1750 - Virtual Desktop Infrastructure Engineer

Sigma Defense is seeking a Virtual Desktop Infrastructure Engineer to be a hands-on Azure Virtual Desktop engineer who understands both the user-facing desktop experience and the Microsoft Azure infrastructure supporting it.

As a mid-level engineer, the candidate should be capable of independently managing routine AVD engineering and operational responsibilities while working with senior cloud, networking, security, and automation engineers on more complex initiatives. The ideal candidate will also have an automation-focused mindset.

Equal Opportunity Employer/Veterans/Disabled: Sigma Defense Systems is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

• 4+ years of relevant experience.
• Professional experience supporting Virtual Desktop Infrastructure (VDI) or enterprise Windows desktop environments.
• Hands-on experience with Microsoft Azure Virtual Desktop (AVD).
• Working knowledge of Microsoft Azure infrastructure and services.
• Experience configuring and managing AVD host pools, session hosts, workspaces, and application groups.
• Experience administering and troubleshooting Windows 10/11 and/or Windows Server environments.
• Experience with virtual desktop image creation, maintenance, and deployment.
• Experience with FSLogix profile management.
• Understanding of Azure networking concepts and their impact on virtual desktop environments.
• Working knowledge of Microsoft Entra ID, authentication, authorization, and Azure RBAC.
• Experience troubleshooting user sessions, profiles, applications, authentication, networking, and performance issues.
• Experience with PowerShell scripting and Windows administration.
• Must be a U.S. citizen.

• Associate's degree from an accredited college or university in Information Technology.

• Experience supporting Azure Virtual Desktop within Azure Government.
• Experience supporting VDI or AVD environments within a Department of Defense (DoD) or other regulated environment.
• Experience with large-scale or multi-environment AVD deployments.
• Advanced experience with FSLogix.
• Experience with automated Windows image creation and management.
• Experience with Microsoft Intune and Microsoft Entra ID Conditional Access.
• Experience with Azure Files, Azure NetApp Files, Azure Monitor, Log Analytics, and AVD Insights.
• Experience with Microsoft Defender for Cloud and Microsoft Defender for Endpoint.
• Experience implementing Azure Policy.
• Experience using Terraform, Bicep, ARM templates, Azure DevOps, or GitHub Actions.
• Familiarity with DoD RMF, NIST SP 800-53, and STIGs.

• CompTIA Security+
• Azure Virtual Desktop Specialty (AZ-140)

• Azure Virtual Desktop
• Microsoft Entra ID

• Candidate must possess or have the ability to obtain an active TS/SCI security clearance.
• Clearance may be sponsored for the right candidate.

• Deploy, configure, administer, and maintain Azure Virtual Desktop (AVD) environments within Microsoft Azure.
• Configure and manage AVD host pools, session hosts, workspaces, application groups, and published desktops and applications.
• Support pooled and personal desktop environments based on mission and user requirements.
• Monitor AVD environments and troubleshoot user-session, performance, connectivity, authentication, application, and profile issues.
• Build, maintain, test, and deploy standardized Windows desktop and session-host images.
• Support automated image-management and deployment processes for AVD session hosts.
• Configure and maintain FSLogix profiles and profile containers.
• Support application installation, configuration, testing, packaging, and delivery.
• Configure and maintain AVD scaling plans and optimize session-host utilization and performance.
• Support Azure compute, storage, networking, and identity resources required by AVD.
• Integrate AVD environments with Microsoft Entra ID, Azure RBAC, and other Azure identity services.
• Support secure authentication and access-control requirements.
• Work with Azure Network Engineers to troubleshoot network connectivity, DNS, routing, firewall, and private-access issues.
• Work with cybersecurity engineers to implement system-hardening requirements and remediate vulnerabilities.
• Support Azure Policy, Microsoft Defender for Cloud, and other security and governance capabilities.
• Develop and maintain automation using PowerShell, Azure CLI, and Infrastructure as Code.
• Monitor system health, capacity, utilization, and user experience.