Virtual Desktop Infrastructure Engineer

Overview

The Virtual Desktop Infrastructure (VDI) Engineer requires familiarity with existing and emerging virtual desktop technologies. The VDI Engineer will engineer solutions for baseline VDI builds, to ensure operating system upgrades are incorporated at least six months before the operating system reaches end of life.

• Infrastructure Administration:
  Deploy, configure, patch, and maintain the 10
  
  ZiG Manager server instance hosted inside the AWS Virtual Private Cloud (VPC).
• Endpoint Profile Management:
  Develop, push, and test operating system configurations (PeakOS, RepurpOS, NOS) to physical thin and zero client hardware devices.
• Lifecycle & Firmware Updates:
  Administer automated security patches, manage SSL/TLS certificates for secure client-to-manager communication, and oversee device enrollment.
• Hardware Conversion:
  Build configurations to repurpose legacy desktop hardware into secure, streamlined thin-client endpoints.

Pillar 2: VDI Platform Engineering & Testing

• Azure Virtual Desktops (AVD):
  Build and maintain gold images, manage multi-session host pools, configure FSLogix profile containers, and implement cost-saving auto-scaling rules.
• AWS Work Spaces:
  Package and deploy applications, integrate Active Directory/AWS Directory Services, administer Work Spaces pools, and configure streaming protocols (WSP/PCoIP).
• Horizon Virtual Desktops:
  Provision and optimize instant clones, manage virtualization storage layers, configure Horizon Connection Servers, and orchestrate hybrid extensions.
• Testing & User Feedback Loops:
  Establish pilot groups, gather performance metrics (latency, logon times, peripheral compatibility), and refine virtual desktop templates based on structured user feedback.

Pillar 3:
Security Compliance & Systems Hardening

• ISSO
  
  Collaboration:
  
  Serve as the direct technical points of contact for Information System Security Officers (ISSOs). Maintain compliance packages and continuous monitoring workflows.
• STIG Implementation:
  Apply Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) across all virtual desktop operating system templates, active directory policies, 10
  
  ZiG firmware, and supporting cloud resources.
• Certificate to Operate (CTO) Support:
  Author, test, and gather supporting technical evidence required to achieve and maintain Certificates to Operate (CTO) and Authorities to Operate (ATO).

Pillar 4:
Architecture, Documentation & Advisory

• CONOPS Development:
  Draft and update Concept of Operations (CONOPS) documents outlining system boundaries, scaling mechanics, failover parameters, and disaster recovery processes.
• Standard Operating Procedures (SOPs):
  Create, update, and publish operational guides for tier-1 and tier-2 help desk personnel (e.g., desktop provisioning, profile resets, hardware replacements).
• Technical Whitepapers:
  Author architectural evaluation documents comparing cost, performance, and capabilities of the various VDI platforms.
• Technical Recommendations:
  Provide strategic input regarding cloud consumption optimization, hardware lifecycle planning, and Zero Trust security architectures.

OPERATING HOURS AND EXPECTATIONS: This is a Full Time position, with standard operating hours Monday - Friday.

TRAVEL: Position does not require travel.

CLEARANCE:

• Active Top Secret / SCI.
  *** TS/SCI required upon application for initial consideration. This position is not open for any clearance upgrades, reactivation, or sponsorship.***

EDUCATION:

• Master's degree in this functional area, or;
• Bachelor's degree with three (3)+ years of experience, or;
• Eight (8) or more years of experience directly involving engineering.

CERTIFICATION(S):

• Possess active IAT Level II (Security+, or equivalent) Certification.
• Amazon Web Services certified Solutions Architect or Sys Ops Administrator (If one does not hold a AWS Solutions Architect or Sys Ops Administrator certification at the time of application, then it will be required within 180 days of on-boarding).

REQUIRED
SKILLS AND EXPERIENCE:

• Three (3)+ years of relevant technical experience including experience maintaining and operating commercial cloud services such as those provided as part of C2E (Amazon Web Services, Microsoft Azure, Google Cloud).
• Proficient in creating, maintaining and enhancing programming/scripting languages including Microsoft Powershell, Python, Bash, and/or Perl. Experience with automation tools like Terraform, Open Tofu, Ansible, puppet, and/or chef. Experience using a coding repository (e.g., Git Hub, Git Lab, etc.)

DESIRED EXPERIENCE/TECHNICAL PREREQUISTES:

• VDI Administration:
  Experience administering at least one of the primary VDI platforms (AVD, AWS Work Spaces, Horizon).
• Endpoint Management:
  Experience configuring and operating 10
  
  ZiG Manager or equivalent thin-client deployment consoles.
• Scripting & Automation:
  Proficiency with scripting languages (Power Shell, Bash, or Python) to automate template deployment, cloud resource scheduling, and user profile management.
• Infrastructure…