AWS Engineer - Workspaces & Terraform IaC | Fully Remote (Fastwater Staffing)
About the Rol We're looking for a mid-level AWS Engineer to lead the design and deployment of a new Amazon WorkSpaces environment, built from the ground up with Terraform. This is a hands-on, full-time contract engagement with a tight start date and a defined 10-week scope. You'll own the IaC implementation end-to-end - from initial architecture through deployment, hardening, and handoff. The ideal candidate has shipped Workspaces deployments before, writes clean and modular Terraform, and can move quickly without sacrificing operational quality.
What You'll Do
- Design and deploy a new Amazon WorkSpaces environment, including directory services (AWS Managed Microsoft AD or AD Connector), networking, and security configuration
- Build and maintain Terraform modules for all infrastructure components, following IaC best practices (state management, module reuse, environment separation)
- Configure Workspace bundles, custom images, and user provisioning workflows
- Implement networking (VPCs, subnets, route tables, security groups, VPN/Direct Connect as needed) to support secure Workspace access
- Set up monitoring, logging, and alerting (CloudWatch, CloudTrail) for the Workspaces environment
- Apply security best practices including IAM least-privilege, encryption at rest/in transit, and MFA enforcement
- Document the architecture, runbooks, and IaC patterns to enable handoff at end of engagement
- Collaborate with internal stakeholders to translate requirements into a working environment Required Qualifications
- 3+ years of hands-on AWS engineering experience
- Production experience deploying and managing Amazon WorkSpaces
- Strong Terraform skills, including module design, state management, and CI/CD integration
- Solid understanding of AWS networking (VPC, subnets, security groups, NACLs, Transit Gateway/VPN)
- Experience with directory services in AWS (AWS Managed Microsoft AD, AD Connector, or Simple AD)
- Working knowledge of IAM, KMS, and AWS security best practices
- Ability to start full-time on May 18, 2026 and commit to a 10-week engagement Nice to Have
- Experience migrating or modernizing existing Workspaces environments
- Experience optimizing or refactoring legacy AWS environments into Terraform
- Familiarity with WorkSpaces Web, AppStream 2.0, or other end-user computing services on AWS
- CI/CD pipeline experience (GitHub Actions, GitLab CI, CodePipeline) for Terraform deployments
- AWS certifications (Solutions Architect Associate/Professional, Advanced Networking, Security)
- Prior consulting or contract experience Engagement Details
- Duration 10 weeks
- Commitment Full-time (40 hrs/week)
- Start May 18, 2026
- Work model Remote, with overlap during US business hours