AWS Reverse Engineering Engineer / Cloud Discovery Engineer

Key Responsibilities
Perform detailed discovery and reverse engineering of existing AWS environments across multiple accounts, regions, VPCs, applications, and environments
Analyze AWS resources including EC2, VPC, ALB/NLB, Route 53, S3, EBS, RDS/Aurora, DynamoDB, Lambda, ECS/EKS, IAM, KMS, CloudFront, API Gateway, SQS/SNS, CloudWatch, and CloudTrail
Reconstruct As-Is cloud architecture from deployed AWS resources when design documents are unavailable or outdated
Identify relationships and dependencies between applications, compute, databases, networking, storage, security controls, and external integrations
Reverse-engineer manually provisioned infrastructure and convert it into Terraform, AWS CloudFormation, or other IaC frameworks
Analyze existing CI/CD pipelines, scripts, and automation implemented through GitHub Actions, GitLab, Jenkins, AWS CodePipeline, and CodeBuild
Review IAM roles and policies, security groups, NACLs, KMS configurations, secrets, certificates, and network security controls
Analyze application deployment patterns, runtime configurations, environment variables, parameter stores, secrets, and service integrations
Create infrastructure inventories, dependency maps, architecture diagrams, and configuration baselines
Compare deployed infrastructure against available documentation and identify configuration and documentation gaps
Identify technical debt, obsolete resources, configuration drift, security risks, and opportunities for standardization
Develop As-Is and To-Be architecture documentation and provide recommendations for modernization and optimization
Support migration and modernization initiatives involving rehost, replatform, refactor, or cloud-native transformation
Work closely with application, DevOps, SRE, security, network, and cloud architecture teams
Create detailed handover documentation, runbooks, deployment procedures, and operational support documentation

Required Qualifications
6+ years of experience
Bachelors Degree

Skills
AWS Cloud Architecture and Administration
AWS Compute Services (EC2, Lambda, ECS/EKS)
AWS Networking (VPC, Route 53, Transit Gateway, Direct Connect)
AWS Security (IAM, KMS, Secrets Manager)
AWS Storage and Database Services (S3, EBS, RDS/Aurora, DynamoDB)
AWS Monitoring and Logging (CloudWatch, CloudTrail)
Terraform
AWS CloudFormation
CI/CD Automation
Git
Docker
Kubernetes/EKS
Scripting (Python, Bash, PowerShell)
AWS Integration Services (API Gateway, SQS/SNS, CloudFront)
AWS Systems Manager
Cloud Architecture Documentation
Cloud Migration and Modernization
Dependency Analysis
Technical Documentation
Cross-functional Collaboration
Configuration Drift Analysis

Schedule
Start date: 2026-09-18