We are seeking Engineers to join our On-Premises to AWS S3 Migration Platform team — a high-visibility program that designs, builds, and operates a secure, scalable migration platform to move object storage data from on-premises, S3-compatible object storage to AWS S3. This role partners with application owners, storage engineering, cloud platform, and networking teams to ensure reliable, governed, and auditable migration execution at enterprise scale.

Responsibilities of the Engineer include:

1. Migration Workflow Ownership & Orchestration
2. Own the end-to-end migration workflow from on-premises source buckets to AWS S3 destination buckets, covering manifest-based and non-manifest migration paths.
3. Build and operate AWS-based orchestration using Step Functions, Lambda, Fargate, AWS Batch, DynamoDB, SQS, and rclone.
4. Implement batching, sharding, task sizing, and retry handling based on documented compute-tier thresholds (DC node, Bare Metal, manifest-required).
5. Support express-route (like-for-like) vs. exception-route migrations, using data-detectable criteria to auto-classify buckets where possible.
6. Execution & Validation
7. Automate pre-flight dry-run validation (credentials, connectivity, readability/writability, size/object-count limits) as a gate before any real transfer.
8. Implement and verify source freeze — apply deny-write policy centrally and confirm enforcement via synthetic write-attempt checks.
9. Operate the rclone-based migration runtime with correct credential handling (Kerberos keytab, IAM role assumption via STS), KMS-encrypted destinations, and manifest generation for large migrations.
10. Build and run post-migration reconciliation checks comparing source and destination — object count/size match, per-object checksum match, drift detection, version completeness, and configuration parity.
11. Track and enforce the point-of-no-return cutover step — owner written acknowledgment,



followed by centrally sealing the source against reads and writes.
12. Governance, Observability & Reporting
13. Implement governance for bandwidth allocation, queue management, prioritisation, throttling, and job tracking across concurrent migrations.
14. Design DynamoDB-backed job, task, queue, bandwidth, and summary state tracking.
15. Build CloudWatch dashboards, logs, metrics, alerts, and health checks; parse migration logs into structured pass/fail evidence.
16. Track migration progress, escalations, and blockers via Jira; measure success on namespaces closed, not petabytes moved. Produce structured reports and dashboards for stakeholders and senior leadership.
17. Process Improvement & Automation
18. Rigor & Follow-Through: Proactively follow up on outstanding freeze/owner sign-offs; escalate delays per SLA with clear professional communication.
19. Automation-First: Continuously convert manual verification steps (dry-run review, log inspection, reconciliation) into automated, repeatable gate checks to increase migration throughput.
20. Cross-Functional Collaboration: Work with Cloud Platform, Storage Engineering, and Networking teams to resolve connectivity and platform issues; adapt quickly to new tooling as the platform matures.

Technical Skills:

1. Basic Qualifications

1. Education: Bachelor's or Master's in Computer Science, Applied Mathematics, Engineering, or a related quantitative field.
2. Experience: 3–5 years of professional experience in infrastructure engineering, cloud migration,



or large-scale enterprise data platform delivery.
3. Languages: Strong Python (boto3, JSON processing, exception handling, logging, dataclasses, streaming files, API integration); Unix/Linux Shell Scripting.
4. Methodology: Familiarity with change management processes in regulated financial industries.

1. Core Infrastructure Competencies: Candidates must demonstrate a solid understanding of the following:

1. Object Storage & S3-Compatible APIs: Deep understanding of Amazon S3, S3 Intelligent-Tiering, S3-compatible APIs (e.g., Dell ECS or similar platforms), object metadata, prefix structures, large object transfers, versioning, and lifecycle policies.
2. Migration Tooling (rclone): Hands-on experience configuring and operating rclone for high-volume transfers — copy vs. sync behaviour, checksums, checkers, retries, no-traverse behaviour, stats, logs, and bandwidth limiting.
3. AWS Serverless & Compute: Hands-on experience with Lambda, Step Functions, SQS, SNS, EventBridge, API Gateway, SSM Parameter Store, Secrets Manager, ECS Fargate, and AWS Batch.
4. DynamoDB: Ability to design and operate tables, keys, indexes, scans, updates, batch writes, Decimal handling, and state-management patterns for job/task tracking.
5. Networking: Understanding of AWS Direct Connect, Transit Gateway, VPCs, private subnets, S3 Gateway Endpoints, NAT Gateway scoping, and high-throughput network design for migration traffic.
6. IAM & Security: Strong knowledge of IAM roles, cross-account access, STS assume-role, Kerberos keytab auth, Secrets Manager, KMS encryption, and least-privilege design.
7. Development Environments: Working knowledge of IDEs such as VS Code, IntelliJ IDEA, and PyCharm.
8. AI & Automation Tools: Familiarity with AI engines and assistants (e.g., GitHub Copilot, ChatGPT, Gemini, Claude) to accelerate scripting, validation logic, and reporting.

📌 Cloud Infrastructure Engineer (México)
🏢 Pyramid Consulting
📍 México