Azure Desktop Engineer - Jr Security Clearance

Position: Azure Desktop Engineer - Jr with Security Clearance
** ACTIVE TS/SCI SECURITY CLEARANCE WITH POLYGRAPH REQUIRED
** Azure Desktop Engineer - Jr. Position Summary The Azure Desktop Engineer will play a critical role in the modernization of the enterprise end-user computing (EUC) environment as the organization transitions from traditional on-premises desktop systems to a fully cloud-managed Azure ecosystem. This engineer will design, implement, and support Azure Virtual Desktop (AVD), Intune, and related Microsoft-native technologies to deliver secure, scalable, and high-performing desktop experiences to a global workforce of more than 10,000 users.

The ideal candidate has deep experience with Windows engineering, cloud architecture, modern device management, and migration strategies  Responsibilities Azure Virtual Desktop (AVD) Architecture & Operations
• Design, deploy, and operationalize Azure Virtual Desktop for large-scale enterprise use.
• Build, maintain, and optimize AVD golden images using Azure Image Builder or equivalent native tools.
• Configure host pools, application groups, FSLogix profile containers, autoscaling, and monitoring solutions.
• Implement multi-region AVD deployments aligned to business continuity and disaster recovery needs.
• Optimize performance, availability, and cost across a global AVD footprint. Modern Device Management & Endpoint Engineering
• Implement enterprise-wide Modern Management strategies using Microsoft Intune and Azure AD.
• Develop and maintain Windows Autopilot provisioning processes for 10k+ devices.
• Create and manage Intune configuration profiles, compliance policies, and security baselines.
• Migrate GPO-based configurations to Intune/MDM frameworks while ensuring operational continuity.
• Lead packaging, testing, and deployment of Win
32 and UWP applications through Intune. Azure & Identity Integration
• Integrate desktop infrastructure with Azure Active Directory, Conditional Access, MFA, Identity Protection, and RBAC.
• Collaborate with security teams to ensure Zero Trust alignment for all endpoint solutions.
• Implement device identity models including Azure AD Join and Hybrid Join as needed. Migration & Modernization Initiatives
• Lead the migration from on-premises SCCM/Config Mgr to cloud-native Intune management.
• Develop migration strategies for user profiles (FSLogix/One Drive Known Folder Move), applications, and security policies.
• Partner with networking, infrastructure, and security teams to deliver a seamless cloud transition.
• Produce detailed architectural diagrams, runbooks, and operational documentation. Automation & Continuous Improvement
• Automate image creation, application packaging, and deployment workflows using Power Shell, Graph API, and Azure Automation.
• Implement monitoring, alerting, and logging solutions with Azure Monitor, Log Analytics, and native dashboards.
• Drive continuous performance improvements and cost optimization across all cloud-managed EUC services. End-User Experience & Support
• Evaluate and enhance the overall desktop experience, including login performance, application responsiveness, and security posture.
• Provide Tier 3/4 escalation support for AVD and Intune environments.
• Participate in enterprise change management and contribute to technical governance boards.

Required Qualifications
• 2+ years of experience in Windows Desktop Engineering or End User Computing (EUC).
• 2+ years of hands-on experience with Azure, including AVD, Azure AD, and relevant security components.
• Expert knowledge of Windows 10/11, image creation, and enterprise configuration management.
• Strong Power Shell scripting experience (automation, reporting, packaging workflows).
• Experience managing large enterprises (5,000+ devices; ideally 10,000+).
• Deep understanding of cloud networking (VNETs, VPN, routing, DNS, Express Route).
• Hands-on experience with FSLogix, profile management, and cloud storage integrations.
• Proficiency with Microsoft Endpoint Manager (Intune) and Autopilot.
• Strong familiarity with Zero Trust concepts and enterprise security hardening.
• Security+ Certification --
- Preferred Qualifications
• Microsoft certifications such as:…