Cloud Migration Engineer

About the Role

We are migrating a portfolio of on-premise Java Spring Boot applications, which depend on on-prem Apache Kafka clusters for event streaming and inter-service messaging, to Amazon Web Services. This role requires an engineer experienced in end-to-end migrations: assessing applications, untangling on-prem dependencies, re-platforming to AWS-managed services, lifting-and-shifting where appropriate, cutting over with zero data loss, and establishing a clean, observable, cost-efficient footprint. You will own the technical migration of multiple Spring Boot services from discovery through stabilization, collaborating with application and platform teams.

Key Responsibilities

• Own technical migration of multiple Spring Boot services from discovery through stabilization.
• Partner with application teams and the AWS platform team.

Requirements & Tech Stack

• Java 17 / 21 and modern Java features (records, pattern matching, virtual threads, JVM performance tuning).
• Spring Boot 3 / Spring Framework 6 (including Jakarta EE migration and modernization of deprecated APIs).
• Spring for Apache Kafka and/or Spring Cloud Stream (Kafka listeners, error handling, retries, transactions, transactional producers).
• Amazon MSK / MSK Serverless or Confluent Cloud on AWS (Kafka migration, replication, security, consumer-group cutover).
• Kafka migration tools and strategies (MirrorMaker 2, MSK Replicator, Confluent Replicator).
• AWS services: EKS, ECS / Fargate, RDS / Aurora, S3, IAM, MSK, Secrets Manager, CloudWatch, KMS, Route 53, ALB / NLB, VPC, API Gateway.
• Docker and containerization (multi-stage builds, production-ready container images).
• Deployment to Amazon EKS, ECS Fargate, App Runner, or Lambda.
• Infrastructure as Code using AWS CDK and/or Terraform.
• CI/CD pipelines using GitLab CI and/or GitHub Actions.
• Relational and NoSQL data migration using AWS DMS, RDS / Aurora, DocumentDB, or MongoDB Atlas.
• AWS security: IAM, encryption, secrets management, TLS, security groups, VPC Endpoints, PrivateLink, WAF, GuardDuty.
• Observability using Micrometer, Prometheus, Grafana, CloudWatch, OpenTelemetry, AWS X-Ray, Datadog, or Dynatrace.
• Troubleshooting application, JVM, Kafka, network, and cloud performance issues.

Qualifications

• 8+ years of experience developing production-grade backend applications using Java.
• 5+ years of hands-on experience with Spring Boot, Spring Data, and Spring Security.
• 5+ years of production experience with Apache Kafka (producers, consumers, topic design, partitioning, consumer groups, schema evolution, Kafka operations).
• 3+ years of hands-on experience delivering production workloads on AWS.
• Proven experience owning end-to-end migration of multiple on-premise applications and Kafka workloads to AWS.
• Strong analytical and problem-solving skills.
• Excellent communication and collaboration skills.

Preferred Qualifications:

• Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field.
• Certifications: AWS Certified Solutions Architect – Professional, AWS Certified DevOps Engineer – Professional, or AWS Advanced Networking – Specialty.
• Certifications: CKA, CKAD, or CKS.
• Experience with hybrid cloud networking (AWS Direct Connect, Transit Gateway, VPN, PrivateLink, on-premise-to-AWS routing).