Senior AWS WorkSpaces Architect

The Senior AWS WorkSpaces Architect will be the hands-on technical owner of an AWS WorkSpaces environment of 3,400+ workspaces. You will own architecture, engineering, image lifecycle, automation, incident response and cost governance, and act as the main technical point of contact for customer teams and AWS. This is a senior, independent role: you are expected to operate with minimal supervision, resolve escalations and drive continuous improvement of the platform.

Key Responsibilities

• Architect, engineer and operate the AWS WorkSpaces environment at scale (3,400+ workspaces), covering WorkSpaces Personal, WorkSpaces Secure Browser, bundles, images and directories
• Own the Golden Image lifecycle: build, patch, test, version, publish and retire images, with provisioning automation
• Design and maintain networking for WorkSpaces, including VPC design, DNS, routing, security groups and VPC endpoints
• Manage integration with Active Directory and directory services (AWS Managed Microsoft AD, AD Connector or equivalent)
• Troubleshoot Windows and macOS endpoint and client issues, including connectivity, authentication and performance
• Build monitoring, alerting and automated remediation using CloudWatch, EventBridge, CloudTrail and Lambda, with scripting (e.g. PowerShell, Python)
• Automate provisioning, lifecycle operations and reporting to reduce manual effort
• Drive cost optimization, governance and resource management, including running mode selection, right-sizing, utilization review and cleanup of idle resources
• Lead P1/P2 incident management and root cause analysis (RCA) through ServiceNow ITSM, and own problem and change follow-up
• Manage stakeholders across customer teams and AWS, including support cases, roadmap discussions and escalations
• Plan and support large-scale deployments, migrations and upgrades
• Document architecture, standards, runbooks and operating procedures

Required Skills and Qualifications

• Strong hands-on experience in AWS WorkSpaces architecture and engineering
• Working knowledge of AWS EUC services: WorkSpaces Personal, Secure Browser, bundles, images and directories
• Strong knowledge of VPC, DNS, routing, security groups, endpoints and AD/directory services
• Proven Windows and macOS endpoint and client troubleshooting experience
• Experience with CloudWatch, EventBridge, CloudTrail and Lambda, plus scripting and automation
• Strong experience with the Golden Image lifecycle and provisioning automation
• Experience with cost optimization, governance and resource management
• Experience with ServiceNow ITSM, P1/P2 incident management and RCA
• Strong stakeholder management with customer teams and AWS
• Ability to work substantial US business hours, including coverage through 2:00 PM Pacific Time

Preferred Qualifications

• Large-scale AWS WorkSpaces deployment or migration experience
• AWS certifications (e.g. Solutions Architect Associate/Professional, Advanced Networking Specialty, SysOps Administrator)
• Experience with infrastructure as code (Terraform, CloudFormation) and image-build tooling
• Experience with endpoint management and security tooling in VDI environments

Soft Skills

• Independent, ownership-driven working style in a fast-moving operational environment
• Clear written and verbal communication with technical and non-technical stakeholders
• Calm, structured approach to high-severity incidents
• Fluent English