AWS Windows Infrastructure Engineer

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for an AWS Windows Infrastructure Engineer based in the United States.

The AWS Windows Infrastructure Engineer will play a key role in modernizing and securing Windows Server infrastructure within a federal AWS GovCloud environment. You will automate server configuration, deployment, hardening, and compliance to support the migration from Windows Server 2016 to Windows Server 2019 or 2025. Working closely with the Windows Architect, you will translate technical designs and security requirements into repeatable, automated infrastructure solutions. Your work will help improve consistency, operational efficiency, and security across multiple environment tiers. You will leverage AWS services, PowerShell, configuration management tools, and CI/CD pipelines to streamline infrastructure upgrades and ongoing operations. This fully remote, full-time opportunity is suited to an experienced infrastructure engineer comfortable working in regulated environments and supporting federal security requirements.

Accountabilities

• Windows Server automation and configuration:

  • Automate Windows Server configuration, provisioning, deployment, and maintenance using Ansible, PowerShell, PowerShell Desired State Configuration (DSC), or comparable tools.
  • Update existing Windows Server 2016 configuration baselines to meet Windows Server 2019 or 2025 standards.
  • Identify and remediate configuration drift to ensure consistency across environments.
  • Develop and maintain reusable scripts and automation workflows that improve infrastructure reliability and repeatability.

  • AWS infrastructure and image management:

    • Build and maintain hardened Windows Amazon Machine Images (AMIs) for upgraded server environments.
    • Automate Amazon EC2 provisioning and related infrastructure configuration.
    • Use AWS services, including Systems Manager, VPC, and EBS snapshots, to support server deployment, administration, and recovery.
    • Apply infrastructure-as-code and image-building practices to standardize infrastructure delivery.

    • Security hardening and compliance:

      • Automate Windows operating system hardening and compliance validation against DISA Security Technical Implementation Guides (STIGs), CIS Benchmarks, Group Policy requirements, and applicable security baselines.
      • Identify and remediate security findings, vulnerabilities, and configuration weaknesses.
      • Support audit readiness and security compliance within a regulated federal environment.
      • Implement secure configuration practices aligned with established architectural and operational requirements.

      • Server upgrades and migration execution:

        • Execute Windows Server upgrades in planned phases, coordinating migration activities across environment tiers.
        • Perform pre-upgrade backups and snapshots, post-upgrade validation, and automated rollback procedures.
        • Help minimize service disruption and reduce migration risks through repeatable deployment and recovery processes.
        • Validate upgraded systems to confirm functionality, security, and operational readiness.

        • Systems administration and operational automation:

          • Automate patching, system inventory, and routine infrastructure tasks using AWS Systems Manager.
          • Automate certificate installation and renewal for Windows servers and associated services.
          • Support Windows Server administration, including Active Directory, Group Policy, DNS, certificate management, and software patching.
          • Where applicable, support software deployments through Group Policy, Windows IIS configurations, and Power BI Gateway.

          • DevSecOps integration and documentation:

            • Integrate infrastructure automation into CI/CD pipelines using tools such as Jenkins and GitHub.
            • Maintain version-controlled, peer-reviewed automation code and follow established development practices.
            • Collaborate within an Agile, DevSecOps environment to improve deployment quality and operational consistency.
            • Document configurations, automation workflows, and operational procedures in Confluence, and track activities and deliverables through Jira.
            • Work under the technical direction of the Windows Architect to implement infras…