Systems Administrator; Modern Desktop, AVD & Security

Overview

Aardwolf Consulting LLC is seeking an experienced Systems Administrator to join our infrastructure team supporting a major Federal Government customer. This role is pivotal in managing the agency’s transition to a modern endpoint environment known as the "Client of the Future" (COF).

You will serve as the technical lead for a hybrid fleet of physical devices (Surface/NUCs) and cloud-virtualized endpoints (Azure Virtual Desktop). You will drive configuration via Microsoft Intune, ensure strict security compliance (POA&M/Defender), and support AI adoption, all within an Agile framework.

1. Modern Endpoint & AVD Management

• Physical Fleet Management: Oversee the lifecycle, imaging, and onboarding of physical endpoints, specifically Microsoft Surface Pro tablets, ASUS NUCs, and 5G-enabled devices.
• Azure Virtual Desktop (AVD): Manage AVD Host Pools and Session Hosts, ensuring they are enrolled in and managed by Microsoft Intune just like physical devices.
• Intune Engineering: Troubleshoot complex Company Portal issues (app visibility, uninstall failures) and manage device policy conflicts across both physical and virtual (AVD) endpoints.
• Configuration Integrity: Maintain drive mappings, FSLogix profiles, and consistent user experiences across local "COF" devices and AVD sessions.

2. Security Operations & Federal Compliance

• Vulnerability Management: Utilize Microsoft Defender for Endpoint (TVM/KQL) to identify high/critical vulnerabilities across physical and AVD environments.
• Audit Readiness (POA&M): Maintain rigorous daily documentation of remediation actions to satisfy Federal POA&M (Plan of Action and Milestones) requirements.
• Hardening: Implement application whitelisting (e.g., Calabrio, Developer tools) and validate trusted publisher/certificate paths.

3. Agile Project Management & Documentation

• Sprint Workflow: Actively participate in team sprints using Jira to track planned engineering work (e.g., AVD image updates, software rollouts) separate from reactive support tickets.
• Knowledge Base: Create and maintain technical "How-To" guides, meeting artifacts, and system documentation in Confluence to ensure cross-team knowledge sharing.
• Reporting: Translate outcomes from high-level technical syncs (Security/Prevuln) into actionable Jira stories.

4. Software Deployment & AI Readiness

• Packaging: Prepare and deploy applications (e.g., Microsoft Visio) using Intune Win
  32 packaging, employing custom detection rules to ensure deployment success on both NUCs and AVD.
• Copilot Enablement: Support the rollout of Microsoft Copilot for Edge, including testing licensing capacity, validating behavior, and documenting governance/uninstall criteria.
• Change Management: Execute off-hours rollouts and manage user communications to minimize disruption.

5. Service Management (ITSM) & Advanced Troubleshooting

• Root Cause Diagnostics: Go beyond basic fixes by utilizing Windows Event Viewer, Registry Editor, and log analysis (Intune Management Extension logs) to diagnose OS stability issues and application crashes.
• Incident Resolution: Open, update, and resolve Service Now (SNOW) incidents related to endpoint performance, connectivity, and software errors.

• Clearance: Public Trust
• Education & Experience:

• Education: Bachelor’s Degree in Computer Science, Information Technology, or a related field is required.
• Experience: Minimum of 6 years of relevant professional experience in systems administration or endpoint engineering.
• Substitution Policy:
• Relevant experience exceeding the minimum shown may be substituted for education (e.g., 10+ years of experience in lieu of a Bachelor’s degree).
• Likewise, education exceeding the minimum shown may be substituted for relevant experience (e.g., a Master’s degree may substitute for 2 years of professional experience).

Technical Skills

• Microsoft Intune: Expert capability in modern management, Win
  32 app packaging, and compliance policies.
• Azure Virtual Desktop (AVD): Experience managing AVD images, Host Pools, and multi-session Windows 10/11 environments via Intune.
• Core Windows Troubleshooting: Mastery of Event Logs
  (System/Application/Security),
  Registry…