AWS Windows Infrastructure Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Automate the configuration, building, and deployment of Windows Server using configuration management tools such as Ansible and PowerShell, along with PowerShell scripting.

• Update configuration baselines from Windows Server 2016 to meet Windows Server 2019/2025 standards while addressing configuration drift.

• Create and maintain secure Windows AMIs and automate the provisioning of EC2 instances for upgraded servers.

• Implement OS hardening and compliance checks, including DISA STIGs, CIS Benchmarks, and Group Policy, while remediating any security findings.

• Carry out upgrades in phased waves, which include pre-upgrade backups/snapshots, post-upgrade validation, and automated rollback procedures.

• Automate patch management, inventory, and operational tasks utilizing AWS Systems Manager.

• Facilitate the installation and renewal of certificates for upgraded servers and services automatically.

• Integrate Windows automation into CI/CD pipelines like Jenkins and GitHub using version-controlled, peer-reviewed code.

• Document automation processes, configurations, and runbooks in Confluence, while tracking work in Jira.

• Collaborate under the technical guidance of the Windows Architect to support a federal client's Windows Server infrastructure upgrade.

⛳️ Requirements

• Bachelor’s degree with 5 years of relevant experience.

• Associate’s degree with 7 years of experience may be accepted in lieu of a Bachelor’s degree.

• High School Diploma with 9 years of experience may be accepted in lieu of a Bachelor’s degree.

• Practical experience in automating Windows Server configuration using Ansible, PowerShell DSC, or similar tools.

• Proficient in advanced PowerShell scripting.

• Experience in upgrading or migrating from Windows Server 2016 to 2019 or 2025 within AWS environments.

• Experience in automating Windows OS hardening, preferably within regulated federal or industry standards.

• Familiarity with AWS services for Windows workloads, such as EC2, AMIs, VPC, Systems Manager, and EBS snapshots.

• Strong Windows Server administration skills, including expertise in Active Directory, Group Policy, DNS, certificates, and patch management.

• Experience with infrastructure-as-code tools such as Terraform or CloudFormation, or image-building tools like Packer or EC2 Image Builder.

• Experience with Git-based version control and CI/CD pipelines in an Agile, DevSecOps setting.

• Must be eligible to secure a Public Trust clearance.

• Preferred: Certification in Microsoft Windows Server or AWS.

• Preferred: Experience in integrating Windows servers with CyberArk for privileged access management.

• Preferred: Experience in managing software deployments via Group Policy.

• Preferred: Experience in configuring Windows IIS servers and Power BI Gateway.

• Preferred: Experience in supporting federal government systems with audit and vulnerability management.

🏝️ Benefits

• 100% Remote (US-based).

• Full-Time, W2 employment.

• 40 hours/week with availability during core business hours of 8am-5pm ET.