Windows Server Architect

PhoenixTeam

. Lead discovery of in-scope servers, cataloging roles, services, installed software, and dependencies .

Posted 10/12/2026full-timeRemote • United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading Windows Server migrations within AWS GovCloud environments, focusing on OS hardening, security compliance, and integration with CyberArk for privileged access management. Proficient in designing upgrade strategies, managing project risks, and producing technical documentation.

Highest-signal resume keywords

Windows Server MigrationAWS GovCloud ExperienceOS HardeningCyberArk IntegrationPowerShell Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Windows Server 2016 to 2019 or 2025 MigrationAWS Services for Windows WorkloadsActive DirectoryGroup PolicyDNSDHCPPKIAnsibleWindows IIS ConfigurationPower BI Administration

Soft Skills

LeadershipCollaborationCommunication

Tools & Technologies

ConfluenceJiraCyberArkRDPJump ServerPower BI GatewayAWS Systems Manager

Certifications & Qualifications

Microsoft Windows Server CertificationAWS Certification

Industry Keywords

DISA STIGsCIS BenchmarksFederal ComplianceAudit ManagementVulnerability Management

Tech Stack

Tools & technologies

AnsibleAWSDNSEC2

About the role

Key responsibilities & impact

Lead discovery of in-scope servers, cataloging roles, services, installed software, and dependencies
Design upgrade approaches for each server, including in-place versus rebuild decisions, AMI selection, EC2 sizing, and phased wave sequencing
Establish go/no-go checkpoints between migration waves
Define and validate OS hardening baselines, including DISA STIGs, CIS Benchmarks, and Active Directory Domain requirements
Remediate outstanding security findings
Design secure administrative access, including RDP, jump server configuration, and CyberArk privileged access integration
Plan certificate management and renewal, including certificate chain validation
Design Windows IIS-dependent workloads, including Power BI Gateway servers
Partner with DevSecOps Engineers to automate Windows build standards and correct configuration drift
Partner with the Test Manager on wave test strategies, success criteria, and rollback procedures
Maintain the project Risk Register
Produce architecture artifacts, including Implementation Blueprints, design documents, and runbooks, in Confluence and Jira
Ensure alignment with the client's Technical Reference Model, audit requirements, and vulnerability requirements
Lead the technical direction for migrating a federal client's Windows Server estate in a FedRAMP-authorized AWS GovCloud environment
Guide DevSecOps, Security, and Test team members in delivering compliant, low-risk upgrades for mission-critical systems

Requirements

What you’ll need

Bachelor’s degree and 7 years of relevant experience
Associate’s Degree and 9 years of relevant experience in lieu of a Bachelor’s Degree
High School Diploma and 11 years of relevant experience in lieu of a Bachelor’s Degree
Experience leading Windows Server 2016 to 2019 or 2025 migrations in AWS, including upgrade planning, testing, and rollback
AWS GovCloud experience preferred
Hands-on Windows Server OS hardening using federal and industry baselines
Experience integrating Windows servers with CyberArk for privileged access management
Deep expertise in Active Directory, Group Policy, DNS, DHCP, PKI, patching, and Remote Desktop Services
Strong PowerShell skills
Working knowledge of AWS services for Windows workloads, including EC2, AMIs, VPC, Systems Manager, and EBS snapshots
Experience with Windows configuration management using Ansible, WMI, WinRM, and PowerShell
Ability to direct engineers and lead discussions with federal stakeholders
Microsoft Windows Server certification or equivalent hands-on experience may be considered
AWS certification preferred
Experience with AWS Systems Manager automated system patching preferred
Experience managing software deployments through Group Policy preferred
Experience with Microsoft Power BI and Power BI Gateway administration preferred
Experience configuring and hardening Windows IIS servers preferred
Experience supporting federal government systems with audit and vulnerability management preferred
Must be eligible to obtain a Public Trust clearance

Benefits

Comp & perks

Full-Time, W2 employment
100% remote work (US-based)
40 hours/week with availability during core business hours of 8am-5pm ET