Cloud Infrastructure Engineer / Architect (R-00199)

True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.

The Cloud Migration Engineer / Architect assesses application portfolios, defines migration strategies for individual workloads using the 7 Rs of cloud migration, and designs secure, scalable architectures within AWS GovCloud. The role is responsible for planning and executing application and data migrations, automating infrastructure deployment, coordinating migration waves, minimizing downtime, and managing technical and business risk throughout the migration lifecycle.

This position ensures migrated environments meet applicable security, compliance, performance, resiliency, and operational requirements. The engineer/architect will also support modernization initiatives, enterprise migration governance, Zero Trust architecture, secure connectivity between on-premises environments and AWS GovCloud, and standardized cloud landing-zone patterns.

Job Responsibilities

• Assess enterprise application portfolios and determine the appropriate migration approach for each workload using the 7 Rs: rehost, replatform, refactor, repurchase, retire, retain, and relocate.
• Design secure, scalable, highly available AWS GovCloud architectures that meet application, mission, security, and operational requirements.
• Develop migration plans, dependency mappings, migration runbooks, cutover procedures, rollback strategies, and validation criteria.
• Use AWS migration services including AWS Application Migration Service (MGN), AWS Database Migration Service (DMS), AWS DataSync, AWS Application Discovery Service, and AWS Migration Hub.
• Migrate applications, virtual machines, databases, file systems, and enterprise data to AWS GovCloud while minimizing downtime and operational disruption.
• Design and deploy compute and container platforms using Amazon EC2, Amazon EKS, and Amazon ECS as appropriate to workload requirements.
• Plan and execute storage, database, and data migrations, including data synchronization, replication, validation, and cutover activities.
• Design hybrid and cloud networking architectures using AWS Transit Gateway, AWS Direct Connect, VPN connectivity, routing, DNS, and security controls.
• Develop and maintain infrastructure using Terraform and other approved infrastructure-as-code technologies.
• Implement standardized AWS GovCloud environments using the Landing Zone Accelerator on AWS (LZA) and approved enterprise landing-zone patterns.
• Use FIPS endpoints and approved cryptographic configurations where required by security and compliance requirements.
• Design secure approaches for on-premises-to-GovCloud data transfer, accounting for the absence of a native cross-partition transfer path where applicable.
• Implement micro-segmentation and security-group architectures aligned with Zero Trust principles and workload-specific access requirements.
• Coordinate migration waves across application, infrastructure, cybersecurity, networking, database, and business teams.
• Identify and manage migration dependencies, technical risks, business risks, outage windows, resource constraints, and remediation activities.
• Validate migrated workloads for functionality, performance, security, resilience, observability, and operational readiness before production acceptance.
• Implement monitoring, logging, alerting, backup, recovery, and operational support capabilities for migrated environments.
• Identify and execute application modernization opportunities, including containerization, managed services, automation, and cloud-native architectural improvements where appropriate.

Job Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline.
• Demonstrated experience designing and implementing AWS cloud architectures, preferably within AWS GovCloud.
• Strong understanding of enterprise application migration strategies and the 7 Rs migration framework.
• Hands-on experience with AWS migration tooling such as MGN, DMS, DataSync, Application Discovery Service, and Migration Hub.
• Experience migrating enterprise applications, servers, databases, storage platforms, and data to AWS.
• Strong experience with EC2, EKS, ECS, storage services, database services, and cloud-native application architectures.
• Experience designing hybrid cloud networking with Transit Gateway, Direct Connect, VPNs, routing, DNS, and network-security controls.
• Hands-on experience developing infrastructure using Terraform and infrastructure-as-code practices.
• Experience with Landing Zone Accelerator on AWS, AWS Organizations, account structures, guardrails, and standardized cloud foundations.
• Understanding of FIPS endpoints, encryption requirements, and secure data-transfer patterns within government cloud environments.
• Experience designing micro-segmented network architectures and security-group policies aligned with Zero Trust principles.
• Strong understanding of application dependency analysis, migration-wave planning, cutover management, rollback planning, and technical risk management.
• Experience with cloud monitoring, logging, operational readiness, backup, disaster recovery, and post-migration optimization.
• Familiarity with application modernization, containerization, managed services, and cloud-native architecture patterns.
• Experience supporting government, defense, regulated, or other compliance-driven environments is preferred.
• Strong architecture, troubleshooting, documentation, governance, stakeholder coordination, and cross-functional collaboration skills.

Preferred Certifications

• AWS Certified Solutions Architect – Professional
• AWS Certified DevOps Engineer – Professional
• AWS Certified Advanced Networking – Specialty
• AWS Certified Security – Specialty

We’re actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member, you'll enjoy:

• Competitive salary, paid twice per month
• Best in class medical coverage
• 100% of medical premiums covered by True Zero
• Company wide new business incentive programs
• Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)
• 3 weeks of PTO starting + 11 Paid Holidays Annually
• 401k Program with 100% company match on the first 4%
• Monthly reimbursement of Cell Phone and Home Internet costs
• Paternity/Maternity Leave
• Investment in training and certifications to broaden and deepen your technical skills