AWS Workspaces Cloud Engineer

AWS Workspaces Cloud Engineer, Remote 4 Month+ Contract (Potential for longer term) 100% Remote Due to our government client requirements, we can only consider US Citizen with ability to obtain and maintain a Public Trust Clearance. NO THIRD PARTY RECRUITERS PLEASE! CANDIDATES MUST BE SELF-REPRESENTED. Description Seeking a strong Mid-Senior Level AWS WorkSpaces Cloud Engineer for a short-term contract supporting a high-impact team delivering secure, compliant, and scalable AWS solutions for virtual desktop infrastructure. This is a hands-on engineering role focused on building, automating, and operating Amazon WorkSpaces environments while supporting large-scale deployments, migrations to cloud-based desktops, and modernization of end-user computing for mission-critical systems. Responsibilities Implement and manage AWS WorkSpaces deployments, including provisioning, bundling, scaling, and optimization using AWS Management Console, AWS CLI, SDKs, and automation tools Design and configure WorkSpaces directories (AWS Managed Microsoft AD, AD Connector, Simple AD, or Microsoft Entra ID integration), including trusts, OU selection, and directory synchronization Build and maintain infrastructure-as-code (IaC) for WorkSpaces environments using Terraform, AWS CloudFormation, AWS CDK, or scripts (PowerShell, Python, Bash) Execute virtual desktop migrations and transitions (rehost on-premises VDI to WorkSpaces, refactor applications for streaming, replatform to cloud desktops) using AWS tools and best practices Configure secure networking and access controls including VPCs, security groups, IP access control groups, PrivateLink (where applicable), AWS Global Accelerator, and integration with on-premises connectivity (Direct Connect, Site-to-Site VPN) Implement Zero-Trust security and identity solutions using AWS IAM, AWS SSO/IAM Identity Center, multi-factor authentication (MFA), certificate-based auth, SAML 2.0 federation, and Conditional Access policies Integrate and operate DevSecOps pipelines with AWS CodePipeline, CodeBuild, CodeDeploy, GitHub Actions, and security tools (Amazon GuardDuty, AWS Security Hub, AWS Config, Amazon Inspector) Automate compliance monitoring, evidence collection, and reporting using AWS Config rules, AWS Security Hub, CloudTrail, and custom automation for standards such as FedRAMP, NIST 800-53, or similar regulatory requirements Support application streaming and containerized/hybrid workloads, including integration with Amazon AppStream 2.0, WorkSpaces Thin Client, or related EUC services Troubleshoot production issues in WorkSpaces environments, perform root cause analysis, optimize performance/latency/cost, and manage updates, image builds, and bundles Contribute to architecture review packages, security documentation, diagrams, and authorization-to-operate (ATO) artifacts Collaborate daily with cloud architects, security engineers, VDI specialists, developers, and stakeholders Requirements 4+ years of hands-on experience building and operating production workloads in AWS (commercial and/or Government) 2+ years working specifically with Amazon WorkSpaces and AWS End User Computing (EUC) services Strong proficiency in Infrastructure as Code: Terraform (required), CloudFormation/CDK (strong plus) Experience deploying and managing AWS WorkSpaces at scale, including directory services integration and bundle management Solid understanding of AWS networking (VPC, security groups, access controls, connectivity options) and protocols relevant to virtual desktops (PCoIP, DCV) Hands-on experience with AWS DevOps tools (CodePipeline, CodeBuild, CodeDeploy) and GitHub Actions Familiarity with AWS security services (IAM, GuardDuty, Security Hub, Config, CloudTrail) Scripting and automation skills: PowerShell (required), Python or Bash (plus) U.S. citizenship and ability to obtain and maintain appropriate clearance (e.g., Public Trust) Preferred Qualifications Active AWS certifications: o AWS Certified Solutions Architect – Associate or Professional o AWS Certified SysOps Administrator – Associate o AWS Certified DevOps Engineer – Professional o AWS Certified Security – Specialty Experience with compliance frameworks such as FedRAMP High, NIST 800-53, or agency-specific controls (e.g., CMS ARS equivalents) Prior work on virtual desktop infrastructure (VDI) projects, migrations from on-premises Citrix/VMware Horizon to AWS WorkSpaces Knowledge of Amazon AppStream 2.0, WorkSpaces Thin Client, AWS Global Accelerator, or related EUC optimizations Experience with Active Directory in AWS (Managed AD, AD Connector), SAML federation, MFA, and certificate-based authentication Familiarity with cost optimization, performance tuning, and high-availability configurations for WorkSpaces Active Public Trust clearance or higher Please Note: Only those individuals selected for an interview will be contacted. No calls, inquiries, or Third-Party Vendors please. We are an equal opportunity employer. We encourage applications from candidates of all backgrounds and experiences. (The ACI Group is unable to sponsor H1B Visas). $1000 Referral Bonus - www.aci.com. Since 1988, The ACI Group, a Baltimore-based staffing firm, has been committed to hiring the industry's leading professionals, and presenting exciting career opportunities. We have access to varied types of contract, permanent and contract-to-perm positions and offer a choice of employment options including a full benefits package.