Windows Systems Engineer, Region Services Corporate Infrastructure (Vector) Team
awsSeattle (WA)
Windows Systems Engineer, Region Services Corporate Infrastructure (Vector) Team
Posted 6 days ago
awsSeattle (WA)
SENIORITY
Senior
About the role
Windows Systems Engineer Region Services Corporate Infrastructure (RSCI) delivers foundational Windows infrastructure services across Amazon Dedicated Cloud (ADC) environments supporting U.S. Government customers. Our team owns Active Directory, DFS, DHCP, DNS, Enterprise Configuration Manager (ECM), and Group Policy - services that every other team in the environment depends on. We are looking for a Windows Systems Engineer who knows Windows infrastructure and is ready to transform how we manage it. Our direction is Infrastructure as Code - we need someone who can support production services today while building the automation that eliminates manual operations tomorrow. You don't need to be a deep expert in every service we own, but you need to be comfortable operating across all of them and confident enough to codify their configuration and deployment. This is a hands-on role. You will support and maintain critical Windows services, build Ansible-based automation to manage them at scale, troubleshoot complex cross-service issues, and drive operational improvements that make our services more reliable and our team more efficient. Key job responsibilities include: Support and maintain Windows infrastructure services across multiple isolated ADC environments: Active Directory, DFS, DHCP, DNS, ECM, and Group Policy. Troubleshoot and resolve service issues across the Windows infrastructure stack, providing escalation support for Tier 1/2 teams. Migrate existing manual operational processes to code-defined, repeatable automation. Define and monitor service health metrics; build and maintain alarming that enables proactive response. Ensure services meet security compliance and hardening requirements in partnership with the Security Compliance team. Create and maintain operational documentation including runbooks, architecture diagrams, and standard operating procedures. Participate in on-call rotation for service-impacting events.
Basic qualifications include:
High school or equivalent diploma, or A+ or CND (Certified Network Defender) or Network+ or Security+. 2+ years supporting Windows family of operating systems to include four (4) of the following eight (8) core competencies: AD, DHCP, Powershell, Email workflow, SCCM, SCOM, Win OS, DNS, and disaster recovery/business continuity. Experience administering, maintaining and operating Active Directory Windows based networks and networking basic skills and troubleshooting. Current, active US Government Security Clearance of TS/SCI with Polygraph.
Preferred qualifications include:
Experience operating in air-gapped or isolated network environments. Demonstrated ability to script in the Windows environment using PowerShell. Familiarity with ECM/SCCM/MECM for OS deployment and patch management. Understanding of WSUS, PKI/certificate services, or identity management. Experience building monitoring and alerting for Windows services.
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.