Windows Server Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Spearhead the discovery process for in-scope servers, documenting roles, services, installed software, and dependencies.

• Create upgrade strategies for each server, encompassing decisions on in-place upgrades versus rebuilds, AMI selection, EC2 sizing, and phased wave sequencing.

• Set go/no-go checkpoints between migration waves.

• Establish and confirm OS hardening baselines, which include DISA STIGs, CIS Benchmarks, and Active Directory Domain requirements.

• Address unresolved security issues.

• Develop secure administrative access solutions, such as RDP, jump server configurations, and CyberArk privileged access integration.

• Organize certificate management and renewal processes, including certificate chain validation.

• Design workloads dependent on Windows IIS, including Power BI Gateway servers.

• Collaborate with DevSecOps Engineers to automate Windows build standards and rectify configuration drift.

• Work alongside the Test Manager on wave test strategies, success criteria, and rollback protocols.

• Keep the project Risk Register up to date.

• Generate architecture documentation, such as Implementation Blueprints, design documents, and runbooks, using Confluence and Jira.

• Ensure compliance with the client's Technical Reference Model, audit, and vulnerability requirements.

• Direct the technical strategy for migrating a federal client's Windows Server environment within a FedRAMP-authorized AWS GovCloud setting.

• Mentor DevSecOps, Security, and Test team members to ensure compliant, low-risk upgrades for mission-critical systems.

⛳️ Requirements

• Bachelor's degree with 7 years of relevant experience.

• Associate's degree with 9 years of relevant experience may substitute for a Bachelor's degree.

• High School Diploma with 11 years of relevant experience may substitute for a Bachelor's degree.

• Proven experience leading migrations from Windows Server 2016 to 2019 or 2025 in AWS, including upgrade planning, testing, and rollback.

• AWS GovCloud experience is preferred.

• Practical experience in Windows Server OS hardening using federal and industry standards.

• Proven ability to integrate Windows servers with CyberArk for privileged access management.

• Extensive knowledge in Active Directory, Group Policy, DNS, DHCP, PKI, patching, and Remote Desktop Services.

• Proficient in PowerShell.

• Familiarity with AWS services for Windows workloads, such as EC2, AMIs, VPC, Systems Manager, and EBS snapshots.

• Experience with Windows configuration management utilizing Ansible, WMI, WinRM, and PowerShell.

• Capability to lead engineers and facilitate discussions with federal stakeholders.

• Microsoft Windows Server certification or equivalent hands-on experience may be taken into consideration.

• AWS certification is preferred.

• Experience with AWS Systems Manager automated system patching is preferred.

• Experience managing software deployments through Group Policy is preferred.

• Familiarity with Microsoft Power BI and Power BI Gateway administration is preferred.

• Experience in configuring and hardening Windows IIS servers is preferred.

• Background in supporting federal government systems with audit and vulnerability management is preferred.

• Must be eligible to obtain a Public Trust clearance.

🏝️ Benefits

• Full-Time, W2 employment.

• 100% remote work (US-based).

• 40 hours/week with availability during core business hours of 8am-5pm ET.