Create infrastructure inventories, dependency maps, architecture diagrams, and configuration baselines.
Compare deployed infrastructure against available documentation and identify configuration and documentation gaps.
Identify technical debt, obsolete resources, configuration drift, security risks, and opportunities for standardization.
Develop As-Is and To-Be architecture documentation and provide recommendations for modernization and optimization.
Support migration and modernization initiatives involving rehost, replatform, refactor, or cloud-native transformation.
Work closely with application, DevOps, SRE, security, network, and cloud architecture teams.
Create detailed handover documentation, runbooks, deployment procedures, and operational support documentation.
Qualifications
Required
6–10+ years of overall experience with 4+ years of hands-on AWS experience.
Strong hands-on experience with AWS cloud architecture and administration, particularly EC2, VPC, IAM, S3, RDS, Lambda, ECS/EKS, ELB/ALB, Route 53, CloudWatch, CloudTrail, KMS, Secrets Manager, Systems Manager, and API Gateway.
Strong Terraform experience; CloudFormation and/or CDK experience is beneficial.
Experience with Git, GitHub, GitLab, Jenkins, AWS CodePipeline, and CodeBuild for CI/CD automation.
Docker and Kubernetes/EKS experience, including the ability to analyze existing workloads, manifests, Helm configurations, and service dependencies.
Proficiency in scripting languages such as Python, Bash, and/or PowerShell for discovery, inventory collection, and automation.
Strong networking knowledge including VPCs, subnets, routing, security groups, NACLs, Transit Gateway, VPN, Direct Connect, DNS, and load balancing.
Security expertise with IAM policies and roles, KMS, Secrets Manager, security controls, logging, auditing, and least-privilege principles.
Experience with CloudWatch, CloudTrail, and centralized logging/monitoring solutions.
Demonstrated strength in reverse-engineering unfamiliar AWS environments with limited documentation.
Ability to trace infrastructure and application dependencies.
Skill in reading and interpreting existing Terraform, CloudFormation, scripts, and pipeline code.
Ability to determine how manually created AWS resources were configured.
