End User Computing Architect - Azure Virtual Desktop and VDI - TS/SCI with Polygraph

GD Information Technology•Chantilly, VA

2d•Onsite

About The Position

The End User Computing Architect will define and maintain the EUC, Azure Virtual Desktop (AVD), and VDI target architecture, reference configurations, design standards, exception process, and enclave transition roadmaps. The role assesses dependencies across AVD, Citrix, thin clients, Windows 11 kiosks, physical endpoints, profiles, applications, and peripherals, and architects host pools, images, profiles, application delivery, session controls, capacity, network paths, identity integration, resilience, backup, and disaster recovery. The architect leads desktop baseline experiments to measure the performance impact of security tools, Sysmon configurations, monitoring agents, endpoint controls, and software components. The role works with Identity, Cloud/M365, and Security teams on authentication and session design, Intune and AVD management, image and policy management, enclave migrations, and security controls. It defines user-experience telemetry and dashboards, leads architecture and performance decisions, upgrade planning, technical debt reduction, and vendor integration, and mentors VDI engineers while briefing Government stakeholders on evidence, risk, options, and recommendations. This is an onsite role in Chantilly, Virginia. Applicants must be U.S. citizens and currently hold an active TS/SCI clearance with Polygraph. The position is with GDIT, a technology and professional services company serving U.S. government, defense, and intelligence customers.

Requirements

Bachelor's degree in Information Technology, Computer Science, Systems Engineering, or a related field, or approved equivalent experience.
U.S. citizenship.
Active TS/SCI with Polygraph clearance.
10 or more years of enterprise EUC, VDI, endpoint, or infrastructure engineering experience, including 5 or more years in architecture or lead design roles.
Deep experience with Azure Virtual Desktop and/or Citrix Virtual Apps and Desktops in large enterprise environments.
Strong knowledge of Windows 10/11, thin-client platforms, golden images, profile technologies such as FSLogix, application layering/packaging, Group Policy, and endpoint management.
Experience with Intune, MECM/SCCM, Defender for Endpoint, identity integration, network dependencies, capacity planning, and high-availability design.
Demonstrated performance engineering and troubleshooting using endpoint, session, application, network, and infrastructure telemetry.
Working knowledge of RMF, STIGs, Zero Trust, patching, vulnerability management, audit logging, and classified endpoint constraints.
Experience developing reference architectures, migration plans, operational acceptance criteria, and lifecycle/upgrade strategies.
Demonstrated technical leadership, mentoring, cross-team conflict resolution, and customer communication.
Onsite work in Chantilly, Virginia.

Nice To Haves

Microsoft Certified: Azure Virtual Desktop Specialty or Microsoft 365 Certified: Endpoint Administrator Associate.
Azure Administrator Associate certification and applicable Citrix EUC or Omnissa Horizon credentials.
Experience with Aternity, ControlUp, Lakeside, Dynatrace, or other digital employee experience and VDI observability platforms.
Experience in large user-scale or multi-enclave DoW/IC environments.
Experience with desktop-security performance experiments, application compatibility remediation, and automated image/configuration pipelines.
Prior DoW/IC experience and familiarity with peripheral, media, printing, and disconnected update constraints.

Responsibilities

Define and maintain EUC/AVD/VDI target architecture, reference configurations, design standards, exception processes, and enclave transition roadmaps.
Assess dependencies across AVD, Citrix, thin clients, Windows 11 kiosks, physical endpoints, profiles, applications, and peripherals.
Architect host pools, images, profiles, application delivery, session controls, capacity, network paths, identity integration, resilience, backup, and disaster recovery.
Lead desktop baseline experiments that isolate and measure the performance impact of security tools, Sysmon configurations, monitoring agents, endpoint controls, and software components.
Partner with Identity teams on authentication and session design and single-session mission-application workflows.
Partner with Cloud/M365 teams on Intune, AVD, image management, policy, Defender, update rings, and enclave migration sequencing.
Partner with Security teams to preserve STIG, RMF, Zero Trust, endpoint protection, audit, and data-loss controls while reducing avoidable user friction.
Define Aternity/Dynatrace/EUC telemetry, synthetic user journeys, user-experience thresholds, and operational dashboards as MEWI inputs.
Lead architecture reviews, performance and capacity decisions, upgrade planning, technical debt reduction, and vendor/partner integration.
Mentor VDI engineers and brief Government stakeholders on user-impact evidence, risk, options, and recommended actions.

Benefits

Comprehensive benefits and wellness packages.
401(k) with company match.
Competitive pay.
Paid time off, including vacation, sick and personal time, holidays, paid parental, military, bereavement, and jury duty leave.
Medical plan options, some with Health Savings Accounts.
Dental plan options.
Vision plan.
Short- and long-term disability benefits.
Life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance, provided or available.
Full flex work weeks where possible.
AI-powered career tool to identify career steps and learning opportunities.
Internal mobility team focused on career goals.
Award-winning culture of innovation and a military-friendly workplace.