Orangutech

Cloud Consultant

Remote
AWS CloudFormation AWS CDK GuardDuty Security Hub AWS Config Transit Gateway VPC CodePipeline
Description

AWS Cloud Consultant – Landing Zone Accelerator (LZA) Migration Contract

Department: Canada School of Public Service (CSPS)

Employment Type: Contract / Temp

Location: Canada, Remote

Job Description
Orangutech is seeking an experienced AWS Cloud Consultant to support a federal government client in modernizing their AWS foundational environment. The engagement involves upgrading an existing AWS Secure Environment Accelerator (ASEA) deployment and migrating to the Landing Zone Accelerator (LZA) framework in alignment with Government of Canada cloud security standards.

This is a time-and-materials contract engagement. The successful candidate will work as an embedded consultant, leading all technical phases from current state assessment through post-migration validation.

Required:
  • Hands-on experience with AWS Secure Environment Accelerator (ASEA) and/or Landing Zone Accelerator (LZA)
  • Demonstrated experience with AWS Organizations, Service Control Policies (SCPs), and multi-account governance
  • Proficiency with AWS security services: GuardDuty, Security Hub, AWS Config
  • Strong understanding of AWS networking in a landing zone context (Transit Gateway, VPC architecture, centralized logging)
  • Experience with infrastructure-as-code, particularly AWS CDK and/or CloudFormation
  • Familiarity with Government of Canada cloud guardrails and the CCCS Medium Cloud profile
  • Ability to obtain or current holder of Government of Canada security clearance (Reliability Status minimum)
Nice to Have:
  • AWS Certified Solutions Architect – Professional or AWS Certified DevOps Engineer – Professional
  • Prior experience delivering cloud engagements for federal government clients
  • Experience with CodePipeline-based LZA deployment pipelines
  • Secret clearance
Engagement Details
  • Type: Contract, Time & Materials
  • Location: Remote (Canada-based candidates only)
  • Start: ASAP
  • Duration: Approximately 5 weeks (with potential for follow-on work)
  • Clearance: Reliability Status required; Secret preferred

Key Responsibilities

Key Responsibilities
  • Reviewing and documenting the existing ASEA architecture, account structure, and guardrail configuration
  • Upgrading ASEA components to the latest supported version and validating core functionality (account provisioning, logging, networking, security services)
  • Designing the target LZA architecture including control plane migration, account alignment, network adjustments, and security services integration
  • Deploying and configuring the Landing Zone Accelerator in accordance with AWS best practices and GC guardrails
  • Configuring AWS Organizations, GuardDuty, Security Hub, AWS Config, centralized logging, and identity integrations
  • Validating automated account provisioning workflows and operational continuity post-migration
  • Remediating guardrail compliance findings and producing a post-migration validation report
  • Providing knowledge transfer to the client's cloud platform team
Orangutech
Orangutech

0 applies

0 views

There are more than 50,000 engineering jobs:

Subscribe to membership and unlock all jobs

Engineering Jobs

60,000+ jobs from 4,500+ well-funded companies

Updated Daily

New jobs are added every day as companies post them

Refined Search

Use filters like skill, location, etc to narrow results

Become a member

πŸ₯³πŸ₯³πŸ₯³ 452 happy customers and counting...

Overall, over 80% of customers chose to renew their subscriptions after the initial sign-up.

To try it out

For active job seekers

For those who are passive looking

Cancel anytime

Frequently Asked Questions

  • We prioritize job seekers as our customers, unlike bigger job sites, by charging a small fee to provide them with curated access to the best companies and up-to-date jobs. This focus allows us to deliver a more personalized and effective job search experience.
  • We've got over 200,000 jobs from 15,000+ vetted companies. No fake or sleazy jobs here!
  • We aggregate jobs from 15,000+ companies' career pages, so you can be sure that you're getting the most up-to-date and relevant jobs.
  • We're the only job board *for* software engineers, *by* software engineers… in case you needed a reminder! We add thousands of new jobs daily and offer powerful search filters just for you. πŸ› οΈ
  • Every single hour! We add 2,000-3,000 new jobs daily, so you'll always have fresh opportunities. πŸš€
  • Typically, job searches take 3-6 months. EchoJobs helps you spend more time applying and less time hunting. 🎯
  • Check daily! We're always updating with new jobs. Set up job alerts for even quicker access. πŸ“…

What Fellow Engineers Say