Cloud Migration Engineer

Project Role : Cloud Migration Engineer
Project Role Description : Provides assessment of existing solutions and infrastructure to migrate to the cloud. Plan, deliver, and implement application and data migration with scalable, high-performance solutions using private and public cloud technologies driving next-generation business outcomes.
Must have skills : Cloud Network Implementation
Good to have skills : NA
Minimum 5 year(s) of experience is required
Educational Qualification : 15 years full time education

Role Overview
The Cloud Network Sr. Analyst Engineer is a senior hands-on engineer responsible for designing, implementing, and optimizing advanced network architectures across hybrid and multi-cloud environments including AWS, Azure, GCP, and OpenShift (OCP).
This role goes beyond traditional cloud networking by leveraging AI / GenAI and Agentic AI frameworks to design intelligent, automated, and self-optimizing network solutions. The engineer collaborates closely with architects, DevOps, security, and application teams to deliver resilient, scalable, and AI-assisted network platforms aligned with enterprise standards.

Key Responsibilities
- Lead implementation of advanced cloud networking solutions, including:
- Transit Gateways
- Global VPC/VNet peering
- Hybrid and multi-cloud interconnects
- Design and build AI-assisted network solutions for routing optimization, fault detection, and performance tuning.
- Translate High-Level Designs (HLDs) into actionable Low-Level Designs (LLDs) and implementation plans.
- Lead deployment and troubleshooting of:
- Network Virtual Appliances (NVAs)
- Firewalls
- SD-WAN and routing components
- Perform capacity planning and traffic analysis, using AI/ML insights to predict growth and optimize performance.
- Lead resolution of high-impact network incidents, including RCA and post-incident improvements.
- Ensure security, compliance, and governance controls are embedded into network implementations.
- Mentor junior engineers and contribute to standardization and knowledge sharing.

Cloud-Native & Virtual Network Architecture
- Design and implement cloud-native networking constructs:
- VPC / VNet / GCP VPC
- Subnets, routing tables, gateways
- Segmentation and isolation strategies
- Validate and peer-review LLDs for operational feasibility and scalability.
- Implement and test virtual networking components across regions and accounts.
- Ensure network architectures support AI/ML workloads, latency-sensitive applications, and high-throughput data paths.

Hybrid Connectivity & Third-Party Integration
- Deploy and optimize:
- Site-to-Site VPN, Client VPN, Direct Connect/ExpressRoute/Cloud Interconnect
- Integrate third-party NVAs:
- Firewalls,SD-WAN,Proxies
- Validate encryption, authentication, routing policies, and failover mechanisms.
- Coordinate with vendors and partners for issue resolution and optimization.

DevOps for Network Automation (AI-Augmented)
- Develop and maintain Infrastructure as Code (IaC) for network provisioning using:
- Terraform, Ansible, CloudFormation / ARM / Bicep
- Integrate network automation into CI/CD pipelines.
- Review IaC developed by junior engineers for Accuracy, Scalability, Security compliance
- Use AI/GenAI tools to Validate configurations, detect drift, Recommend optimization actions

Troubleshooting & Performance Engineering
- Lead troubleshooting of complex hybrid and multi-cloud network issues.
- Perform diagnostics using Flow logs, Packet captures, Telemetry and monitoring tools
- Implement AI-driven performance tuning strategies based on traffic patterns and latency metrics.
- Author RCA reports and continuously improve network reliability.

Load Balancing & Content-Based Routing
- Implement and manage ALB / NLB/Azure Application Gateway/GCP Load Balancers
- Configure advanced routing Path-based routing, Header-based routing, iRules
- Validate routing logic against application and security requirements.

Configuration Discovery & Translation
- Analyze existing firewall rules, NAT policies, and load balancer configurations.
- Translate legacy configurations into cloud-native equivalents.
- Maintain version-controlled repositories of network configurations.
- Use Python and AI-assisted automation for configuration discovery and migration.

Compliance & Configuration Consistency
- Ensure network implementations meet enterprise compliance and regulatory requirements.
- Implement tagging, logging, and policy enforcement mechanisms.
- Detect configuration drift and enforce consistency across environments.
- Collaborate with governance and security teams for audit readiness.

AI / GenAI & Agentic Networking
- Use Generative AI to:
- Analyze network telemetry
- Assist in design decisions
- Recommend routing and segmentation strategies
- Hands-on experience with:
- LLMs
- Embeddings
- Vector databases
- Apply Agentic AI frameworks to:
- Automate diagnostics
- Trigger self-healing actions
- Optimize network operations
- Strong understanding of:
- AI lifecycle
- ML fundamentals (supervised & unsupervised)
- NLP concepts for intent-based networking
- Proficient in prompt engineering and AI evaluation techniques.

Mandatory Skills
- Python (Programming Language) advanced scripting, automation, API integrations, AI workflows
- Ansible configuration management and orchestration
- Terraform for network IaC
- Advanced cloud networking across AWS, Azure, GCP, OpenShift
- Strong fundamentals in TCP/IP, BGP, routing, segmentation, and security

Communication & Collaboration
- Work closely with:
- Cloud Architects
- Security Architects
- Application and DevOps teams
- Translate complex technical designs into clear implementation plans.
- Mentor junior engineers and promote engineering best practices.
- Participate in architecture reviews and implementation governance forums.

Experience & Qualifications
- 5 8 years of experience in cloud and hybrid networking.
- Proven experience designing and implementing advanced multi-cloud network solutions.
- Strong exposure to AI / GenAI-assisted automation and network optimization.
- Experience working in large-scale enterprise or SI-led environments.

Certifications
Candidates must hold at least TWO (2) Professional-level Cloud Certifications from the following:
- AWS
- AWS Certified Solutions Architect Professional
- AWS Certified Advanced Networking Specialty (Highly Preferred)
- Microsoft Azure
- Azure Solutions Architect Expert (AZ-305)
- Azure Network Engineer Associate (AZ-700)
- Google Cloud Platform
- Google Professional Cloud Architect
- Google Professional Cloud Network Engineer
- HashiCorp Terraform Certification
- Terraform Associate (Mandatory)

Good-to-Have / Preferred Certifications
The following certifications are strongly preferred and add weight to advanced hybrid, security, automation, and AI-driven networking expertise:
Networking & Security
- AWS Certified Advanced Networking Specialty
- Cisco CCNP / CCIE (Enterprise, Security, or Data Center)
- Palo Alto PCNSE / Fortinet NSE (NGFW & hybrid security)
- VMware NSX-T Certification
- Avi Networks (NSX Advanced Load Balancer)
Kubernetes & Cloud-Native
- Certified Kubernetes Administrator (CKA)
- Certified Kubernetes Security Specialist (CKS)
- Red Hat OpenShift Specialist
DevOps & Automation
- Ansible Automation Platform Certification
- Azure DevOps Engineer Expert (AZ-400)
- GitHub Actions (GH-200)
AI / GenAI & Emerging Technologies
- AWS Certified Machine Learning Specialty
- Google Professional Machine Learning Engineer
- Azure AI Engineer Associate
- Vendor-neutral GenAI / LLM certifications (OpenAI, DeepLearning.AI, etc.)

15 Year of Education to be completed
- Resource needs to be AI Ready.