AWS Engineer - Workspaces & Terraform IaC | Fully Remote (Fastwater Staffing)
• About the Rol:
• We're looking for a mid-level AWS Engineer to lead the design and deployment of a new Amazon
• WorkSpaces environment, built from the ground up with Terraform. This is a hands-on, full-time contract
• engagement with a tight start date and a defined 10-week scope. You'll own the IaC implementation
• end-to-end - from initial architecture through deployment, hardening, and handoff.
• The ideal candidate has shipped Workspaces deployments before, writes clean and modular Terraform,
• and can move quickly without sacrificing operational quality.
• What You'll Do:
• Design and deploy a new Amazon WorkSpaces environment, including directory services (AWS
• Managed Microsoft AD or AD Connector), networking, and security configuration
• Build and maintain Terraform modules for all infrastructure components, following IaC best practices
• (state management, module reuse, environment separation)
• Configure Workspace bundles, custom images, and user provisioning workflows
• Implement networking (VPCs, subnets, route tables, security groups, VPN/Direct Connect as needed) to
• support secure Workspace access
• Set up monitoring, logging, and alerting (CloudWatch, CloudTrail) for the Workspaces environment
• Apply security best practices including IAM least-privilege, encryption at rest/in transit, and MFA
• enforcement
• Document the architecture, runbooks, and IaC patterns to enable handoff at end of engagement
• Collaborate with internal stakeholders to translate requirements into a working environment
• Required Qualifications:
• 3+ years of hands-on AWS engineering experience
• Production experience deploying and managing Amazon WorkSpaces
• Strong Terraform skills, including module design, state management, and CI/CD integration
• Solid understanding of AWS networking (VPC, subnets, security groups, NACLs, Transit Gateway/VPN)
• Experience with directory services in AWS (AWS Managed Microsoft AD, AD Connector, or Simple AD)
• Working knowledge of IAM, KMS, and AWS security best practices
• Ability to start full-time on May 18, 2026 and commit to a 10-week engagement
• Nice to Have:
• Experience migrating or modernizing existing Workspaces environments
• Experience optimizing or refactoring legacy AWS environments into Terraform
• Familiarity with WorkSpaces Web, AppStream 2.0, or other end-user computing services on AWS
• CI/CD pipeline experience (GitHub Actions, GitLab CI, CodePipeline) for Terraform deployments
• AWS certifications (Solutions Architect Associate/Professional, Advanced Networking, Security)
• Prior consulting or contract experience
• Engagement Details:
• Duration: 10 weeks
• Commitment: Full-time (40 hrs/week)
• Start: May 18, 2026
• Work model: Remote, with overlap during US business hours
• We're looking for a mid-level AWS Engineer to lead the design and deployment of a new Amazon
• WorkSpaces environment, built from the ground up with Terraform. This is a hands-on, full-time contract
• engagement with a tight start date and a defined 10-week scope. You'll own the IaC implementation
• end-to-end - from initial architecture through deployment, hardening, and handoff.
• The ideal candidate has shipped Workspaces deployments before, writes clean and modular Terraform,
• and can move quickly without sacrificing operational quality.
• What You'll Do:
• Design and deploy a new Amazon WorkSpaces environment, including directory services (AWS
• Managed Microsoft AD or AD Connector), networking, and security configuration
• Build and maintain Terraform modules for all infrastructure components, following IaC best practices
• (state management, module reuse, environment separation)
• Configure Workspace bundles, custom images, and user provisioning workflows
• Implement networking (VPCs, subnets, route tables, security groups, VPN/Direct Connect as needed) to
• support secure Workspace access
• Set up monitoring, logging, and alerting (CloudWatch, CloudTrail) for the Workspaces environment
• Apply security best practices including IAM least-privilege, encryption at rest/in transit, and MFA
• enforcement
• Document the architecture, runbooks, and IaC patterns to enable handoff at end of engagement
• Collaborate with internal stakeholders to translate requirements into a working environment
• Required Qualifications:
• 3+ years of hands-on AWS engineering experience
• Production experience deploying and managing Amazon WorkSpaces
• Strong Terraform skills, including module design, state management, and CI/CD integration
• Solid understanding of AWS networking (VPC, subnets, security groups, NACLs, Transit Gateway/VPN)
• Experience with directory services in AWS (AWS Managed Microsoft AD, AD Connector, or Simple AD)
• Working knowledge of IAM, KMS, and AWS security best practices
• Ability to start full-time on May 18, 2026 and commit to a 10-week engagement
• Nice to Have:
• Experience migrating or modernizing existing Workspaces environments
• Experience optimizing or refactoring legacy AWS environments into Terraform
• Familiarity with WorkSpaces Web, AppStream 2.0, or other end-user computing services on AWS
• CI/CD pipeline experience (GitHub Actions, GitLab CI, CodePipeline) for Terraform deployments
• AWS certifications (Solutions Architect Associate/Professional, Advanced Networking, Security)
• Prior consulting or contract experience
• Engagement Details:
• Duration: 10 weeks
• Commitment: Full-time (40 hrs/week)
• Start: May 18, 2026
• Work model: Remote, with overlap during US business hours