AWS Windows Infrastructure Engineer

The AWS Windows Infrastructure Engineer will play a key role in modernizing and securing Windows Server infrastructure within a federal AWS GovCloud environment.

• Automate Windows Server configuration, provisioning, deployment, and maintenance using Ansible, PowerShell, PowerShell Desired State Configuration (DSC), or comparable tools.
• Update existing Windows Server 2016 configuration baselines to meet Windows Server 2019 or 2025 standards.
• Identify and remediate configuration drift to ensure consistency across environments.
• Develop and maintain reusable scripts and automation workflows that improve infrastructure reliability and repeatability.
• Build and maintain hardened Windows Amazon Machine Images (AMIs) for upgraded server environments.
• Automate Amazon EC2 provisioning and related infrastructure configuration.
• Use AWS services, including Systems Manager, VPC, and EBS snapshots, to support server deployment, administration, and recovery.
• Apply infrastructure-as-code and image-building practices to standardize infrastructure delivery.
• Automate Windows operating system hardening and compliance validation against DISA Security Technical Implementation Guides (STIGs), CIS Benchmarks, Group Policy requirements, and applicable security baselines.
• Identify and remediate security findings, vulnerabilities, and configuration weaknesses.
• Support audit readiness and security compliance within a regulated federal environment.
• Implement secure configuration practices aligned with established architectural and operational requirements.
• Execute Windows Server upgrades in planned phases, coordinating migration activities across environment tiers.
• Perform pre-upgrade backups and snapshots, post-upgrade validation, and automated rollback procedures.
• Help minimize service disruption and reduce migration risks through repeatable deployment and recovery processes.
• Validate upgraded systems to confirm functionality, security, and operational readiness.
• Automate patching, system inventory, and routine infrastructure tasks using AWS Systems Manager.
• Automate certificate installation and renewal for Windows servers and associated services.
• Support Windows Server administration, including Active Directory, Group Policy, DNS, certificate management, and software patching.
• Where applicable, support software deployments through Group Policy, Windows IIS configurations, and Power BI Gateway.
• Integrate infrastructure automation into CI/CD pipelines using tools such as Jenkins and GitHub.
• Maintain version-controlled, peer-reviewed automation code and follow established development practices.
• Collaborate within an Agile, DevSecOps environment to improve deployment quality and operational consistency.
• Document configurations, automation workflows, and operational procedures in Confluence, and track activities and deliverables through Jira.
• Work under the technical direction of the Windows Architect to implement infrastructure designs and meet project objectives.

• A bachelor's degree and at least five years of relevant experience are required. Candidates with an associate degree must have at least seven years of relevant experience, while candidates with a high school diploma must have at least nine years.
• Hands-on experience automating Windows Server configuration and deployment with Ansible, PowerShell DSC, or similar configuration management tools.
• Advanced PowerShell scripting skills, including the ability to develop maintainable automation for infrastructure configuration, validation, and operational tasks.
• Experience supporting Windows Server 2016 migrations or upgrades to Windows Server 2019 or 2025 in AWS environments.
• Working knowledge of AWS services supporting Windows workloads, including EC2, AMIs, VPC, Systems Manager, and EBS snapshots.
• Strong Windows Server administration skills, including Active Directory, Group Policy, DNS, certificate management, and patching.
• Experience automating Windows operating system hardening and implementing security baselines. Experience in federal government or other regulated environments is preferred.
• Experience with tools such as Terraform, AWS CloudFormation, Packer, or EC2 Image Builder.
• Experience using Git-based version control and CI/CD pipelines in an Agile or DevSecOps environment.
• Ability to document technical solutions, maintain operational procedures, and collaborate effectively.