EU remote
Cloud Migration Engineer (AWS Landing Zone & Migration)
About this role
About us CoderPush is a remote-first technology company that partners with startups and global businesses to build scalable, high-quality software products. We focus on long-term collaboration, clear communication, and delivering real impact through strong engineering and product thinking. Please find more at: https://coderpush.com/ About the Role You will design, build and operate AWS Landing Zones and migrate enterprise workloads (virtual machines, applications and databases) from on-premises to AWS for banking and financial-services clients .
This is a hybrid role: roughly 50% hands-on delivery and 50% client-facing work as the technical counterpart to the client's infrastructure, security and application teams. What You Will Do Hands-on delivery (~50%) Build and operate AWS Landing Zones for banking clients: Organizations, OUs, SCPs, Control Tower / LZA, IAM Identity Center integrated with the bank's Active Directory, centralized logging and security tooling (CloudTrail, Config, GuardDuty, Security Hub).
Design hybrid networking: VPC and IP planning (IPAM), Transit Gateway segmentation, centralized egress and traffic inspection, Direct Connect / VPN with redundancy, hybrid DNS (Route 53 Resolver), PrivateLink. Automate as code: reusable Terraform (or CloudFormation/CDK) modules, CI/CD pipelines, Python/Bash scripting. Assess on-premises estates (RVTools, AWS Transform for VMware, Migration Hub), map dependencies, apply the 7Rs and plan migration waves, including coexistence while on-premises and AWS run side by side.
Migrate VMs, applications and databases with third-party tools (e.g. Carbonite, Zerto, RiverMeadow, VMware HCX, Veeam, Oracle GoldenGate, Qlik Replicate) and AWS-native services (MGN, DMS, SCT). Own cutover — runbooks, rehearsals, go/no-go, rollback — then validate workloads, right-size for cost, set up monitoring, backup and DR (RTO/RPO), and hand over to operations. Client-facing (~50%) Act as the technical counterpart to the client's infrastructure, network, security and application leads.
Run workshops and present designs and trade-offs to both technical and non-technical stakeholders. Take designs and cutovers through the bank's security, risk and change-approval (CAB) processes. Flag risks and limitations early with practical mitigations; keep design docs, runbooks and status reports current. Support AWS partner programs when applicable (Partner Central, ACE, MAP, MPE tagging). What We Are Looking For 4+ years in cloud infrastructure, infrastructure migration or VMware administration.