This Staff Consultant role builds governed data platforms, data pipelines, lakehouse layers, reporting and analytics on AWS. The consultant is expected to operate as an embedded AWS SME, provide hands-on implementation support, and create audit-ready technical documentation aligned to regulated Financial Services delivery expectations.
Role Scope & Key Responsibilities
Primary Responsibilities:
- Angular Application Migration Leadership: Lead comprehensive assessments of Angular front-end applications across all web-facing SYS IDs currently deployed on Tomcat/OpenShift Container Platform (OCP), defining migration paths from on-premises OCP to self-managed OCP on Amazon EC2 with minimal application changes
- User Experience & Persona Design: Create detailed day-in-the-life persona journey documents for 4 key stakeholder groups (Operations, Developer, Business Analyst, Compliance), ensuring user workflow continuity and assessing UI/UX implications throughout the migration lifecycle
- Embedded Analytics Architecture: Design and implement Amazon QuickSight embedded analytics integration with existing FICC (Fixed Income, Currency, and Commodities) web portals, replacing legacy Crystal Reports with modern, cloud-native dashboard structures
- CI/CD Pipeline Design: Define Angular-specific CI/CD patterns for Jenkins/CloudBees pipelines, ensuring automated build, test, and deployment workflows for containerized front-end applications on AWS infrastructure
- Reporting Modernization: Document current CDS NFS report distribution mechanisms and design S3-based migration paths for secure, scalable report access and distribution
- Architecture Documentation: Produce comprehensive current-state and target-state comparison diagrams (visual architecture artifacts) for all migration phases, ensuring stakeholder alignment and technical clarity
Deliverables Ownership:
- Day-in-the-Life Personas (4 persona journey documents with AWS service touchpoints)
- Angular Migration Assessment (OCP on-prem OCP on EC2) with AWS infrastructure design
- QuickSight Dashboard Design (Crystal Reports replacement) with embedded analytics integration
- CI/CD Pipeline Architecture for Angular applications on AWS
- Report Distribution Migration Plan (NFS Amazon S3)
Current-State vs. Target-State Comparison Diagrams with AWS service mapping
AWS Skills & Services (added)
- Amazon EMR, AWS Glue, PySpark/Scala, Athena and S3-based lakehouse implementation
- Amazon Redshift, Lake Formation, DataZone and Glue Data Catalog for governed analytics
- Amazon Kinesis and Amazon MSK for streaming ingestion and event-driven data pipelines
- Amazon QuickSight embedded analytics and reporting modernization
- Spark tuning, ETL/ELT pipeline engineering and data-quality validation
Compute & Containers:
- Amazon EC2 (self-managed OCP deployment)
- Elastic Load Balancing (ALB for Angular apps)
Analytics & BI:
- Amazon QuickSight (embedded analytics, dashboard design, RLS/CLS, Paginated Reports)
- Amazon Athena (S3 data querying)
Storage & CDN:
- Amazon S3 (report storage, lifecycle policies, presigned URLs, encryption)
- Amazon CloudFront (Angular asset delivery, low-latency dashboards)
CI/CD & DevOps:
- AWS CodePipeline/CodeBuild/CodeDeploy (Jenkins integration)
- Amazon ECR (container registry)
- AWS Systems Manager (configuration management)
Security & Networking:
- Amazon VPC (networking for OCP on EC2)
- AWS IAM (QuickSight users, S3 policies, EC2 roles)
- AWS Secrets Manager (credential management)
- AWS Certificate Manager (SSL/TLS)
Monitoring:
- Amazon CloudWatch (metrics, logs, alarms)
AWS X-Ray (distributed tracing)
Financial Services & Industry Skills (added)
- Large regulated financial-services delivery with formal change-control, audit and risk governance
- Operational resilience expectations including RTO/RPO, multi-region DR and evidence for audit review
- Awareness of applicable controls and regulations such as DORA, NIST CSF 2.0, PCI DSS, SEC cyber rules, RegSCI and SIFMU/FMI expectations where relevant
- Ability to create Tech Risk-ready documentation including ADRs, runbooks, design docs, threat models and validation evidence
- Clear communication with client engineering, security, SRE, data and platform stakeholders as an embedded SME
Certifications / Qualifications
- AWS Certified Data Engineer - Associate
- AWS Certified Solutions Architect - Associate / Professional
- AWS Certified Machine Learning - Specialty nice to have
- 5+ years of relevant hands-on delivery experience at L5 scope
- Prior delivery in a large regulated enterprise environment, preferably financial services
- Ability to write architecture decision records, design documents, runbooks and test evidence for client Tech Risk review
- Strong stakeholder communication across engineering, security, operations, SRE and delivery teams
- Compliance with AWS ProServe and client onboarding, security, vetting and time-zone overlap requirements