Sr. Cloud Engineer | AWS Landing Zone Build & Migration (ECS/Fargate, CloudFormation)

We are working with a highly regulated, CMMC Compliant environment. We are seeking only US Citizens for consideration for this role. About the project We're building a production-ready AWS landing zone and executing a Wave 1 migration of five applications as part of a Microsoft-to-AWS modernization. The target architecture uses ECS/Fargate for containerized .NET services, RDS SQL Server Multi-AZ, S3 and CloudFront for Angular frontends, and an AWS Landing Zone Accelerator foundation aligned to regulated cloud security requirements. Infrastructure is provisioned with CloudFormation, with CI/CD through GitHub Actions. You'll work alongside a Cloud Architect who owns the design; you'll own the hands-on implementation and migration execution. What you'll do • Deploy and configure the AWS Landing Zone Accelerator and align AWS Organizations and account structure. • Provision infrastructure with CloudFormation, including networking, VPCs, subnets, routing, Transit Gateway hub-and-spoke, and hybrid connectivity. • Implement identity and access, including IAM Identity Center SSO integration with Entra ID and base IAM roles, including break-glass access. • Stand up logging, monitoring, and security baselines, including CloudTrail, CloudWatch, AWS Config, Security Hub, GuardDuty, KMS encryption, Security Groups, and Network Firewall. • Build CI/CD pipelines in GitHub Actions for infrastructure and application deployments. • Containerize .NET services to ECS/Fargate, deploy Angular SPAs to S3/CloudFront, and migrate databases to RDS SQL Server Multi-AZ. • Execute test migrations and Wave 1 cutover; validate functionality, performance, connectivity, and OIDC/auth flows; set up alerting and operational runbooks. Required skills • Six or more years of cloud engineering experience with strong, current hands-on AWS delivery experience. • CloudFormation for production Infrastructure-as-Code; LZA experience is a strong plus. • ECS/Fargate and container workflows using Docker. • RDS SQL Server Multi-AZ migration. • AWS networking: VPC, Transit Gateway, security groups, VPN, and hybrid connectivity. • IAM, IAM Identity Center SSO, and Entra ID integration. • CI/CD with GitHub Actions; scripting with PowerShell, Bash, or Python. • Observability and security tooling: CloudWatch, CloudTrail, AWS Config, Security Hub, GuardDuty, and KMS. Nice to have • Containerizing .NET Framework, modern .NET, and IIS apps. • Experience with regulated or compliance-driven AWS environments. • S3/CloudFront hosting for Angular SPAs, AWS Backup, and multi-region disaster recovery replication. Engagement details • Approximately two hundred thirty to two hundred fifty hours. • Ramps from partial allocation to full-time during build and migration. • Remote. To apply Please include: (1) a recent AWS landing zone or migration you implemented (CloudFormation + ECS/Fargate especially relevant), (2) your AWS certifications, (3) a brief note on relevant .NET/SQL Server containerization or migration work, and (4) your hourly rate and weekly availability. Proof of US Citizenship is required.