Remote Windows Server Upgrade Architect for GovCloud

PhoenixTeam; United States; Remote; USD 140,000 - 195,000; Full time

Job summary

PhoenixTeam is seeking a Windows Server Architect to lead the design and upgrade of a federal Windows Server estate hosted in FedRAMP AWS GovCloud, advancing from 2016 to 2019 or 2025 before end of support. You will own the upgrade architecture end to end, guiding DevSecOps, Security, and Test teams to deliver compliant, low-risk upgrades for mission-critical systems.

The role involves discovery, hardening, testing, rollback planning, and producing architecture artifacts while coordinating with

Qualifications

• Experience leading Windows Server migrations to 2019 or 2025 in AWS GovCloud.
• Hands-on Windows Server hardening using federal baselines (DISA STIGs, CIS).
• Experience integrating Windows servers with CyberArk for privileged access.
• Strong PowerShell and Windows OS expertise; able to lead engineers.

Responsibilities

• Lead discovery of in-scope servers, catalog roles, services, and dependencies.
• Design upgrade approach per server with in-place or rebuild options and waves.
• Define and validate OS hardening baselines and remediate findings.
• Plan secure admin access and CyberArk integration; manage certificates.
• Design IIS workloads and Power BI Gateway servers where needed.
• Collaborate with DevSecOps and Test teams on automation and testing.
• Produce architecture artifacts in Confluence/Jira and align with TRM.

Skills

Windows Server

Migration planning

PowerShell

AD/GP/DNS

AWS GovCloud

CyberArk

Security baselines

Leadership/communication

Education

Bachelor’s degree

Associate’s degree in lieu

High School diploma in lieu

Tools

Ansible

AWS Systems Manager

EC2

Power BI Gateway

Job description

PhoenixTeam is seeking a Windows Server Architect to lead the design and upgrade of a federal Windows Server estate hosted in FedRAMP AWS GovCloud, advancing from 2016 to 2019 or 2025 before end of support. You will own the upgrade architecture end to end, guiding DevSecOps, Security, and Test teams to deliver compliant, low-risk upgrades for mission-critical systems.

The role involves discovery, hardening, testing, rollback planning, and producing architecture artifacts while coordinating with