AWS Windows Infrastructure Engineer

The AWS Windows Infrastructure Engineer will play a key role in modernizing and securing Windows Server infrastructure within a federal AWS GovCloud environment. You will automate server configuration, deployment, hardening, and compliance to support the migration from Windows Server 2016 to Windows Server 2019 or 2025. Working closely with the Windows Architect, you will translate technical designs and security requirements into repeatable, automated infrastructure solutions. Your work will help improve consistency, operational efficiency, and security across multiple environment tiers. You will leverage AWS services, PowerShell, configuration management tools, and CI/CD pipelines to streamline infrastructure upgrades and ongoing operations. This fully remote, full-time opportunity is suited to an experienced infrastructure engineer comfortable working in regulated environments and supporting federal security requirements.

• Automate Windows Server configuration, provisioning, deployment, and maintenance using Ansible, PowerShell, PowerShell Desired State Configuration (DSC), or comparable tools.

• Update existing Windows Server 2016 configuration baselines to meet Windows Server 2019 or 2025 standards.

• Identify and remediate configuration drift to ensure consistency across environments.

• Develop and maintain reusable scripts and automation workflows that improve infrastructure reliability and repeatability.

• Build and maintain hardened Windows Amazon Machine Images (AMIs) for upgraded server environments.

• Automate Amazon EC2 provisioning and related infrastructure configuration.

• Use AWS services, including Systems Manager, VPC, and EBS snapshots, to support server deployment, administration, and recovery.

• Apply infrastructure-as-code and image-building practices to standardize infrastructure delivery.

• Automate Windows operating system hardening and compliance validation against DISA Security Technical Implementation Guides (STIGs), CIS Benchmarks, Group Policy requirements, and applicable security baselines.

• Identify and remediate security findings, vulnerabilities, and configuration weaknesses.

• Support audit readiness and security compliance within a regulated federal environment.

• Implement secure configuration practices aligned with established architectural and operational requirements.

• Execute Windows Server upgrades in planned phases, coordinating migration activities across environment tiers.

• Perform pre-upgrade backups and snapshots, post-upgrade validation, and automated rollback procedures.

• Help minimize service disruption and reduce migration risks through repeatable deployment and recovery processes.

• Validate upgraded systems to confirm functionality, security, and operational readiness.

• Automate patching, system inventory, and routine infrastructure tasks using AWS Systems Manager.

• Automate certificate installation and renewal for Windows servers and associated services.

• Support Windows Server administration, including Active Directory, Group Policy, DNS, certificate management, and software patching.

• Where applicable, support software deployments through Group Policy, Windows IIS configurations, and Power BI Gateway.

• Integrate infrastructure automation into CI/CD pipelines using tools such as Jenkins and GitHub.

• Maintain version-controlled, peer-reviewed automation code and follow established development practices.

• Collaborate within an Agile, DevSecOps environment to improve deployment quality and operational consistency.

• Document configurations, automation workflows, and operational procedures in Confluence, and track activities and deliverables through Jira.

• Work under the technical direction of the Windows Architect to implement infrastructure designs and meet project objectives.

• • Microsoft Windows Server certification, such as Microsoft Certified: Windows Server Administrator Associate, or an AWS certification, such as AWS Certified SysOps Administrator – Associate.

  • Experience integrating Windows servers with CyberArk for privileged access management.

  • Experience managing software deployments through Group Policy.

  • Experience configuring and maintaining Windows IIS servers and Power BI Gateway.

  • Experience supporting federal government systems, particularly in audit readiness, vulnerability management, and security compliance.