AWS Engineer — Workspaces & Terraform IaC

Role Overview:

• This is a hands-on, contract engagement to design and deploy a new Amazon WorkSpaces environment from the ground up.
• The engineer will own the Infrastructure as Code (IaC) implementation end-to-end, from initial architecture through deployment, hardening, and handoff.
• The position is defined as a 10-week, full-time commitment with a defined start date.

Core Responsibilities:

• Design and architect the Workspaces environment, including directory services like AWS Managed Microsoft AD and associated networking.
• Build and maintain Terraform modules for all infrastructure, following best practices for state management and module reuse.
• Configure Workspace bundles, custom images, user provisioning workflows, and implement secure networking with VPCs, security groups, and VPN/Direct Connect.

Deployment & Security:

• Set up monitoring, logging, and alerting using CloudWatch and CloudTrail for the Workspaces environment.
• Apply security best practices including IAM least-privilege, encryption at rest and in transit, and MFA enforcement.
• Document the full architecture, operational runbooks, and IaC patterns to enable a smooth handoff at the end of the engagement.