Cloud Migration Engineer / Architect (R-00199)

True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.

The Endpoint Engineer – AI Desktop Deployment is responsible for designing, deploying, securing, and maintaining enterprise Windows endpoints that support AI-enabled desktop capabilities in highly regulated, government, and Zero Trust environments. This role combines traditional Windows desktop engineering with modern endpoint management, security compliance, application deployment, performance optimization, and device health monitoring.

The engineer will work closely with cybersecurity, cloud, identity, infrastructure, and application teams to ensure endpoints are secure, compliant, performant, and ready to support AI-enabled applications and workloads. The ideal candidate has strong hands-on experience with Microsoft Intune, Microsoft Endpoint Manager, Windows 10/11, Group Policy, application packaging, and Zero Trust endpoint controls.

Job Responsibilities

• Assess enterprise application portfolios and determine the appropriate migration approach for each workload using the 7 Rs: rehost, replatform, refactor, repurchase, retire, retain, and relocate.
• Design secure, scalable, highly available AWS GovCloud architectures that meet application, mission, security, and operational requirements.
• Develop migration plans, dependency mappings, migration runbooks, cutover procedures, rollback strategies, and validation criteria.
• Use AWS migration services including AWS Application Migration Service (MGN), AWS Database Migration Service (DMS), AWS DataSync, AWS Application Discovery Service, and AWS Migration Hub.
• Migrate applications, virtual machines, databases, file systems, and enterprise data to AWS GovCloud while minimizing downtime and operational disruption.
• Design and deploy compute and container platforms using Amazon EC2, Amazon EKS, and Amazon ECS as appropriate to workload requirements.
• Plan and execute storage, database, and data migrations, including data synchronization, replication, validation, and cutover activities.
• Design hybrid and cloud networking architectures using AWS Transit Gateway, AWS Direct Connect, VPN connectivity, routing, DNS, and security controls.
• Develop and maintain infrastructure using Terraform and other approved infrastructure-as-code technologies.
• Implement standardized AWS GovCloud environments using the Landing Zone Accelerator on AWS (LZA) and approved enterprise landing-zone patterns.
• Use FIPS endpoints and approved cryptographic configurations where required by security and compliance requirements.
• Design secure approaches for on-premises-to-GovCloud data transfer, accounting for the absence of a native cross-partition transfer path where applicable.
• Implement micro-segmentation and security-group architectures aligned with Zero Trust principles and workload-specific access requirements.
• Coordinate migration waves across application, infrastructure, cybersecurity, networking, database, and business teams.
• Identify and manage migration dependencies, technical risks, business risks, outage windows, resource constraints, and remediation activities.
• Validate migrated workloads for functionality, performance, security, resilience, observability, and operational readiness before production acceptance.
• Implement monitoring, logging, alerting, backup, recovery, and operational support capabilities for migrated environments.
• Identify and execute application modernization opportunities, including containerization, managed services, automation, and cloud-native architectural improvements where appropriate.

Job Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related technical discipline.
• Demonstrated experience designing and implementing AWS cloud architectures, preferably within AWS GovCloud.
• Strong understanding of enterprise application migration strategies and the 7 Rs migration framework.
• Hands-on experience with AWS migration tooling such as MGN, DMS, DataSync, Application Discovery Service, and Migration Hub.
• Experience migrating enterprise applications, servers, databases, storage platforms, and data to AWS.
• Strong experience with EC2, EKS, ECS, storage services, database services, and cloud-native application architectures.
• Experience designing hybrid cloud networking with Transit Gateway, Direct Connect, VPNs, routing, DNS, and network-security controls.
• Hands-on experience developing infrastructure using Terraform and infrastructure-as-code practices.
• Experience with Landing Zone Accelerator on AWS, AWS Organizations, account structures, guardrails, and standardized cloud foundations.
• Understanding of FIPS endpoints, encryption requirements, and secure data-transfer patterns within government cloud environments.
• Experience designing micro-segmented network architectures and security-group policies aligned with Zero Trust principles.
• Strong understanding of application dependency analysis, migration-wave planning, cutover management, rollback planning, and technical risk management.
• Experience with cloud monitoring, logging, operational readiness, backup, disaster recovery, and post-migration optimization.
• Familiarity with application modernization, containerization, managed services, and cloud-native architecture patterns.
• Experience supporting government, defense, regulated, or other compliance-driven environments is preferred.
• Strong architecture, troubleshooting, documentation, governance, stakeholder coordination, and cross-functional collaboration skills.

Preferred Certifications

• AWS Certified Solutions Architect – Professional
• AWS Certified DevOps Engineer – Professional
• AWS Certified Advanced Networking – Specialty
• AWS Certified Security – Specialty