Title: Senior AWS & Liferay Cloud Migration Engineer
Location: Remote
Duration: 6+ months
MOI: Video
Project background and description:
We are seeking an experienced AWS Cloud Migration Specialist / Liferay Systems Engineer to design and execute a secure, cross-organization migration of an enterprise Liferay DXP deployment. The environment-including compute, Amazon RDS database, document store (Amazon S3), search cluster (OpenSearch/Elasticsearch), and networking dependencies-must be cleanly transitioned from a source AWS account owned by Company A to an isolated, greenfield AWS account owned by Company B.
The ideal contractor brings hands-on expertise in AWS cross-account data transfer patterns (IAM role trust, KMS key sharing, RDS cross-account snapshot restoration), combined with deep knowledge of Liferay runtime dependencies (document library pointers, database schemas, clustering, search indexing, and licensing).
Project scope
2.1 Discovery, Architecture & Migration Planning
- Audit existing infrastructure across both AWS accounts (VPC CIDRs, security groups, EC2/ECS/EKS instances, RDS engine/parameters, S3 buckets, Elasticsearch/OpenSearch, Route 53, and load balancers).
- Produce a detailed Migration Runbook outlining prerequisites, step-by-step technical procedures, roll-back plans, data freeze windows, and cutover checklists.
- Design destination account architecture using Infrastructure as Code (Terraform preferred), adhering to target company security, tagging, and network standards.
2.2 Cross-Account Data & Database Migration
- Establish cross-account access mechanisms (IAM assume-role policies, custom KMS CMK sharing).
- Migrate Amazon RDS (PostgreSQL/MySQL/Oracle):
- Share unencrypted snapshots or copy/re-encrypt KMS-encrypted RDS snapshots into the destination account.
- Evaluate and execute replication via native tooling, AWS Database Migration Service (AWS DMS), or logical dumps if minimal downtime is required.
- Migrate Liferay Document Library:
- Sync S3 document store assets using cross-account S3 bucket policies, AWS DataSync, or the AWS CLI (aws s3 sync).
- Verify object ownership and permissions in the target account.
2.3 Liferay DXP Application Deployment & Configuration
- Stand up Liferay compute tier in the destination AWS account (EC2 or containerized ECS/EKS).
- Reconfigure Liferay configuration properties (portal-ext.properties, OSGi configs) for new RDS endpoints, credentials, S3 buckets, and cache cluster settings.
- Provision and connect search tier (Amazon OpenSearch / standalone Elasticsearch), execute full search re-indexing, and validate search node status.
- Coordinate Liferay license activation (deploying new production licenses tied to destination server IP/MAC/cluster configurations).
2.4 Testing, Cutover & Handover
- Conduct dry-run/UAT migration in a non-production or staging target environment.
- Execute final production cutover during an approved maintenance window, including DNS updates (Route 53) and SSL/TLS certificate binding (AWS Certificate Manager).
- Validate end-to-end portal functionality: user authentication, document access, custom modules/portlets, and scheduled background tasks.
- Deliver as-built architectural diagrams, credential handoff, and provide 1 2 weeks of post-cutover hypercare support.
High-level requirements
- AWS Infrastructure & Security: Extensive experience with cross-account AWS architectures, VPC peering/Transit Gateway, Route 53, ALB/NLB, IAM cross-account roles, and AWS KMS (specifically CMK sharing and re-encryption across AWS Organizations).
- Database Migration (Amazon RDS): Demonstrated track record moving production RDS databases cross-account with minimal downtime (snapshot sharing, DMS, or native engine replication).
- Liferay DXP Expertise: Direct administration experience with Liferay DXP (versions 7.2, 7.3, or 7.4), including knowledge of:
- Database schema dependencies and connection pooling.
- Liferay Document Library storage mechanisms (S3 Store vs. Advanced File System).
- Search engine integrations (Elasticsearch/OpenSearch).
- Cluster cache replication (Ehcache/Infinispan) and OSGi configurations.
- Storage & Data Transfer: Proficient in AWS DataSync, cross-account S3 bucket policies, and cross-region/cross-account data integrity verification.
- Infrastructure as Code (IaC): Solid working knowledge of Terraform or AWS CloudFormation for provisioning destination infrastructure.
- Scripting & Automation: Strong proficiency in Bash and Python (boto3) for cutover automation and health checks.
Preferred Qualifications
- Official AWS Certified Solutions Architect Professional or AWS Certified DevOps Engineer.
- Direct experience handling IT separations, divestitures, or corporate carve-out migrations.
- Familiarity with third-party SSO integrations (SAML, OpenID Connect, Okta, Azure AD) linked to Liferay.
Deliverables
- | Phase 1: Discovery & Strategy | Infrastructure audit, target architecture spec, and draft Migration Runbook | Week 1 |
- | Phase 2: Target Build & Staging Test | Destination VPC/RDS/Search provisioned via IaC; dry-run migration executed | Weeks 2 3 |
- | Phase 3: Production Cutover | Final delta sync, DNS switch, verification, and go-live | Week 4 |
- | Phase 4: Hypercare & Handover | Post-launch monitoring, documentation handover, and decommissioning advice | Week 5 |
Specific exclusions from scope
| | The project will not include the development of new products or services. |
Senior Talent Acquisition
E-
STELLENT IT A Nationally Recognized Minority Certified Enterprise
