Do you have a passion for operating enterprise infrastructure that enables thousands of builders to accomplish their mission in secure, air-gapped environments? Would you like to be the engineer that keeps critical communication and authentication services running across Amazon Dedicated Cloud regions?
Region Services Corporate Infrastructure (RSCI) Collaborative Services is looking for an experienced Windows System Engineer II with deep knowledge of enterprise messaging, network authentication, virtualization, and certificate services. You will operate and improve services that builders depend on daily - Exchange, Skype for Business, Certificate Authority, Network Policy Service (802.1x/RADIUS), HyperV, Data Protection Manager (DPM), SFTP/Diode staging infrastructure, HyperV hardware lifecycle management, and lab environments across multiple isolated Remote Management and Administration (RM&A) regions.
This position requires that the candidate selected must currently possess and maintain an active TS/SCI security clearance with polygraph. The position further requires the candidate to opt into a commensurate clearance for each government agency for which they perform AWS work.
Key job responsibilities
- Manage/Operate and maintain enterprise services: Exchange, Skype for Business, Certificate Authority, NPS (802.1x), HyperV, and Data Protection Manager (DPM)
- Troubleshoot complex Windows systems issues enterprise-wide across Active Directory, Group Policy, certificate enrollment, and network authentication
- Security compliance including hardening OS, managing patching (Windows Server Update Services (WSUS)/Endpoint Configuration Manager (ECM)), and maintaining vulnerability SLAs
- Manage metrics, monitoring, alarming, and dashboards for service health visibility
- Create and update system documentation, runbooks for engineering, operations, and support teams
- Respond to and resolve high-severity operational events; perform root cause analysis
- Build PowerShell automation to reduce manual operational burden
- Train and mentor junior engineers on Windows systems and ADC operations
- Provide on-call support
A day in the life
Our mission is to deliver robust, highly available, and easy to use enterprise services to our internal customers in support of the Amazon Dedicated Cloud for U.S. Government customers. We are looking for a motivated engineer to deliver results for our customers.
This is a hands-on position where your daily role will maintain and enhance existing services including Exchange mailflow, 802.1x network authentication, certificate enrollment, HyperV cluster operations, and backup/recovery. You will respond to operational events, drive automation of repetitive tasks, and ensure security compliance across all managed environments. This role works closely with Network Engineers, Data Center Operations, Security, Builder Experience, and partner teams to deliver integrated solutions.
You will have a strong and diverse technical background that allows you to approach problems with confidence and ingenuity. You must be a "lifelong learner", embracing rapid innovations in technology and understanding how to leverage them to continue to improve our services. A successful ADC Engineer will drive operational improvements, find ways to automate existing services, and provide escalation and mentoring for junior team members.
BASIC QUALIFICATIONS
- Associate's degree, or Cloud+ or GICSP (Global Industrial Cyber Security Professional) or GSEC (GIAC Security Essentials) or SSCP (Systems Security Certified Practitioner)
- Experience scripting in PowerShell or other scripting languages
- Experience with Active Directory, or experience in managing and troublshooting network and experience deploying, managing, and optimizing Microsoft Windows Server
- 5+ years supporting Windows family of operating systems to include 4 of the following 8 core competencies: AD, DHCP, PowerShell, Email workflow, SCCM, SCOM, Win OS, DNS, and disaster recovery/business continuity
- Current, active US Government Security Clearance of TS/SCI with Polygraph
PREFERRED QUALIFICATIONS
- Cloud+ or GICSP (Global Industrial Cyber Security Professional) or GSEC (GIAC Security Essentials) or SSCP (Systems Security Certified Practitioner), or Associate's degree
- Experience with PowerShell (preferred), Python, Ruby, or Java
- Experience dealing well with ambiguity, prioritizing needs, and delivering measurable results in an agile environment
- Experience communicating with users, other technical teams, and management to collect requirements, describe software product features, and technical designs
- 8+ years supporting Windows family of operating systems to include 4 of the following 8 core competencies: AD, DHCP, PowerShell, Email workflow, SCCM, SCOM, Win OS, DNS, and disaster recovery/business continuity
- Associates Degree or Higher in Computer related field.
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, VA, Herndon - 116,900.00 - 167,400.00 USD annually
