Azure Desktop Engineer - Mid

Position Summary

The Azure Desktop Engineer will play a critical role in the modernization of the enterprise end‑user computing (EUC) environment as the organization transitions from traditional on‑premises desktop systems to a fully cloud‑managed Azure ecosystem. This engineer will design, implement, and support Azure Virtual Desktop (AVD), Intune, and related Microsoft‑native technologies to deliver secure, scalable, and high‑performing desktop experiences to a global workforce of more than 10,000 users.

The ideal candidate has deep experience with Windows engineering, cloud architecture, modern device management, and migration strategies at scale.

• Design, deploy, and operationalize Azure Virtual Desktop for large‑scale enterprise use.
• Build, maintain, and optimize AVD golden images using Azure Image Builder or equivalent native tools.
• Configure host pools, application groups, FSLogix profile containers, autoscaling, and monitoring solutions.
• Implement multi‑region AVD deployments aligned to business continuity and disaster recovery needs.
• Optimize performance, availability, and cost across a global AVD footprint.

• Implement enterprise‑wide Modern Management strategies using Microsoft Intune and Azure AD.
• Develop and maintain Windows Autopilot provisioning processes for 10k+ devices.
• Create and manage Intune configuration profiles, compliance policies, and security baselines.
• Migrate GPO‑based configurations to Intune/MDM frameworks while ensuring operational continuity.
• Lead packaging, testing, and deployment of Win
  32 and UWP applications through Intune.

• Integrate desktop infrastructure with Azure Active Directory, Conditional Access, MFA, Identity Protection, and RBAC.
• Collaborate with security teams to ensure Zero Trust alignment for all endpoint solutions.
• Implement device identity models including Azure AD Join and Hybrid Join as needed.

• Lead the migration from on‑premises SCCM/Config Mgr to cloud‑native Intune management.
• Develop migration strategies for user profiles (FSLogix/One Drive Known Folder Move), applications, and security policies.
• Partner with networking, infrastructure, and security teams to deliver a seamless cloud transition.
• Produce detailed architectural diagrams, runbooks, and operational documentation.
• Automate image creation, application packaging, and deployment workflows using Power Shell, Graph API, and Azure Automation.
• Implement monitoring, alerting, and logging solutions with Azure Monitor, Log Analytics, and native dashboards.
• Drive continuous performance improvements and cost optimization across all cloud‑managed EUC services.

• Evaluate and enhance the overall desktop experience, including login performance, application responsiveness, and security posture.
• Provide Tier 3/4 escalation support for AVD and Intune environments.
• Participate in enterprise change management and contribute to technical governance boards.

• 8+ years of experience in Windows Desktop Engineering or End User Computing (EUC).
• 5-6+ years of hands‑on experience with Azure, including AVD, Azure AD, and relevant security components.
• Expert knowledge of Windows 10/11, image creation, and enterprise configuration management.
• Strong Power Shell scripting experience (automation, reporting, packaging workflows).
• Experience managing large enterprises (5,000+ devices; ideally 10,000+).
• Deep understanding of cloud networking (VNETs, VPN, routing, DNS, Express Route).
• Hands‑on experience with FSLogix, profile management, and cloud storage integrations.
• Proficiency with Microsoft Endpoint Manager (Intune) and Autopilot.
• Strong familiarity with Zero Trust concepts and enterprise security hardening.

• Microsoft certifications such as:
  • MD‑102:
    Modern Desktop Administrator
  • AZ‑305:
    Azure Solutions Architect
• Experience with hybrid SCCM/Intune co‑management transitions.
• Understanding of Infrastructure‑as‑Code (Bicep, ARM templates, Terraform optional).
• Experience working in regulated or…