Senior WorkSpaces Architect

Role: Senior WorkSpaces Architect
Position Type: Full-Time Contract (40hrs/week)
Contract Duration: 6 months + extendable
Work Schedule: 8 hours/day (Mon-Fri)
Work Hours: overlap till at least 2pm PST.
Location: 100% Remote - Candidates can work from anywhere in India or LATAM

We're looking for a Sr. WorkSpaces Architect, this a true Principal Engineer/Architect position for someone that specializes in AWS WorkSpaces.

1. Role Overview

The Senior WorkSpaces Architect is a hands-on, senior technical resource who helps drive the architecture, engineering, reliability, and continuous improvement of Customer's AWS WorkSpaces platform (3,400+ workspaces across multiple BUs). This is not a coordination or single-point-of-contact role. The architect must design, build, troubleshoot, and operate the platform directly, and partner closely with Customer teams, business units, and the AWS vendor team to shape and deliver the plan.

2. Support Hours

This role must have substantial daily overlap with US business hours to enable real-time collaboration with Customer teams, AWS, and business stakeholders.

Minimum overlap: Coverage must extend through at least 2:00 PM Pacific each business day, providing meaningful daily overlap with US morning and early-afternoon working hours across US time zones.

Onshore or aligned offshore: The resource may be onshore or offshore, provided the daily schedule reliably overlaps US working hours through 2:00 PM Pacific.

Incident availability: Available to join P1/P2 bridge calls and engineering escalations during the overlap window.

Meetings and cadence: Able to attend recurring US-hours meetings (operations reviews, migration planning, AWS syncs, PIR/AAR sessions).

3. Responsibilities

3.1 Architecture & Engineering

• Help drive the technical architecture and direction of the AWS WorkSpaces platform across all BUs and environments, in partnership with Customer teams
• Design and implement platform improvements for reliability, performance, security, and cost
• Own golden image lifecycle: creation, validation, patching, versioning, and retirement
• Build and maintain provisioning automation and standardized deployment tooling
• Engineer monitoring and alerting (CloudWatch/EventBridge/CloudTrail); build health dashboards
• Directory Service/AD integration; VPC, subnet, DNS, routing, firewall, and endpoint engineering
• Design and implement a controlled client version testing and rollout process
• Contribute to AWS Well-Architected Reviews and help drive the resulting recommendations to implementation

3.2 Operations & Incident Leadership

• Serve as senior technical escalation point for complex WorkSpaces and VDI issues
• Own major incidents (P1/P2): drive resolution, RCA, and preventive action tracking
• Manage AWS Support cases through to resolution
• Troubleshoot provisioning, lifecycle, connectivity, latency, and unhealthy-workspace issues
• Resolve cross-region and international connectivity issues; own unresolved latency investigations to closure

3.3 Cost Optimization & Governance

• Enable and manage cost optimization tooling for all environments
• Build and operationalize terminated employee/contractor lifecycle automation
• Establish sustainable governance so cleanup is sustained rather than drifting back
• Define and enforce provisioning gates requiring use-case justification
• Drive bastion vs. web-access rationalization with BUs, using usage and cost data

3.4 Stakeholder Engagement & Planning

This is a relationship-driven role. The architect interfaces directly with business units, end users, and the AWS vendor team, takes their feedback seriously, and is an active partner in developing and implementing the plan, not just executing tasks handed down.

• Act as the primary technical interface with business units, end users, and the AWS vendor team; build and maintain those working relationships
• Actively solicit and take in feedback from BUs, customers, and AWS, and translate it into concrete platform and process improvements rather than simply passing it along
• Co-develop plans and roadmaps with business units and AWS, then help drive their implementation through to delivery, keeping stakeholders informed at each step
• Engage BU stakeholders early to gather requirements before deployment; develop deployment and migration plans per BU wave and forecast demand
• Serve as the technical liaison to the AWS vendor team: bring platform issues and feedback to AWS, drive them to action, and hold AWS accountable to commitments
• Run a closed feedback loop: capture recurring pain points from BUs and end users, prioritize them, and fold them into the improvement plan

Access Governance (Scope Note)

The architect must understand operational access governance gaps (RBAC models, AD group structures, persona definitions) and work to plan and implement improvements in coordination with Customer's identity and security teams. Administering these groups is not in scope. Understanding and improving the processes around them is.

4. Required Skills & Experience

Must-Have

• Senior-level, hands-on AWS WorkSpaces engineering and architecture experience
• Deep AWS EUC knowledge: WorkSpaces Personal, Secure Browser, bundles, images, directories
• Strong AWS infrastructure: VPC, subnets, DNS, routing, security groups, endpoints, Directory Service/AD
• Windows and macOS endpoint and client troubleshooting
• Monitoring and automation: CloudWatch, EventBridge, CloudTrail, Lambda, scripting
• Image lifecycle engineering (creation, patching, versioning, deployment automation)
• WorkSpaces cost optimization: billing modes, cost optimizer, usage analysis
• ServiceNow ITSM workflows; incident, problem, and change management
• Major incident leadership and RCA/PIR/AAR facilitation
• Strong communication; able to lead technical discussions with AWS and internal stakeholders

Preferred

• AWS certifications (e.g., Solutions Architect, SysOps, Advanced Networking)
• Multi-platform VDI/DaaS experience (e.g., Azure Virtual Desktop, Citrix) as a differentiator
• Experience scaling WorkSpaces fleets and supporting large migrations (1,000+ workspaces)
• Experience standing up governance and lifecycle automation from scratch

5. Platform Scope & Flexibility

Primary Platform: AWS WorkSpaces. All responsibilities and expectations are sized to this environment.

Future Flexibility: Customer may introduce additional VDI/DaaS workloads (e.g., Azure Virtual Desktop) over time. The architect should have transferable skills to advise on and support additional platforms if strategy evolves. This is a prudent future-proofing preference, not a current scope expansion.