{"id":2946422,"url":"https://alion.io/job/true-zero-technologies-aws-workspaces-sme-r-00225","title":"AWS Workspaces SME (R-00225)","company":{"id":8178,"name":"True Zero Technologies","domain":"truezerotech.com","url":"https://alion.io/company/true-zero-technologies","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"A","score":87,"open_postings":3,"ghost_share":0,"stale_share":0.333,"repost_share":0,"time_to_fill_p50_days":154,"computed_at":"2026-10-25T05:49:26Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":106000,"max_usd":198000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":362},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Amazon CloudWatch","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"AWS CDK","optional":false},{"name":"AWS Lambda","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"CloudFormation","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"FedRAMP","optional":false},{"name":"FinOps","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"NIST 800-53","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Windows Server","optional":false},{"name":"Azure","optional":true},{"name":"ITSM","optional":true},{"name":"VMWare","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-09-01T14:46:47Z","employer_posted_date":"2026-09-01","last_verified_at":"2026-10-25T04:39:19Z","board_verified":true,"closed_at":null,"days_open":53,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":53},"description":"True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM-$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.\nTrue Zero Technologies is seeking an experienced AWS WorkSpaces Architect to design, implement, secure, automate, and manage a large-scale Amazon WorkSpaces environment supporting approximately 5,000 users. The architect will be responsible for the overall technical architecture and operational strategy for the virtual desktop environment, ensuring that it is secure, highly available, scalable, cost-effective, and capable of meeting enterprise performance and user-experience requirements.\nThe ideal candidate will have extensive experience with Amazon WorkSpaces, AWS infrastructure, Active Directory, enterprise networking, endpoint management, automation, security, and large-scale virtual desktop environments. This individual will serve as the technical lead for the platform from initial architecture and deployment through Day 2 operations, optimization, troubleshooting, and continuous improvement.\nJob Responsibilities\nArchitecture and Design\nDesign and maintain the architecture for an Amazon WorkSpaces environment supporting approximately 5,000 concurrent and assigned users.\nDevelop highly available and scalable WorkSpaces architectures across multiple Availability Zones.\nDesign appropriate VPCs, subnets, routing, security groups, DNS, DHCP, NAT, internet access, and connectivity to enterprise networks.\nDevelop WorkSpaces deployment patterns based on user personas, workloads, performance requirements, security requirements, and application needs.\nDetermine appropriate WorkSpaces bundles, compute configurations, storage allocations, protocols, and operating system configurations.\nDesign the environment to support business continuity, disaster recovery, and service resiliency requirements.\nProduce architecture diagrams, design documentation, configuration standards, runbooks, and operational procedures.\nAmazon WorkSpaces Implementation\nLead the deployment and configuration of Amazon WorkSpaces at enterprise scale.\nConfigure WorkSpaces directories, bundles, images, user volumes, compute types, access policies, and network connectivity.\nDevelop standardized desktop images and application configurations for different user personas.\nEstablish image lifecycle, patching, testing, release, rollback, and version-control processes.\nImplement automated WorkSpaces provisioning and deprovisioning processes.\nDevelop repeatable deployment processes using Infrastructure as Code and automation.\nSupport pilot deployments, user acceptance testing, production rollout, and migration of users to Amazon WorkSpaces.\nIdentity and Access Management\nDesign and manage integration between Amazon WorkSpaces and Microsoft Active Directory/AWS Directory Service.\nImplement authentication and authorization architectures using AWS IAM and enterprise identity providers.\nSupport SAML-based federation, MFA, conditional access, and other enterprise authentication requirements where applicable.\nImplement role-based access controls and least-privilege administrative models.\nDesign user onboarding, role changes, offboarding, and automated WorkSpaces lifecycle processes.\nNetworking\nDesign network connectivity between Amazon WorkSpaces and enterprise/on-premises environments using technologies such as AWS Direct Connect, Site-to-Site VPN, Transit Gateway, and VPC networking.\nDesign DNS, routing, proxy, firewall, NAT, and internet-access architectures supporting WorkSpaces users.\nTroubleshoot latency, packet loss, bandwidth constraints, DNS issues, authentication issues, and other network-related performance problems.\nMonitor network capacity and ensure sufficient bandwidth and connectivity for a 5,000-user environment.\nSecurity and Compliance\nDevelop and enforce security standards for the WorkSpaces environment.\nImplement network segmentation, encryption, endpoint restrictions, logging, monitoring, and least-privilege access.\nEnsure WorkSpaces data is appropriately protected both at rest and in transit.\nIntegrate the platform with enterprise SIEM, vulnerability management, endpoint security, and security monitoring solutions.\nSupport implementation of applicable security frameworks such as NIST 800-53, CIS Benchmarks, FedRAMP, and organizational security policies.