Hybrid infrastructure engineer (cloud migration lead)

The Hybrid Infrastructure Engineer will help lead Paramount’s strategic transition from a fully on-premises footprint to a hybrid footprint with Amazon Web Services (AWS). In this role, you will partner directly with the VP of Technology to co-develop our cloud strategy, while owning the creation of the cloud architecture and migration pipeline. You will also collaborate closely with our dedicated On-Premises Systems Engineer, who manages daily local hardware operations, to safely replicate and transition workloads into a modern environment. A core focus of this role is to ensure the infrastructure is configured and maintained to meet high availability, security, and performance requirements across both environments, with strict adherence to PCI-DSS Level 1 compliance.

Requirements

Key Responsibilities

• Cloud Leadership & Modernization Architect and build secure, scalable target AWS cloud landing zones. Lead the design and execution of workload migration strategies. Ensure the infrastructure is configured and maintained to meet high availability, security, and performance requirements. Migrate Hyper-V virtual machines to AWS EC2 or container services. Evaluate opportunities to migrate legacy workflows directly to cloud-first technologies available in AWS. Establish deployment standards using Infrastructure as Code (IaC).
• Compliance & Security (PCI-DSS Level 1) Design and enforce cardholder data environment (CDE) segmentation across hybrid zones. Implement strict encryption protocols for data at rest and in transit across AWS and on-prem. Align AWS IAM and Windows Active Directory policies with PCI access control requirements. Maintain continuous logging, monitoring, and audit trails required for compliance validation.
• Collaborative Hybrid Engineering Partner with the On-Prem Engineer to coordinate system maintenance and local migrations. Collaborate on local hardware access for replication and migration tools. Design secure, low-latency network tunnels between local sites and AWS. Co-develop business continuity plans combining Veeam and cloud-native backups.
• Performance & Optimization Monitor and tune hybrid environments to guarantee uptime and speed. Optimize cloud spend and resource sizing during migration phases. Assist with safely decommissioning local hardware as workloads shift.

Required Technical Skills

• Public Cloud & Modernization (Lead Level) AWS Services: Deep knowledge of EC2, VPC, IAM, S3, Route 53. Security & Compliance: AWS Security Hub, GuardDuty, AWS Config, IAM policies for PCI compliance. Cloud-First Tech: Familiarity with AWS serverless, containers, or native analytics. Migration Tooling: AWS Application Migration Service (MGN) or equivalent. Automation: Terraform, AWS CloudFormation, or Python/PowerShell scripting.
• On-Premises Familiarity (Collaborative Level) Databases: Microsoft SQL Server administration and hosting concepts. Virtualization: Microsoft Hyper-V, Failover Clustering. Storage & Backup: PureStorage FlashArray, Veeam Backup & Replication. Core Systems: Windows Server (2019/2022), Active Directory, Group Policy.

Qualifications

• Experience: 5+ years in infrastructure, with 3+ years leading AWS cloud migrations.
• Compliance Experience: Proven history building or maintaining PCI-DSS Level 1 compliant infrastructure.
• Leadership: Demonstrated success leading technical projects in a team setting.
• Certifications: AWS Certified Security - Specialty, AWS Certified Solutions Architect Professional, or AWS DevOps Engineer Professional.

Perks & Benefits:

• Health Insurance (Medical, Dental, Vision, Life)
• Paid Time Off (PTO) & Holidays
• 401k with 4% Match
• Company Wellness Program
• Free VASA Fitness Membership
• Work-From-Home Flexibility
• Access to On-Site Corporate Fitness Center