Key Responsibilities
AWS WorkSpaces Engineering & Architecture
Design, implement, and maintain enterprise-scale Amazon WorkSpaces environments.
Architect and manage AWS WorkSpaces deployments across multiple environments.
Develop long-term platform strategy, scalability planning, and operational standards.
Evaluate and implement new AWS EUC technologies and features.
Conduct capacity planning, performance analysis, and platform optimization.
Support disaster recovery planning, testing, and recovery validation procedures.
Perform root cause analysis for complex platform-wide issues.
undefined
Image Management & Desktop Engineering
Build, maintain, and optimize AWS WorkSpaces custom images and bundles.
Create standardized gold images aligned with security and operational requirements.
Validate Windows updates, application patching, and security configurations before promotion to production.
Manage image lifecycle processes, testing procedures, rollback strategies, and release documentation.
Implement automation for image creation, validation, and deployment.
Ensure image consistency across development, testing, and production environments.
Establish desktop hardening standards and compliance baselines.
Identity, Directory Services & Authentication
Design and support integrations between AWS WorkSpaces, Microsoft Active Directory, and Microsoft Entra ID.
Manage AWS Directory Services and hybrid identity configurations.
Troubleshoot directory synchronization, computer object creation, OU placement, and authentication workflows.
Support hybrid identity solutions involving Active Directory, Entra Connect, and Intune.
Configure and maintain MFA integrations utilizing RADIUS authentication.
Lead initiatives to migrate legacy authentication methods toward SAML-based federation.
Support Single Sign-On solutions and modern authentication architectures.
Intune & Endpoint Management Integration
Partner with Endpoint Engineering teams to integrate AWS WorkSpaces with Microsoft Intune.
Ensure proper enrollment and management of hybrid-joined WorkSpaces devices.
Support application deployment, policy management, compliance enforcement, and reporting through Intune.
Troubleshoot device registration and management issues involving Entra ID and Intune.
Develop standards for cloud-hosted desktop management using Microsoft technologies.
Collaborate on endpoint security, patching, and configuration management initiatives.
Cloud Infrastructure & Networking
Administer AWS networking components supporting WorkSpaces environments.
Manage Route 53 DNS configurations and name resolution services.
Troubleshoot connectivity, routing, firewall, VPN, and DNS-related issues.
Work closely with network engineering teams to optimize cloud connectivity and user experience.
Understand VPC design, subnets, security groups, network ACLs, and routing principles as they relate to WorkSpaces deployments.
Support desktop access from Windows, macOS, thin clients, and mobile platforms.
Automation & Platform Engineering
Develop automation solutions utilizing AWS Lambda, PowerShell, Python, and AWS native services.
Automate provisioning, monitoring, remediation, reporting, and operational workflows.
Create self-healing mechanisms for common platform issues.
Maintain infrastructure-as-code standards where applicable.
Reduce operational overhead through orchestration and automation initiatives.
Monitoring & Operational Excellence
Configure and maintain CloudWatch dashboards, metrics, alarms, and logging.
Develop proactive monitoring and alerting capabilities.
Analyze performance trends and resource utilization.
Implement operational reporting and executive dashboards.
Participate in incident management, problem management, and root cause analysis activities.
Drive continuous service improvements and platform optimization efforts.
Security & Compliance
Ensure AWS WorkSpaces environments meet security, regulatory, and audit requirements.
Partner with cybersecurity teams to implement security controls and monitoring.
Support vulnerability remediation and platform hardening initiatives.
Participate in audits, risk assessments, and compliance reviews.
Maintain secure access standards, least privilege permissions, and identity governance controls.
Support logging, monitoring, and security event investigations.
Operational Requirements
Execute infrastructure changes under strict Change Management procedures.
Create technical documentation, architecture diagrams, operational runbooks, and support guides.
Participate in after-hours maintenance activities as required.
Provide Level 3 engineering support and escalation assistance.
Collaborate across cloud, infrastructure, security, networking, and endpoint management teams.
Qualifications
7+ years of enterprise infrastructure engineering experience.
5+ years of AWS engineering experience.
3+ years of Amazon WorkSpaces administration and architecture experience.
Deep understanding of AWS WorkSpaces Images, Bundles, Directories, and lifecycle management.
Strong experience with Microsoft Active Directory and hybrid identity environments.
Experience integrating AWS WorkSpaces with Microsoft Entra ID and Intune.
Experience supporting RADIUS MFA authentication and SAML federation solutions.
Strong understanding of cloud networking concepts including Route 53, DNS, VPCs, subnets, routing, and security controls.
Experience with AWS CloudWatch monitoring and alerting.
Strong PowerShell and automation experience.
Experience utilizing AWS Lambda for operational automation.
Knowledge of endpoint deployment and application delivery practices.
Experience supporting Windows 11 enterprise desktop environments.
Excellent troubleshooting and root cause analysis skills.
Strong documentation and communication skills.
Work Conditions & Expectations
Hybrid Schedule: 3 days onsite (Charlotte NC preferred, occasional asks to report to Winston-Salem NC as needed); remaining days remote. On-site requirement can change at any time.
Operational Flexibility: Ability to perform after-hours changes and participate in on-call rotations when required.
Dynamic Environment: Work involves frequent troubleshooting, collaboration across teams, and adapting to evolving technologies.
Security & Compliance: Must adhere to strict Change Management processes and participate in security reviews as needed.
Standard Office Setup: Role primarily uses standard IT equipment (laptops, conferencing tools, monitoring systems) with occasional interaction with server rooms or networking hardware.
