AWS Workspaces Engineer
Yoh Services LLC
A complete application in a minute — tailored resume and cover letter, ready to send.
Benefits offered by this job
Job summary
Yoh Services LLC is hiring an AWS Workspaces Engineer in Charlotte, NC. This hybrid, full-time role focuses on designing, implementing, and supporting a cloud-based WorkSpaces environment. You will own architecture, image management, automation, identity integration, security, and platform operations.
The candidate will lead platform engineering, drive automation, and migrate from on-prem VDI toward a modern cloud-based desktop strategy. Strong leadership and hands-on engineering are required.
Qualifications
- 7+ years of enterprise infrastructure engineering experience.
- 5+ years of AWS engineering experience.
- 3+ years of Amazon WorkSpaces administration and architecture experience.
- Deep understanding of AWS WorkSpaces Images, Bundles, Directories, and lifecycle management.
- Strong experience with Microsoft Active Directory and hybrid identity environments.
- Experience integrating AWS WorkSpaces with Microsoft Entra ID and Intune.
- Experience supporting RADIUS MFA authentication and SAML federation solutions.
- Strong understanding of cloud networking concepts including Route 53, DNS, VPCs, subnets, routing, and security controls.
Responsibilities
- Design, implement, and maintain enterprise-scale AWS WorkSpaces environments.
- Architect and manage AWS WorkSpaces deployments across environments.
- Develop long-term platform strategy, scalability planning, and operational standards.
- Evaluate and implement new AWS EUC technologies and features.
- Conduct capacity planning, performance analysis, and platform optimization.
- Support disaster recovery planning, testing, and recovery validation procedures.
- Perform root cause analysis for complex platform-wide issues.
Skills
Tools
Job description
Location: Charlotte,NC
Terms: Full Time
Type: Hybrid - 3 days onsite
Our client is seeking a highly skilled Cloud Computing Engineer specializing in Amazon WorkSpaces to design, implement, optimize, and support our cloud-based virtual desktop environment. This role will serve as the primary technical owner for AWS WorkSpaces architecture, image management, automation, identity integration, security, monitoring, and platform operations. The ideal candidate possesses deep expertise across AWS WorkSpaces, Active Directory, Microsoft Entra ID, Intune, Windows endpoint management, cloud networking, automation, and authentication technologies. This individual will lead platform engineering efforts, establish operational standards, drive automation initiatives, support large-scale desktop deployments, and help evolve our virtual desktop strategy from traditional on-premises VDI solutions toward a modern cloud-based desktop platform. This is a hands‑on engineering role requiring strong technical leadership, troubleshooting expertise, and the ability to independently own complex infrastructure initiatives from design through production support.
- Design, implement, and maintain enterprise‑scale Amazon WorkSpaces environments.
- Architect and manage AWS WorkSpaces deployments across multiple environments.
- Develop long‑term platform strategy, scalability planning, and operational standards.
- Evaluate and implement new AWS EUC technologies and features.
- Conduct capacity planning, performance analysis, and platform optimization.
- Support disaster recovery planning, testing, and recovery validation procedures.
- Perform root cause analysis for complex platform‑wide issues.
- Build, maintain, and optimize AWS WorkSpaces custom images and bundles.
- Create standardized gold images aligned with security and operational requirements.
- Validate Windows updates, application patching, and security configurations before promotion to production.
- Manage image lifecycle processes, testing procedures, rollback strategies, and release documentation.
- Implement automation for image creation, validation, and deployment.
- Ensure image consistency across development, testing, and production environments.
- Establish desktop hardening standards and compliance baselines.
- Design and support integrations between AWS WorkSpaces, Microsoft Active Directory, and Microsoft Entra ID.
- Manage AWS Directory Services and hybrid identity configurations.
- Troubleshoot directory synchronization, computer object creation, OU placement, and authentication workflows.
- Support hybrid identity solutions involving Active Directory, Entra Connect, and Intune.
- Configure and maintain MFA integrations utilizing RADIUS authentication.
- Lead initiatives to migrate legacy authentication methods toward SAML‑based federation.
- Support Single Sign‑On solutions and modern authentication architectures.
- Partner with Endpoint Engineering teams to integrate AWS WorkSpaces with Microsoft Intune.
- Ensure proper enrollment and management of hybrid‑joined WorkSpaces devices.
- Support application deployment, policy management, compliance enforcement, and reporting through Intune.
- Troubleshoot device registration and management issues involving Entra ID and Intune.
- Develop standards for cloud‑hosted desktop management using Microsoft technologies.
- Collaborate on endpoint security, patching, and configuration management initiatives.
- Administer AWS networking components supporting WorkSpaces environments.
- Manage Route 53 DNS configurations and name resolution services.
