AWS Workspaces SME (R-00225)

True Zero Technologies LLC.; United States; Sur place; USD 140 000 - 180 000; Plein temps

Résumé du poste

True Zero Technologies LLC seeks an experienced AWS WorkSpaces Architect to design, secure, automate, and manage a large-scale Amazon WorkSpaces environment used by about 5,000 users. You will lead architecture, deployment, and Day 2 operations, driving optimization and continuous improvement.

You will work on AD integration, enterprise networking, identity management, and security hardening, delivering scalable, resilient desktop infrastructure and leveraging IaC for repeatable deployments.

Qualifications

• Extensive experience with Amazon WorkSpaces and AWS infrastructure.
• Strong background in AD integration and enterprise networking.
• Proven ability to design secure, scalable virtual desktop environments.

Responsabilités

• Design and maintain architecture for a large Amazon WorkSpaces environment (~5,000 users).
• Lead deployment and configuration of WorkSpaces at enterprise scale.
• Develop IaC and automation for provisioning, patching, and lifecycle management.
• Integrate WorkSpaces with AD/Directory Service and IAM-based controls.
• Establish operational procedures, DR/BC planning, and security compliance.

Connaissances

AWS WorkSpaces

Active Directory

Enterprise networking

Automation

Security

Virtual desktop environments

Outils

Terraform

AWS CloudFormation

AWS CDK

Python

PowerShell

AWS CLI

Description du poste

True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories ("Prosperous and Thriving" ($5MM–$50MM in gross revenue) and "Mid-Atlantic Region" (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025 , a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.

True Zero Technologies is seeking an experienced AWS WorkSpaces Architect to design, implement, secure, automate, and manage a large-scale Amazon WorkSpaces environment supporting approximately 5,000 users. The architect will be responsible for the overall technical architecture and operational strategy for the virtual desktop environment, ensuring that it is secure, highly available, scalable, cost-effective, and capable of meeting enterprise performance and user-experience requirements.

The ideal candidate will have extensive experience with Amazon WorkSpaces, AWS infrastructure, Active Directory, enterprise networking, endpoint management, automation, security, and large-scale virtual desktop environments. This individual will serve as the technical lead for the platform from initial architecture and deployment through Day 2 operations, optimization, troubleshooting, and continuous improvement.

Job Responsibilities

• Architecture and Design
  • Design and maintain the architecture for an Amazon WorkSpaces environment supporting approximately 5,000 concurrent and assigned users.
  • Develop highly available and scalable WorkSpaces architectures across multiple Availability Zones.
  • Design appropriate VPCs, subnets, routing, security groups, DNS, DHCP, NAT, internet access, and connectivity to enterprise networks.
  • Develop WorkSpaces deployment patterns based on user personas, workloads, performance requirements, security requirements, and application needs.
  • Determine appropriate WorkSpaces bundles, compute configurations, storage allocations, protocols, and operating system configurations.
  • Design the environment to support business continuity, disaster recovery, and service resiliency requirements.
  • Produce architecture diagrams, design documentation, configuration standards, runbooks, and operational procedures.
• Amazon WorkSpaces Implementation
  • Lead the deployment and configuration of Amazon WorkSpaces at enterprise scale.
  • Configure WorkSpaces directories, bundles, images, user volumes, compute types, access policies, and network connectivity.
  • Develop standardized desktop images and application configurations for different user personas.
  • Establish image lifecycle, patching, testing, release, rollback, and version-control processes.
  • Implement automated WorkSpaces provisioning and deprovisioning processes.
  • Develop repeatable deployment processes using Infrastructure as Code and automation.
  • Support pilot deployments, user acceptance testing, production rollout, and migration of users to Amazon WorkSpaces.
• Identity and Access Management
  • Design and manage integration between Amazon WorkSpaces and Microsoft Active Directory/AWS Directory Service.
  • Implement authentication and authorization architectures using AWS IAM and enterprise identity providers.
  • Support SAML-based federation, MFA, conditional access, and other enterprise authentication requirements where applicable.
  • Implement role-based access controls and least-privilege administrative models.
  • Design user onboarding, role changes, offboarding, and automated WorkSpaces lifecycle processes.
• Networking
  • Design network connectivity between Amazon WorkSpaces and enterprise/on-premises environments using technologies such as AWS Direct Connect, Site-to-Site VPN, Transit Gateway, and VPC networking.
  • Design DNS, routing, proxy, firewall, NAT, and internet-access architectures supporting WorkSpaces users.
  • Troubleshoot latency, packet loss, bandwidth constraints, DNS issues, authentication issues, and other network-related performance problems.
  • Monitor network capacity and ensure sufficient bandwidth and connectivity for a 5,000-user environment.
• Security and Compliance
  • Develop and enforce security standards for the WorkSpaces environment.
  • Implement network segmentation, encryption, endpoint restrictions, logging, monitoring, and least-privilege access.
  • Ensure WorkSpaces data is appropriately protected both at rest and in transit.
  • Integrate the platform with enterprise SIEM, vulnerability management, endpoint security, and security monitoring solutions.
  • Support implementation of applicable security frameworks such as NIST 800-53, CIS Benchmarks, FedRAMP, and organizational security policies.
  • Work with cybersecurity teams to identify vulnerabilities, remediate findings, and maintain the security posture of desktop images and supporting AWS infrastructure.
• Automation and Infrastructure as Code
  • Automate provisioning, configuration, patching, image management, user onboarding, monitoring, and administrative tasks.
  • Develop Infrastructure as Code using technologies such as Terraform, AWS CloudFormation, and AWS CDK.
  • Develop automation using Python, PowerShell, AWS CLI, AWS Systems Manager, Lambda, and AWS APIs/SDKs.
  • Integrate WorkSpaces deployment and configuration processes with CI/CD pipelines.
  • Reduce manual administration through policy-driven and event-driven automation.
• Operations and Platform Management
  • Provide technical leadership for Day 2 operation of the WorkSpaces environment.
  • Establish operational procedures for provisioning, deprovisioning, patching, image management, application deployment, monitoring, incident response, and problem management.
  • Develop platform health dashboards and operational KPIs.
  • Monitor WorkSpaces availability, connection success rates, authentication failures, resource utilization, latency, and user-experience metrics.
  • Establish capacity-management processes for approximately 5,000 users.
  • Lead troubleshooting of complex WorkSpaces, Active Directory, networking, application, performance, and authentication issues.
  • Conduct root-cause analysis