Migrated 10+ on-premises VMs to AWS via OVA-to-AMI conversion. Designed secure VPC architecture with segmented subnets, hardened security groups, KMS encryption, and CloudTrail/GuardDuty monitoring.