AWS Architect Application modernization

Job description

**TCS Hiring !!GCP Cloud Infrastructure & Modernization Architect** **Candidates with less experience THAN 10 years of experience need not apply** **Must have :**AWS Cloud Architect infra and modernization **Experience only 10 - 12** **Please read Job description before Applying** NOTE: If the skills/profile matches and interested, please reply to this email by attaching your latest updated CV and with below few details: Name: Contact Number: Email ID: Highest Qualification in: (Eg. B.Tech/B.E./M.Tech/MCA/M.Sc./MS/BCA/B.Sc./Etc.) Current Organization Name: **Total IT Experience-10- 12** **Chennai,** Current CTC Expected CTC Notice period: Whether worked with TCS - Y/N 2 AWS Architect Application Modernization Role Summary - Lead end-to-end modernization of enterprise applications to AWS using cloud-native and hybrid patterns. - Define target architecture, modernization roadmap, and technical governance to ensure secure, scalable, and cost-optimized solutions. - Landing zone + execution model (migration factory / waves + governance) Key Responsibilities 1) Modernization Strategy & Roadmap - Assess current-state applications (6R strategy: Rehost, Replatform, Refactor, Rearchitect, Retire, Retain). - Create modernization blueprint: target-state architecture, migration waves, dependency mapping, and cutover approach. - Define standards for cloud-native design, resilience, observability, and performance. 2) Architecture & Design - Design AWS architectures using AWS Well-Architected Framework. - Select modernization patterns: microservices, event-driven, serverless, containerization, API-led integration. - Define reference architectures for multi-account, VPC connectivity, and hybrid connectivity. 3) Migration Execution Leadership - Guide teams on replatform/refactor: compute (ECS/EKS/Lambda), data (RDS/Aurora/DynamoDB/ElastiCache), integration (API Gateway/SQS/SNS/EventBridge). - Plan and oversee application/data migration using AWS MGN, DMS, SCT and appropriate tools. - Establish release plans, rollback strategy, blue/green and canary deployments. 4) DevSecOps & Automation - Define CI/CD pipelines with IaC (CloudFormation/Terraform/CDK). - Implement security automation (least-privilege IAM, AWS Config, Security Hub, GuardDuty). - Standardize build/release templates and environment promotion. 5) Security, Compliance & Governance - Architect IAM, KMS encryption, secrets management, network security (NACL/SG), and WAF/Shield protections. - Ensure compliance with enterprise controls (logging, retention, vulnerability management, audit readiness). - Drive architecture reviews, risk assessments, and remediation plans. 6) Observability & Reliability - Establish monitoring and logging standards using CloudWatch, X-Ray, OpenSearch, and/or APM tools. - Define SLO/SLI, incident response playbooks, and reliability patterns (multi-AZ, multi-region where required). 7) Stakeholder & Team Enablement - Collaborate with product owners, engineering, security, infra, and vendor teams. - Mentor engineers; run design workshops and modernization bootcamps. - Produce architecture docs: HLD/LLD, ADRs, runbooks, and operational handover. Must-Have Skills - Strong AWS architecture experience with modernization/migration programs. - Hands-on: ECS/EKS, Lambda, API Gateway, SQS/SNS/EventBridge, RDS/Aurora/DynamoDB. - Networking: VPC, routing, Transit Gateway, PrivateLink, VPN/Direct Connect. - Security: IAM, KMS, Secrets Manager, WAF; security best practices and threat detection. - Landing zone governance: Organizations, SCPs, Control Tower, centralized logging/security accounts.” - Audit & logging: CloudTrail strategy, log aggregation/retention, evidence readiness.” - FinOps: tagging standards, budgets, rightsizing, Savings Plans/RI awareness.” - Application modernization: monolith-to-microservices, API design, caching and data modernization. - Observability: metrics/logging/tracing, dashboards, alerting. Good-to-Have - Landing zone (Control Tower/Organizations), FinOps, service mesh, event sourcing/CQRS. - Java/.NET modernization, Spring Boot, Node.js/Python. - Specialty certs (Security/Networking) a plus.