Hybrid Infrastructure Engineer (Cloud Migration Lead)

Description

The Hybrid Infrastructure Engineer will help lead Paramount’s strategic transition from a fully on-premises footprint to a hybrid footprint with Amazon Web Services (AWS). In this role, you will partner directly with the VP of Technology to co-develop our cloud strategy, while owning the creation of the cloud architecture and migration pipeline. You will also collaborate closely with our dedicated On-Premises Systems Engineer, who manages daily local hardware operations, to safely replicate and transition workloads into a modern environment. A core focus of this role is to ensure the infrastructure is configured and maintained to meet high availability, security, and performance requirements across both environments, with strict adherence to PCI-DSS Level 1 compliance.

Requirements

Key Responsibilities

Cloud Leadership & Modernization

• •Architect and build secure, scalable target AWS cloud landing zones.
• •Lead the design and execution of workload migration strategies.
• •Ensure the infrastructure is configured and maintained to meet high availability, security, and performance requirements.
• •Migrate Hyper-V virtual machines to AWS EC2 or container services.
• •Evaluate opportunities to migrate legacy workflows directly to cloud-first technologies available in AWS.
• •Establish deployment standards using Infrastructure as Code (IaC).

Compliance & Security (PCI-DSS Level 1)

• •Design and enforce cardholder data environment (CDE) segmentation across hybrid zones.
• •Implement strict encryption protocols for data at rest and in transit across AWS and on-prem.
• •Align AWS IAM and Windows Active Directory policies with PCI access control requirements.
• •Maintain continuous logging, monitoring, and audit trails required for compliance validation.

Collaborative Hybrid Engineering

• •Partner with the On-Prem Engineer to coordinate system maintenance and local migrations.
• •Collaborate on local hardware access for replication and migration tools.
• •Design secure, low-latency network tunnels between local sites and AWS.
• •Co-develop business continuity plans combining Veeam and cloud-native backups.

Performance & Optimization

• •Monitor and tune hybrid environments to guarantee uptime and speed.
• •Optimize cloud spend and resource sizing during migration phases.
• •Assist with safely decommissioning local hardware as workloads shift.

Required Technical Skills

Public Cloud & Modernization (Lead Level)

• •AWS Services: Deep knowledge of EC2, VPC, IAM, S3, Route 53.
• •Security & Compliance: AWS Security Hub, GuardDuty, AWS Config, IAM policies for PCI compliance.
• •Cloud-First Tech: Familiarity with AWS serverless, containers, or native analytics.
• •Migration Tooling: AWS Application Migration Service (MGN) or equivalent.
• •Automation: Terraform, AWS CloudFormation, or Python/PowerShell scripting.

On-Premises Familiarity (Collaborative Level)

• •Databases: Microsoft SQL Server administration and hosting concepts.
• •Virtualization: Microsoft Hyper-V, Failover Clustering.
• •Storage & Backup: PureStorage FlashArray, Veeam Backup & Replication.
• •Core Systems: Windows Server (2019/2022), Active Directory, Group Policy.

Qualifications

• •Experience: 5+ years in infrastructure, with 3+ years leading AWS cloud migrations.
• •Compliance Experience: Proven history building or maintaining PCI-DSS Level 1 compliant infrastructure.
• •Leadership: Demonstrated success leading technical projects in a team setting.
• •Certifications: AWS Certified Security - Specialty, AWS Certified Solutions Architect Professional, or AWS DevOps Engineer Professional.

Perks & Benefits:

• •Health Insurance (Medical, Dental, Vision, Life)
• •Paid Time Off (PTO) & Holidays
• •401k with 4% Match
• •Company Wellness Program
• •Free VASA Fitness Membership
• •Work-From-Home Flexibility
• •Access to On-Site Corporate Fitness Center