Windows Client Engineer

Description

Do you have a passion for operating enterprise infrastructure that enables thousands of builders to accomplish their mission in secure, air-gapped environments? Would you like to be the engineer that keeps critical communication and authentication services running across Amazon Dedicated Cloud regions?

Region Services Corporate Infrastructure (RSCI) Collaborative Services is looking for an experienced Windows System Engineer II with deep knowledge of enterprise messaging, network authentication, virtualization, and certificate services. You will operate and improve services that builders depend on daily — Exchange, Skype for Business, Certificate Authority, Network Policy Service (802.1x/RADIUS), HyperV, Data Protection Manager (DPM), SFTP/Diode staging infrastructure, HyperV hardware lifecycle management, and lab environments across multiple isolated Remote Management and Administration (RM&A) regions.

This position requires that the candidate selected must currently possess and maintain an active TS/SCI security clearance with polygraph. The position further requires the candidate to opt into a commensurate clearance for each government agency for which they perform AWS work.

Key job responsibilities
- Manage/Operate and maintain enterprise services: Exchange, Skype for Business, Certificate Authority, NPS (802.1x), HyperV, and Data Protection Manager (DPM)
- Troubleshoot complex Windows systems issues enterprise-wide across Active Directory, Group Policy, certificate enrollment, and network authentication
- Security compliance including hardening OS, managing patching (Windows Server Update Services (WSUS)/Endpoint Configuration Manager (ECM)), and maintaining vulnerability SLAs
- Manage metrics, monitoring, alarming, and dashboards for service health visibility
- Create and update system documentation, runbooks for engineering, operations, and support teams
- Respond to and resolve high-severity operational events; perform root cause analysis
- Build PowerShell automation to reduce manual operational burden
- Train and mentor junior engineers on Windows systems and ADC operations
- Provide on-call support

A day in the life
Our mission is to deliver robust, highly available, and easy to use enterprise services to our internal customers in support of the Amazon Dedicated Cloud for U.S. Government customers. We are looking for a motivated engineer to deliver results for our customers.

This is a hands-on position where your daily role will maintain and enhance existing services including Exchange mailflow, 802.1x network authentication, certificate enrollment, HyperV cluster operations, and backup/recovery. You will respond to operational events, drive automation of repetitive tasks, and ensure security compliance across all managed environments. This role works closely with Network Engineers, Data Center Operations, Security, Builder Experience, and partner teams to deliver integrated solutions.

You will have a strong and diverse technical background that allows you to approach problems with confidence and ingenuity. You must be a "lifelong learner", embracing rapid innovations in technology and understanding how to leverage them to continue to improve our services. A successful ADC Engineer will drive operational improvements, find ways to automate existing services, and provide escalation and mentoring for junior team members.

About the team
About AWS

Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.

Why AWS?

Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge-sharing and mentorship. Our senior members enjoy one-on-one mentoring and thorough, but kind, code reviews. We care about your career growth and strive to assign projects that help our team members develop your engineering expertise so you feel empowered to take on more complex tasks in the future.

AWS Infrastructure Services (AIS)

AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we’re the people who keep the cloud running. We support all AWS data centers and all of the servers, storage, networking, power, and cooling equipment that ensure our customers have continual access to the innovation they rely on. We work on the most challenging problems, with thousands of variables impacting the supply chain — and we’re looking for talented people who want to help.

Diverse Experiences

AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Inclusive Team Culture

AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.

Mentorship & Career Growth

We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud.

Basic Qualifications

- Associate's degree, or Cloud+ or GICSP (Global Industrial Cyber Security Professional) or GSEC (GIAC Security Essentials) or SSCP (Systems Security Certified Practitioner)
- Experience scripting in PowerShell or other scripting languages
- Experience with Active Directory, or experience in managing and troublshooting network and experience deploying, managing, and optimizing Microsoft Windows Server
- 5+ years supporting Windows family of operating systems to include 4 of the following 8 core competencies: AD, DHCP, PowerShell, Email workflow, SCCM, SCOM, Win OS, DNS, and disaster recovery/business continuity
- Current, active US Government Security Clearance of TS/SCI with Polygraph

Preferred Qualifications

- Cloud+ or GICSP (Global Industrial Cyber Security Professional) or GSEC (GIAC Security Essentials) or SSCP (Systems Security Certified Practitioner), or Associate's degree
- Experience with PowerShell (preferred), Python, Ruby, or Java
- Experience dealing well with ambiguity, prioritizing needs, and delivering measurable results in an agile environment
- Experience communicating with users, other technical teams, and management to collect requirements, describe software product features, and technical designs
- 8+ years supporting Windows family of operating systems to include 4 of the following 8 core competencies: AD, DHCP, PowerShell, Email workflow, SCCM, SCOM, Win OS, DNS, and disaster recovery/business continuity
- Associates Degree or Higher in Computer related field.

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.