Lansing, Michigan
Cloud Architect #1056923Job Description:
Position Overview:
We are seeking a Senior Cloud Migration Architect to embed with our development team and lead the AWS platform configuration and CI/CD automation for a large-scale enterprise cloud migration program. The program covers 30+ applications across migration approaches such as Elastic Beanstalk, Amazon EKS, EC2/Cloud VM - to be delivered across multiple sprints. The contractor will own the technical configuration of AWS services for each migration pattern, design and build Azure DevOps (ADO) pipelines that integrate with ArgoCD or Flux for GitOps driven deployments to EKS, and partner closely with application teams, the AWS Infrastructure Team, and the DBA team to deliver production-ready environments sprint by sprint. This is a hands-on, deeply technical role for someone who can move fast, write production-grade IaC, debug across the stack, and mentor application developers and administrators on cloud-native patterns.
Key Responsibilities:
- AWS Platform Configuration
- Configure and tune AWS Elastic Beanstalk environments for applications across Dev, Test, and Prod, including platform versions, scaling policies, environment variables, and rolling deployment configuration
- Stand up and operate Amazon EKS clusters across Dev/Test/Prod for containerized workloads, including node groups, cluster autoscaling, ingress controllers, and namespace strategy
- Provision and harden EC2/Cloud VM environments, including AMI selection, instance sizing, OS-level configuration, and patching strategy
- Partner with the DBA team on Amazon RDS setup for SQL Server and PostgreSQL including parameter groups, subnet groups, backup policies, and Multi-AZ configuration
- Design VPC networking, security groups, IAM roles/policies, KMS keys, and Secrets Manager integration following least-privilege principles
- Build infrastructure-as-code (Terraform preferred; CloudFormation acceptable) so every environment is reproducible and auditable
- CI/CD & GitOps
- Design and build Azure DevOps build and release pipelines tailored to each migration pattern:
- EB pattern: source build → artifact → eb deploy to environment per stage
- EKS pattern: Docker build → ECR push → manifest/Helm chart update → GitOps sync via ArgoCD or Flux
- EC2 pattern: build → AMI bake or aws-deploy → blue/green or rolling release
- In-place upgrade pattern: validation, packaging, and controlled deployment to existing servers
- Implement GitOps using ArgoCD or Flux for EKS workloads - pull-based deployments, automated drift detection, app-of-apps or kustomize/helm patterns, multi-cluster or multi-namespace promotion
- Establish promotion strategy across Dev to Test to Prod with appropriate gates, approvals, and rollback mechanisms
- Standardize pipeline templates (YAML) so application teams can self-onboard new services consistently
- Integrate static analysis, container scanning (Trivy/ECR scan), SAST/DAST hooks, and artifact provenance into the pipeline
- Design and build Azure DevOps build and release pipelines tailored to each migration pattern:
- Observability & Reliability
- Configure CloudWatch logs, metrics, alarms, and dashboards for each workload
- Define SLOs, alerting thresholds, and incident response runbooks for production cutover events
- Documentation & Hand-off
- Produce architecture decision records (ADRs), runbooks, and operational procedures so workloads can be supported by the long-term operations team
- Maintain a clean, versioned IaC repository as the source of truth for all environments
- Collaboration
- Work daily with application development teams, AWS Infrastructure Team, DBA Team, and Tech Leads
- Pair with developers to debug cloud-specific issues (cold starts, container OOMs, RDS connectivity, IAM denials)
Required Qualifications:
- 5-6+ years hands-on experience building and operating production workloads on AWS, with deep knowledge of Elastic Beanstalk, EKS, EC2, RDS, VPC, IAM, S3, CloudWatch, and Secrets Manager
- 3+ years hands-on with Kubernetes - production EKS preferred, including Helm, kubectl, ingress (ALB/NGINX), HPA, and troubleshooting pods/services/networking
- Production experience with ArgoCD or Flux - designed app-of-apps structure, managed multi-environment promotion, and resolved GitOps drift in real workloads. This is non-negotiable.
- Strong Azure DevOps Pipelines (YAML) experience - build pipelines, multi- stage release pipelines, variable groups, service connections, and self- hosted/Microsoft-hosted agents. Equivalent strong experience in another major CI/CD tool (GitHub Actions, GitLab CI, Jenkins) is acceptable if Azure DevOps can be picked up quickly
- Solid Docker skills - multi-stage builds, image hardening, ECR
- Infrastructure-as-Code in production: Terraform (preferred) or CloudFormation/CDK
- Database familiarity - comfortable working with DBA teams on RDS (SQL Server and PostgreSQL), connection strings, secrets rotation, and migration cutover
- Linux administration (RHEL/Amazon Linux/Ubuntu) and shell scripting (bash)
- Source control with Git - branching strategies, pull requests, code review discipline
- Strong written communication - must produce clear runbooks, architecture diagrams, and PR descriptions
Preferred Qualifications:
- AWS certifications: AWS Certified Solutions Architect - Professional or DevOps Engineer - Professional
- CKA / CKAD (Certified Kubernetes Administrator/Developer)
- Experience migrating .NET and Java applications from on-premises to AWS
- Experience operating COTS products in containerized or cloud environments
- Experience with service mesh (Istio, App Mesh) or API gateways
- Exposure to HashiCorp Vault, secrets rotation, and certificate management
- Familiarity with DataDog, New Relic, or Splunk in addition to native AWS observability
- Experience with blue/green and canary deployment patterns
Additional Info:
At FastTek Global, Our Purpose is Our People and Our Planet. We come to work each day and are reminded we are helping people find their success stories. Also, Doing the right thing is our mantra. We act responsibly, give back to the communities we serve and have a little fun along the way.
We have been doing this with pride, dedication and plain, old-fashioned hard work for 24 years!
FastTek Global is a financially strong, privately held company that is 100% consultant and client focused.
We've differentiated ourselves by being fast, flexible, creative and honest. Throw out everything you've heard, seen, or felt about every other IT Consulting company. We do unique things and we do them for Fortune 10, Fortune 500, and technology start-up companies.
Our benefits are second to none and thanks to our flexible benefit options you can choose the benefits you need or want, options include:
- Medical and Dental (FastTek pays majority of the medical program)
- Vision
- Personal Time Off (PTO) Program
- Long Term Disability (100% paid)
- Life Insurance (100% paid)
- 401(k) with immediate vesting and 3% (of salary) dollar-for-dollar match
Plus, we have a lucrative employee referral program and an employee recognition culture.
FastTek Global was named one of the Top Work Places in Michigan by the Detroit Free Press in 2013, 2014, 2015, 2016, 2017, 2018, 2019, 2020, 2021, 2022, and 2023!
To view all of our open positions go to: https://www.fasttek.com/fastswitch/findwork
Follow us on Twitter: https://twitter.com/fasttekglobal
Follow us on Instagram: https://www.instagram.com/fasttekglobal
Find us on LinkedIn: https://www.linkedin.com/company/fasttek
You can become a fan of FastTek on Facebook: https://www.facebook.com/fasttekglobal/
AI & Hiring Disclosure
We use AI tools to support parts of our hiring process, such as reviewing applications and identifying potential matches. These tools are designed to promote efficiency, consistency, and fairness, and they are always used under human oversight.
All personal data collected is used solely for recruitment purposes, and you have the right to know, access, or request deletion of your data at any time, subject to legal limits.
If AI will be used in a video interview, you'll be informed in advance and asked for your consent, with the option to opt out.
Our tools are regularly reviewed to detect potential bias and to ensure compliance with all applicable laws and our commitment to inclusive hiring.
To learn more or exercise your rights, please contact us at info@fasttek.com.