AWS Windows Infrastructure Engineer

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for an AWS Windows Infrastructure Engineer based in the United States. The AWS Windows Infrastructure Engineer will play a key role in modernizing and securing Windows Server infrastructure within a federal AWS GovCloud environment. You will automate server configuration, deployment, hardening, and compliance to support the migration from Windows Server 2016 to Windows Server 2019 or 2025. Working closely with the Windows Architect, you will translate technical designs and security requirements into repeatable, automated infrastructure solutions. Your work will help improve consistency, operational efficiency, and security across multiple environment tiers. You will leverage AWS services, PowerShell, configuration management tools, and CI/CD pipelines to streamline infrastructure upgrades and ongoing operations. This fully remote, full-time opportunity is suited to an experienced infrastructure engineer comfortable working in regulated environments and supporting federal security requirements.

Windows Server automation and configuration: Automate Windows Server configuration, provisioning, deployment, and maintenance using Ansible, PowerShell, PowerShell Desired State Configuration (DSC), or comparable tools. Update existing Windows Server 2016 configuration baselines to meet Windows Server 2019 or 2025 standards. Identify and remediate configuration drift to ensure consistency across environments. Develop and maintain reusable scripts and automation workflows that improve infrastructure reliability and repeatability. AWS infrastructure and image management: Build and maintain hardened Windows Amazon Machine Images (AMIs) for upgraded server environments. Automate Amazon EC2 provisioning and related infrastructure configuration. Use AWS services, including Systems Manager, VPC, and EBS snapshots, to support server deployment, administration, and recovery. Apply infrastructure-as-code and image-building practices to standardize infrastructure delivery. Security hardening and compliance: Automate Windows operating system hardening and compliance validation against DISA Security Technical Implementation Guides (STIGs), CIS Benchmarks, Group Policy requirements, and applicable security baselines. Identify and remediate security findings, vulnerabilities, and configuration weaknesses. Support audit readiness and security compliance within a regulated federal environment. Implement secure configuration practices aligned with established architectural and operational requirements. Server upgrades and migration execution: Execute Windows Server upgrades in planned phases, coordinating migration activities across environment tiers. Perform pre-upgrade backups and snapshots, post-upgrade validation, and automated rollback procedures. Help minimize service disruption and reduce migration risks through repeatable deployment and recovery processes. Validate upgraded systems to confirm functionality, security, and operational readiness. Systems administration and operational automation: Automate patching, system inventory, and routine infrastructure tasks using AWS Systems Manager. Automate certificate installation and renewal for Windows servers and associated services. Support Windows Server administration, including Active Directory, Group Policy, DNS, certificate management, and software patching. Where applicable, support software deployments through Group Policy, Windows IIS configurations, and Power BI Gateway. DevSecOps integration and documentation: Integrate infrastructure automation into CI/CD pipelines using tools such as Jenkins and GitHub. Maintain version-controlled, peer-reviewed automation code and follow established development practices. Collaborate within an Agile, DevSecOps environment to improve deployment quality and operational consistency. Document configurations, automation workflows, and operational procedures in Confluence, and track activities and deliverables through Jira. Work under the technical direction of the Windows Architect to implement infrastructure designs and meet project objectives. Requirements: Education and experience: A bachelor's degree and at least five years of relevant experience are required. Candidates with an associate degree must have at least seven years of relevant experience, while candidates with a high school diploma must have at least nine years. Windows Server automation: Hands-on experience automating Windows Server configuration and deployment with Ansible, PowerShell DSC, or similar configuration management tools. PowerShell expertise: Advanced PowerShell scripting skills, including the ability to develop maintainable automation for infrastructure configuration, validation, and operational tasks. Migration experience: Experience supporting Windows Server 2016 migrations or upgrades to Windows Server 2019 or 2025 in AWS environments. AWS knowledge: Working knowledge of AWS services supporting Windows workloads, including EC2, AMIs, VPC, Systems Manager, and EBS snapshots. Windows administration: Strong Windows Server administration skills, including Active Directory, Group Policy, DNS, certificate management, and patching. Security and compliance: Experience automating Windows operating system hardening and implementing security baselines. Experience in federal government or other regulated environments is preferred. Infrastructure as code and image building: Experience with tools such as Terraform, AWS CloudFormation, Packer, or EC2 Image Builder. CI/CD and version control: Experience using Git-based version control and CI/CD pipelines in an Agile or DevSecOps environment. Documentation and collaboration: Ability to document technical solutions, maintain operational runbooks, collaborate with architects and engineering teams, and manage work through tools such as Jira and Confluence. Security clearance eligibility: Must be eligible to obtain a Public Trust clearance. Work schedule: Ability to work 40 hours per week and maintain availability during core business hours, from 8:00 a.m. to 5:00 p.m. Eastern Time. Preferred qualifications: Microsoft Windows Server certification, such as Microsoft Certified: Windows Server Administrator Associate, or an AWS certification, such as AWS Certified SysOps Administrator – Associate. Experience integrating Windows servers with CyberArk for privileged access management. Experience managing software deployments through Group Policy. Experience configuring and maintaining Windows IIS servers and Power BI Gateway. Experience supporting federal government systems, particularly in audit readiness, vulnerability management, and security compliance. Benefits: Employment type: Full-time, W-2 employment. Remote work: 100% remote position for candidates based in the United States. Working hours: 40 hours per week, with availability required during core business hours of 8:00 a.m. to 5:00 p.m. Eastern Time. Federal technology experience: Opportunity to contribute to Windows Server modernization and infrastructure security within an AWS GovCloud environment. Technical development: Hands-on work with AWS infrastructure, Windows Server automation, infrastructure as code, security hardening, and DevSecOps practices. Security and compliance exposure: Opportunity to strengthen expertise in federal security baselines, vulnerability remediation, and regulated infrastructure environments. Compensation and additional benefits: A specific salary range, healthcare coverage, paid time off, retirement benefits, and other employee perks were not specified in the provided job description.