It is almost possible to do the entire Windows installer build on a Linux agent, except for running Wix, so in order to build a signed Windows installer package, a Windows agent is needed.

The agent would need the Build Tools for Visual Studio (https://visualstudio.microsoft.com/downloads/#build-tools-for-visual-studio-2017) installed, I believe the rest of the build requirements are all downloaded via NuGet during the build.