run side by side
Migrate virtual machines, applications, and databases using third-party and AWS-native tools
Own cutovers, including runbooks, rehearsals, go/no-go decisions, rollback, workload validation, cost right-sizing, monitoring, backup, disaster recovery, and operational handover
Act as the technical counterpart to client infrastructure, network, security, and application leads
Run workshops and present designs and trade-offs to technical and non-technical stakeholders
Guide designs and cutovers through security, risk, and CAB change-approval processes
Identify risks and limitations early and provide practical mitigations
Maintain design documents, runbooks, and status reports
Support AWS partner programs including Partner Central, ACE, MAP, and MPE tagging when applicable

Requirements

What you’ll need

4+ years in cloud infrastructure, infrastructure migration or VMware administration
Set up and operated at least one AWS Landing Zone in banking or financial services, including multi-account management
Strong networking and hybrid cloud skills: TCP/IP, BGP, NAT, firewalls, Transit Gateway, Direct Connect/VPN, hybrid DNS
Experience troubleshooting across on-premises and AWS using Flow Logs and Reachability Analyzer
Hands-on migration of VMs, applications and databases to AWS using third-party and/or AWS-native tools
Understanding of migration risks including legacy or unsupported platforms, bandwidth and large data sync, live database replication (CDC), licensing, hard-coded IPs, hidden dependencies, and tight bank downtime windows
Infrastructure as code, preferably Terraform
Python or Bash scripting
Proven ownership of cutover, rollback and go/no-go decisions
Confident working directly with client technical leads
Good written and spoken English
Strong understanding of information security and technology governance
Experience ensuring engineering practices follow company security policies and ISO 27001-aligned procedures
Nice to have: Banking compliance knowledge including Circular 09/2020/TT-NHNN, PCI DSS, and ISO 27001
Nice to have: Amazon EVS, VMware VCF/HCX, Windows Server, Active Directory, Oracle, and SQL Server
Nice to have: AWS Professional or Specialty certification

Benefits

Comp & perks

Performance bonus
Referral bonus
Transportation allowance
12 days of annual leave plus 3 emergency leave days
Up to 22 days of leave from the 5th year
Hybrid and remote-friendly working arrangement
Client-site work when needed, depending on the project and team setup
Laptop support
Certification and training allowance
50% sponsorship for AWS Certification Vouchers
Clear career path with ongoing coaching
Open, trust-based culture with no micromanagement
Access to modern AI-powered tools
Team building activities
Company trips
Gifts for onboarding, holidays, and milestones

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AWS OrganizationsTerraformPython ScriptingBash ScriptingTCP/IPBGPNATDirect ConnectVM MigrationDatabase Migration

Soft Skills

Client CommunicationTechnical PresentationRisk IdentificationDecision MakingCollaboration

Tools & Technologies

AWS Control TowerIAM Identity CenterFlow LogsReachability AnalyzerActive DirectoryOracleSQL ServerVMware VCF/HCXAmazon EVS

Certifications & Qualifications

AWS Professional CertificationAWS Specialty CertificationISO 27001 Certification

Industry Keywords

Banking CompliancePCI DSSCircular 09/2020/TT-NHNNTechnology GovernanceDisaster Recovery