Windows Systems Engineer, Region Services Corporate Infrastructure (Vector) Team

Windows Systems EngineerRegion Services Corporate Infrastructure (RSCI) delivers foundational Windows infrastructure services across Amazon Dedicated Cloud (ADC) environments supporting U.S. Government customers. Our team owns Active Directory, DFS, DHCP, DNS, Enterprise Configuration Manager (ECM), and Group Policy - services that every other team in the environment depends on. We are looking for a Windows Systems Engineer who knows Windows infrastructure and is ready to transform how we manage it. Our direction is Infrastructure as Code - we need someone who can support production services today while building the automation that eliminates manual operations tomorrow. You don't need to be a deep expert in every service we own, but you need to be comfortable operating across all of them and confident enough to codify their configuration and deployment. This is a hands-on role. You will support and maintain critical Windows services, build Ansible-based automation to manage them at scale, troubleshoot complex cross-service issues, and drive operational improvements that make our services more reliable and our team more efficient.Key job responsibilities - Support and maintain Windows infrastructure services across multiple isolated ADC environments: Active Directory, DFS, DHCP, DNS, ECM, and Group Policy - Build and maintain Ansible playbooks and PowerShell automation to manage service configuration, deployment, and lifecycle operations - Troubleshoot and resolve service issues across the Windows infrastructure stack, providing escalation support for Tier 1/2 teams - Migrate existing manual operational processes to code-defined, repeatable automation - Define and monitor service health metrics; build and maintain alarming that enables proactive response - Ensure services meet security compliance and hardening requirements in partnership with the Security Compliance team - Create and maintain operational documentation including runbooks, architecture diagrams, and standard operating procedures - Mentor junior team members on Windows infrastructure and automation practices - Participate in on-call rotation for service-impacting eventsBasic Qualifications - Associate's degree or above, or Cloud+ or GICSP (Global Industrial Cyber Security Professional) or GSEC (GIAC Security Essentials) or SSCP (Systems Security Certified Practitioner) - 5+ years supporting Windows family of operating systems to include four (4) of the following eight (8) core competencies: AD, DHCP, Powershell, Email workflow, SCCM, SCOM, Win OS, DNS, and disaster recovery/business continuity - Experience administering, maintaining and operating Active Directory Windows based networks and networking basic skills and troubleshooting.- Demonstrated ability to script in the Windows environment using PowerShell.- Current, active US Government Security Clearance of TS/SCI with PolygraphPreferred Qualifications - Experience operating in air-gapped or isolated network environments- Familiarity with ECM/SCCM/MECM for OS deployment and patch management- Experience with Git-based workflows and code review processes- Experience with AWS CI/CD configurations, pipelines.- Understanding of WSUS, PKI/certificate services, or identity management- Experience building monitoring and alerting for Windows services