AWS Cloud Engineer - VDI Platform

About the Role

At APEX Fintech's AWS Workspaces platform, we have a production-grade, multi-region AWS serverless system that automates the full lifecycle of Amazon Workspaces virtual desktops for a multi-tenant VDI program spanning hundreds of active desktops. We are looking for an AWS Cloud Engineer with 2+ years of hands-on AWS experience to assist with platform maintenance, IaC updates, and day-to-day operational tasks.

• Assist engineering team with platform maintenance, IaC updates, and day-to-day operational tasks.
• Help triage and troubleshoot production issues under guidance, tracing basic failures across Lambda, SQS, DynamoDB, SNS, and CloudWatch Logs.
• Support day-to-day VDI operations: image builds, bundle management, directory configuration, client connectivity, and user-facing troubleshooting.
• Bridge the gap between infrastructure automation and end-user desktop experience.
• Support the Datadog monitoring setup for the AWS VDI stack — assisting with dashboards, alerts, and basic metrics/log configuration.

Duties & Responsibilities

• Assist engineering team with platform maintenance, IaC updates, and day-to-day operational tasks.
• Help triage and troubleshoot production issues under guidance, tracing basic failures across Lambda, SQS, DynamoDB, SNS, and CloudWatch Logs.
• Support day-to-day VDI operations: image builds, bundle management, directory configuration, client connectivity, and user-facing troubleshooting.
• Bridge the gap between infrastructure automation and end-user desktop experience.
• Support the Datadog monitoring setup for the AWS VDI stack — assisting with dashboards, alerts, and basic metrics/log configuration.

Education And/or Experience

• 2+ years of hands-on AWS experience in production environment.
• 2+ years of experience with AWS Systems Manager (SSM) Parameter Store for configuration management.
• 2+ years of experience working with Terraform and Ansible in a production environment.
• 2+ years of experience working with core AWS services such as Lambda, S3, IAM, DynamoDB, and CloudWatch.
• Understanding AWS Step Functions concepts (states, Task, Choice, Wait); hands-on experience is a plus.
• Exposure to API Gateway and basic REST API concepts.
• Familiarity with AWS SNS/SQS messaging concepts.
• Must have prior knowledge of observability practices (CloudWatch, Datadog) and AWS IAM fundamentals.
• Strong troubleshooting mindset and eagerness to learn Active Directory / SSO concepts for VDI environments.
• Required: hands-on experience with macOS, Linux, and shell scripting.
• Familiarity with disaster recovery (DR) concepts and multi-region failover for critical workloads.
• Familiarity with AWS Secrets Manager for credential and configuration management.

Ways to Stand Out

• Exposure to VPC networking concepts (subnets, route tables, NAT Gateway, security groups, transit gateway).
• Familiarity with Route53 and API Gateway custom domains.
• Experience with GitHub Actions or other CI/CD pipelines.
• Interest in cloud cost optimization.
• Exposure to infrastructure security scanning tools (Checkov, tfsec).
• Basic awareness of security frameworks and controls (CIS benchmarks, NIST).
• Automation scripting experience (Python, Bash, or PowerShell) for repetitive operational tasks.
• Experience with endpoint/device management tools such as Microsoft Intune or Kandji for VDI and endpoint provisioning.
• Strong communication skills — able to explain technical decisions to both engineering peers and non-technical stakeholders.