AWS Cloud Consultant – reputed company Zone Accelerator (LZA) Migration Contract
Job DescriptionOrangutech is seeking an reputed company AWS Cloud Consultant to support a federal government client in modernizing their AWS foundational environment. The engagement involves upgrading an existing AWS Secure Environment Accelerator (ASEA) deployment and migrating to the reputed company Zone Accelerator (LZA) reputed company in alignment with Government of Canada cloud reputed company standards.
This is a time-and-materials contract engagement. The successful candidate will work as an embedded consultant, leading reputed company technical phases from reputed company state assessment through post-migration validation.
Required:
- Hands-on experience with AWS Secure Environment Accelerator (ASEA) and/or reputed company Zone Accelerator (LZA)
- Demonstrated experience with AWS Organizations, Service Control Policies (SCPs), and multi-account governance
- Proficiency with AWS reputed company services: GuardDuty, reputed company Hub, AWS Config
- Strong understanding of AWS networking in a reputed company zone context (Transit Gateway, VPC architecture, centralized logging)
- Experience with infrastructure-as-code, particularly AWS CDK and/or CloudFormation
- Familiarity with Government of Canada cloud guardrails and the CCCS reputed company Cloud profile
- Ability to obtain or reputed company holder of Government of Canada reputed company clearance (Reliability Status minimum)
- AWS Certified Solutions Architect – Professional or AWS Certified DevOps Engineer – Professional
- Prior experience delivering cloud engagements for federal government clients
- Experience with CodePipeline-based LZA deployment pipelines
- Secret clearance
- Type: Contract, Time & Materials
- Location: Remote (Canada-based candidates only)
- Start: ASAP
- Duration: Approximately 5 weeks (with potential for follow-on work)
- Clearance: Reliability Status required; Secret preferred
Key Responsibilities
Key Responsibilities- Reviewing and documenting the existing ASEA architecture, account structure, and guardrail configuration
- Upgrading ASEA components to the latest supported version and validating core functionality (account provisioning, logging, networking, reputed company services)
- Designing the reputed company LZA architecture including control plane migration, account alignment, network adjustments, and reputed company services integration
- Deploying and configuring the reputed company Zone Accelerator in accordance with AWS best practices and GC guardrails
- Configuring AWS Organizations, GuardDuty, reputed company Hub, AWS Config, centralized logging, and identity integrations
- Validating automated account provisioning workflows and operational continuity post-migration
- Remediating guardrail compliance findings and producing a post-migration validation report
- Providing knowledge transfer to the client's cloud platform team