Windows Systems Engineer, Region Services Corporate Infrastructure (Vector) Team

Region Services Corporate Infrastructure (RSCI) delivers foundational Windows infrastructure services across Amazon Dedicated Cloud (ADC) environments supporting U.S. Government customers. Our team owns Active Directory, DFS, DHCP, DNS, Enterprise Configuration Manager (ECM), and Group Policy - services that every other team in the environment depends on.

We are looking for a Windows Systems Engineer who knows Windows infrastructure and is ready to transform how we manage it. Our direction is Infrastructure as Code - we need someone who can support production services today while building the automation that eliminates manual operations tomorrow. You don't need to be a deep expert in every service we own, but you need to be comfortable operating across all of them and confident enough to codify their configuration and deployment.

This is a hands-on role. You will support and maintain critical Windows services, build Ansible-based automation to manage them at scale, troubleshoot complex cross-service issues, and drive operational improvements that make our services more reliable and our team more efficient.


This position requires that the candidate selected must currently possess and maintain an active TS/SCI security clearance with polygraph. The position further requires the candidate to opt into a commensurate clearance for each government agency for which they perform AWS work.

Key job responsibilities
- Support and maintain Windows infrastructure services across multiple isolated ADC environments: Active Directory, DFS, DHCP, DNS, ECM, and Group Policy

- Build and maintain Ansible playbooks and PowerShell automation to manage service configuration, deployment, and lifecycle operations

- Troubleshoot and resolve service issues across the Windows infrastructure stack, providing escalation support for Tier 1/2 teams

- Migrate existing manual operational processes to code-defined, repeatable automation

- Define and monitor service health metrics; build and maintain alarming that enables proactive response

- Ensure services meet security compliance and hardening requirements in partnership with the Security Compliance team

- Create and maintain operational documentation including runbooks, architecture diagrams, and standard operating procedures

- Mentor junior team members on Windows infrastructure and automation practices

- Participate in on-call rotation for service-impacting events

A day in the life
Why AWS
Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.
 
AWS Infrastructure Services (AIS)
AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we’re the people who keep the cloud running. We support all AWS data centers and all of the servers, storage, networking, power, and cooling equipment that ensure our customers have continual access to the innovation they rely on. We work on the most challenging problems, with thousands of variables impacting the supply chain — and we’re looking for talented people who want to help.
 
Inclusive Team Culture
Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon conferences, inspire us to never stop embracing our uniqueness.
 
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud.
 
Mentorship and Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.
 
Diverse Experiences
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

About the team
We are dedicated to supporting our new team members. Our team has a broad mix of experience levels and Amazon tenures, and we’re building an environment that celebrates knowledge sharing and mentorship.

Our team also puts a high value on work-life balance. Striking a healthy balance between your personal and professional life is crucial to your happiness and success here, which is why we aren’t focused on how many hours you spend at work or online. Instead, we’re happy to offer a flexible schedule so you can have a more productive and well-balanced life—both in and outside of work. - Associate's degree, or Cloud+ or GICSP (Global Industrial Cyber Security Professional) or GSEC (GIAC Security Essentials) or SSCP (Systems Security Certified Practitioner)
- 5+ years supporting Windows family of operating systems to include four (4) of the following eight (8) core competencies: AD, DHCP, Powershell, Email workflow, SCCM, SCOM, Win OS, DNS, and disaster recovery/business continuity
- Experience administering, maintaining and operating Active Directory Windows based networks and networking basic skills and troubleshooting.
- Demonstrated ability to script in the Windows environment using PowerShell.
- Current, active US Government Security Clearance of TS/SCI with Polygraph - Experience operating in air-gapped or isolated network environments
- Familiarity with ECM/SCCM/MECM for OS deployment and patch management
- Experience with Git-based workflows and code review processes
- Experience with AWS CI/CD configurations, pipelines.
- Understanding of WSUS, PKI/certificate services, or identity management
- Experience building monitoring and alerting for Windows services

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, WA, Bellevue - 116,900.00 - 167,400.00 USD annually
USA, WA, Seattle - 116,900.00 - 167,400.00 USD annually