Senior Cloud Engineer – Virtual Desktop Infrastructure (VDI)

CACI International

3d•Remote

About The Position

CACI is seeking an experienced Cloud Engineer with profound knowledge and comprehensive understanding of native Azure Virtual Desktop (AVD) functionality to drive our cloud-based desktop solutions. As a subject matter expert, you will work with the team to understand requirements, priorities, and objectives to ensure work supports the larger capabilities and direction of the overall solution. This includes participation in planning, backlog refinement and prioritization, and retrospectives. You will participate in the full life cycle of activities including deployment and validation efforts to ensure product success and will follow all established processes and standards. There will be opportunities to coach and lead the other AVD engineers on the team. Flexibility and adaptability are ways of life here on the EITaaS team, so if you are comfortable breaking out of the mold and have a passion for learning new technologies, while applying your existing experience, then this position may be exactly what you are looking for. Although this is a fast-paced environment, be assured you’d be joining a high-tech people-oriented team and overall community that’s just as flexible as we’re hoping you to be.

Requirements

US Citizenship required
Ability to obtain/maintain Secret clearance
12+ Years relevant experience (a Bachelor’s Degree in applicable field may be substituted for 5 years of experience)
Experience as an Azure Administrator or Developer
Experience with desktop virtualization products such as Azure Virtual Desktop, Citrix, or VMware
Experience with customer interactions, including presenting, answering questions, proactively resolving issues
Experience integrating, securing, and understanding the following Microsoft platform services (both in Windows OS and in Azure Cloud): Active Directory Domain Services (ADDS), Active Directory Certificate Services (ADCS), Active Directory Federated Services (ADFS), Windows AD-integrated PKI, Single Sign On (SSO) implementation
Experience with securing systems by following STIGs, best practices, and government/compliance requirements (such as NIST 800-53, NIST 800-171, FISMA, FEDRAMP), and negotiating/working-with IA personnel to arrive at sensible and effective solutions
Experience with systems administration in Linux environments (RHCE equivalence) or Windows Server environments.
Experience creating, analyzing, and automating scripts (Command, Bash, Python, Ansible, Puppet, Chef)
Experience integrating/understanding Multi-factor authentication (MFA, 2MFA)
Experience with enhanced data protection and compliance (such as OpenSSL, Keystores, Azure Key Vault, Cyphers)
Experience with network devices, integrations, and concepts such as VPN, firewall, routing
Experience supporting the SELC process, including producing documentation and reviewing with customers for approval.
work with minimal supervision, are a self-starter and capable of defining and managing your individual tasks and have strong communication skills for partnering and communicating across internal teams to maximize efficiency and success of assigned tasks.

Nice To Haves

Experience with Windows Zero Touch Installation (ZTI) processes.
Experience creating, executing and troubleshooting complex PowerShell scripts.
Experience with automated build processes preferred
Experience with Microsoft Configuration Manager.
Experience with network traffic analysis / troubleshooting.
One of the following certifications: Azure DevOps Engineering Expert, Azure Solutions Architect Expert, Azure Administrator Associate, Azure Security Engineer Associate.
Relevant Security Certifications (e.g. CISSP, CCNA, CCDA, CCNA-Security, etc.)
Relevant Technical Certifications (e.g., VCP-VMC, CCE-V, Azure Virtual Desktop Specialty Certification)
Understands and intuits "why things work", not just the ability to follow installation and configuration guides.

Responsibilities

Responsible for architecting, planning, and implementing Virtual Desktop Infrastructure (VDI) technologies, specifically AVD, so end users have maximum functionality while maintaining application security.
Continuous reviewing of VDI infrastructure to maintain latest software and security patching.
Support continuous monitoring efforts to proactively resolve environmental issues.
Maintain documentation for the VDI environment, such as diagrams, detailed assessments, and design documents.
Identifies technical risks and mitigation strategies.
Initiates and develops methods to assess the end-to-end systems performance using operational measurements or other available test beds in order that end-to-end performance objectives are met.
Implement Azure scripts and workbooks to automate based AVD functionality
Manage and maintain the AVD Image; apply patches to the monthly images, roll out host pool updates with monthly image
Troubleshoot AVD Azure issues
Manage and monitor autoscaling of AVD resources to ensure sufficient virtual resources are available for DAF users (shutting down over provisioned resources and startup up new resources when insufficient resources are available)
Establish and track usage trend data for AVD consumption and tailor scripts and automation around peaks and dips in service usage
Monitor cost consumption for AVD and identify, recommend, and implement cost saving solutions as approved