- Troubleshoot connectivity, routing, firewall, VPN, and DNS‑related issues.
- Work closely with network engineering teams to optimize cloud connectivity and user experience.
- Understand VPC design, subnets, security groups, network ACLs, and routing principles as they relate to WorkSpaces deployments.
- Support desktop access from Windows, macOS, thin clients, and mobile platforms.
- Develop automation solutions utilizing AWS Lambda, PowerShell, Python, and AWS native services.
- Automate provisioning, monitoring, remediation, reporting, and operational workflows.
- Create self‑healing mechanisms for common platform issues.
- Maintain infrastructure‑as‑code standards where applicable.
- Reduce operational overhead through orchestration and automation initiatives.
- Configure and maintain CloudWatch dashboards, metrics, alarms, and logging.
- Develop proactive monitoring and alerting capabilities.
- Analyze performance trends and resource utilization.
- Implement operational reporting and executive dashboards.
- Participate in incident management, problem management, and root cause analysis activities.
- Drive continuous service improvements and platform optimization efforts.
- Ensure AWS WorkSpaces environments meet security, regulatory, and audit requirements.
- Partner with cybersecurity teams to implement security controls and monitoring.
- Support vulnerability remediation and platform hardening initiatives.
- Participate in audits, risk assessments, and compliance reviews.
- Maintain secure access standards, least privilege permissions, and identity governance controls.
- Support logging, monitoring, and security event investigations.
- Execute infrastructure changes under strict Change Management procedures.
- Create technical documentation, architecture diagrams, operational runbooks, and support guides.
- Participate in after‑hours maintenance activities as required.
- Provide Level 3 engineering support and escalation assistance.
- Collaborate across cloud, infrastructure, security, networking, and endpoint management teams.
- 7+ years of enterprise infrastructure engineering experience.
- 5+ years of AWS engineering experience.
- 3+ years of Amazon WorkSpaces administration and architecture experience.
- Deep understanding of AWS WorkSpaces Images, Bundles, Directories, and lifecycle management.
- Strong experience with Microsoft Active Directory and hybrid identity environments.
- Experience integrating AWS WorkSpaces with Microsoft Entra ID and Intune.
- Experience supporting RADIUS MFA authentication and SAML federation solutions.
- Strong understanding of cloud networking concepts including Route 53, DNS, VPCs, subnets, routing, and security controls.
- Experience with AWS CloudWatch monitoring and alerting.
- Strong PowerShell and automation experience.
- Experience utilizing AWS Lambda for operational automation.
- Knowledge of endpoint deployment and application delivery practices.
- Experience supporting Windows 11 enterprise desktop environments.
- Excellent troubleshooting and root cause analysis skills.
Estimated Min Rate: $84000.00
Estimated Max Rate: $120000.00
We welcome you to be a part of the largest and legendary global staffing companies to meet your career aspirations. Yoh's network of client companies has been employing professionals like you for over 65 years in the U.S., UK and Canada. Join Yoh's extensive talent community that will provide you with access to Yoh's vast network of opportunities and gain access to this exclusive opportunity available to you. Benefit eligibility is in accordance with applicable laws and client requirements. Benefits include:
- Medical, Prescription, Dental & Vision Benefits (for employees working 20+ hours per week)
- Health Savings Account (HSA) (for employees working 20+ hours per week)
- Life & Disability Insurance (for employees working 20+ hours per week)
- MetLife Voluntary Benefits
- Employee Assistance Program (EAP)
- 401K Retirement Savings Plan
- Direct Deposit & weekly epayroll
- Referral Bonus Programs
- Certification and training opportunities
Note: Any pay ranges displayed are estimations. Actual pay is determined by an applicant's experience, technical expertise, and other qualifications as listed in the job description.
Yoh, a Day & Zimmermann company, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Visit https://www.yoh.com/applicants-with-disabilities to contact us if you are an individual with a disability and require accommodation in the application process.
For California applicants, qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. All of the material job duties described in this posting are job duties for which a criminal history may have a direct, adverse, and negative relationship potentially resulting in the withdrawal of a conditional offer of employment.
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
By applying and submitting your resume, you authorize Yoh to review and reformat your resume to meet Yoh's hiring clients' preferences. To learn more about Yoh's privacy practices, please see our Candidate Privacy Notice: https://www.yoh.com/privacy-notice
Stay Safe During Your Job Search
Fraudulent recruiting communications have become increasingly common. Emails from Yoh recruiters will only come from an @yoh.com email address. Yoh will never ask candidates to pay fees, purchase equipment, send gift cards, or transfer funds as part of the recruiting or hiring process. If you receive a communication that appears suspicious or requests payment, contact Yoh directly before responding or sharing personal information.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
