RESPONSIBILTIES

• Strong understanding of Windows operating systems, especially clients. 
• Understanding of Microsoft Active Directory domains. 
• Architecture Design: Design and architect Azure Virtual Desktop or similar VDI solutions that align with the organization’s goals and requirements. This includes cloud capabilities and resources, operating system, and software components, deployment, automation, scalability, reliability, and security.  
• Security: Implement and maintain security best practices for AVD/VDI and ensure regulatory and organizational compliance controls are enabled.  
• Performance Optimization: Monitor AVD/VDI performance, identify potential issues, and recommend and implement solutions following standard release processes. Optimize cloud infrastructure for cost-effectiveness, performance, and scalability. Identify and address performance bottlenecks and resource utilization issues.  
• Automation: Develop and maintain automation scripts, templates, and processes to streamline provisioning, configuration management, and deployments  
• Understanding of Azure suite of technologies (IaaS through SaaS).  
• Collaboration: Work closely with cross-functional teams, including developers, DevOps engineers, and system administrators, to support application development and deployment.  
• Documentation: Create and maintain documentation of architectures, configurations, and operational procedures.    
• Ownership: This is a Senior Position within the Program and requires multiple years of relevant experience. It is expected that you work with minimal supervision, are a self-starter and capable of defining and managing your individual tasks and have strong communication skills for partnering and communicating across internal teams to maximize efficiency and success of assigned tasks. 

KEY QUALIFICATIONS

• Clearance: Active Secret Clearance required  
• Education and Years of Experience: Bachelor’s Degree in a relevant field and 10 years’ experience is required.  
• Substitution: Associate’s Degree and 15 years of experience or Master’s Degree and 7 years of experience may be substituted for Bachelor’s Degree. 

KEY KNOWLEDGE, SKILLS, AND ABILITIES (KSA)

• Current CISSP, CCNA, CCNP, or Security+ certification 
• 7+ years’ experience with Virtual Desktop capabilities: Azure Virtual Desktop/AVD (preferred), VMware Horizon, or Citrix DAAS 
• 5+ years’ experience in Windows Zero Touch Installation (ZTI) build including scripted OS build, imaging, application package scripted install, and deployment to endpoints. 
• 5+ years’ experience configuring, securing, supporting, and understanding Active Directory Domain Services (ADDS), in both Windows OS and in Azure Cloud.   
• 5+ years’ experience setting up and managing cloud infrastructure, preferably Azure subscription resources, Windows virtualization, virtual networking, and virtual storage.  
• Strong Windows Operating System installation, administration and support experience and abilities. 
• Strong documentation skills including design, implementation and operational processes, and user guides. 
• Experience with securing systems by following STIGs, best practices, and government/compliance requirements (such as NIST 800-53, FISMA, FEDRAMP), and negotiating/working-with compliance personnel to arrive at sensible and effective solutions. 
• Hands-on experience designing and creating PowerShell scripts for use in enterprise environments. 
• Azure certification required within 6 months of hire.   
• Excellent problem-solving and analytical skills with a strong attention to detail  
• Strong communication and interpersonal skills to collaborate effectively with cross-functional teams and clients  
• Ability to adapt quickly to changing priorities and work well under pressure 

PREFERRED ADDITIONAL QUALIFICATIONS

• One of the following certifications: Azure DevOps Engineering Expert, Azure Solutions Architect Expert, Azure Administrator Associate, Azure Security Engineer Associate   
• Experience integrating, securing, and understanding the following Microsoft platform services: Active Directory Certificate Services (ADCS), Active Directory Federated Services (ADFS), Windows AD-integrated PKI, Single Sign On (SSO) implementation 
• 15 years of experience with a Bachelor’s Degree is preferred. 
• Experience with:
 
• Endpoint policy controls via AD Group Policy Object and Intune 
• Terraform deployments  
• Windows Smartcard authentication 
• Entra ID Tenants and Microsoft365 
• MSIX application packaging