\nWork with cybersecurity teams to identify vulnerabilities, remediate findings, and maintain the security posture of desktop images and supporting AWS infrastructure.\nAutomation and Infrastructure as Code\nAutomate provisioning, configuration, patching, image management, user onboarding, monitoring, and administrative tasks.\nDevelop Infrastructure as Code using technologies such as Terraform, AWS CloudFormation, and AWS CDK.\nDevelop automation using Python, PowerShell, AWS CLI, AWS Systems Manager, Lambda, and AWS APIs/SDKs.\nIntegrate WorkSpaces deployment and configuration processes with CI/CD pipelines.\nReduce manual administration through policy-driven and event-driven automation.\nOperations and Platform Management\nProvide technical leadership for Day 2 operation of the WorkSpaces environment.\nEstablish operational procedures for provisioning, deprovisioning, patching, image management, application deployment, monitoring, incident response, and problem management.\nDevelop platform health dashboards and operational KPIs.\nMonitor WorkSpaces availability, connection success rates, authentication failures, resource utilization, latency, and user-experience metrics.\nEstablish capacity-management processes for approximately 5,000 users.\nLead troubleshooting of complex WorkSpaces, Active Directory, networking, application, performance, and authentication issues.\nConduct root-cause analysis and implement permanent corrective actions.\nPerformance and Cost Optimization\nContinuously evaluate WorkSpaces utilization and performance.\nRight-size WorkSpaces based on CPU, memory, storage, and user workload requirements.\nEvaluate appropriate WorkSpaces running modes and configurations based on user usage patterns.\nIdentify unused, underutilized, and oversized WorkSpaces.\nDevelop cost-management and FinOps processes for the WorkSpaces platform.\nEstablish chargeback/showback and reporting capabilities where required.\nBalance user experience, availability, security, and cost when making architecture decisions.\n\nJob Qualifications\nRequired Technical Skills\nThe successful candidate should have strong hands-on experience with:\nAmazon WorkSpaces\nAWS Directory Service\nMicrosoft Active Directory and Group Policy\nAWS IAM\nAmazon VPC\nAWS Transit Gateway\nAWS Direct Connect and Site-to-Site VPN\nRoute 53 and enterprise DNS\nAWS Systems Manager\nAmazon CloudWatch and CloudTrail\nAWS KMS\nAmazon S3\nAWS Lambda\nAWS Security Hub and GuardDuty\nTerraform and/or AWS CloudFormation\nPowerShell and Python\nWindows desktop and Windows Server administration\nDesktop image creation and lifecycle management\nApplication packaging and deployment\nEnterprise patch and vulnerability management\nEndpoint security technologies\nSIEM and centralized logging\nInfrastructure as Code and CI/CD practices\nRequired Experience\n8+ years of experience designing, implementing, or managing enterprise infrastructure and cloud environments.\n5+ years of hands-on AWS architecture and engineering experience.\nSignificant hands-on experience designing and operating Amazon WorkSpaces or comparable enterprise VDI/DaaS platforms.\nExperience designing virtual desktop environments supporting thousands of users.\nStrong experience with Microsoft Active Directory, Group Policy, DNS, authentication, and enterprise identity management.\nDemonstrated experience designing AWS networking for large enterprise environments.\nExperience implementing highly available and resilient AWS architectures.\nExperience automating AWS infrastructure and operational processes.\nExperience troubleshooting complex desktop, network, authentication, application, and performance issues.\nPreferred Experience\nExperience supporting Amazon WorkSpaces environments of 2,500-5,000+ users.\nExperience migrating users from traditional physical desktops or legacy VDI platforms to Amazon WorkSpaces.\nExperience with VMware Horizon, Citrix Virtual Apps and Desktops, Azure Virtual Desktop, or similar technologies.\nExperience integrating WorkSpaces with enterprise endpoint management, application delivery, SIEM, ITSM, and security platforms.\nExperience working in Federal Government or other highly regulated environments.\nFamiliarity with NIST 800-53, FedRAMP, CIS Benchmarks, and Zero Trust architectures.\nExperience implementing automated desktop provisioning and application-delivery pipelines.\nPreferred Certifications\nAWS Certified Solutions Architect - Professional\nAWS Certified Advanced Networking - Specialty\nAWS Certified Security - Specialty\nSecurity Clearance.\nThis position requires a Top Secret Clearance.","description_format":"text","description_chars":9793,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Information Security","Managed Security"],"lifecycle":[{"event":"open","at":"2026-10-20T18:49:12Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":53,"expected_fill_days":154,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/true-zero-technologies-aws-workspaces-sme-r-00225","json_url":"https://alion.io/job/true-zero-technologies-aws-workspaces-sme-r-00225.json","meta":{"generated_at":"2026-10-25T07:44:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10876,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8178},"rest":"https://alion.io/mcp/rest/get_company?id=8178"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftrue-zero-technologies-aws-workspaces-sme-r-00225"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftrue-zero-technologies-aws-workspaces-sme-r-00225"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftrue-zero-technologies-aws-workspaces-sme-r-00225"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/true-zero-technologies-aws-workspaces-sme-r-00225\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftrue-zero-technologies-aws-workspaces-sme-r-00225"}]}