Virtual Desktop Infrastructure Engineer

Intrepid Global Solutions•Ft. Bragg, NC

About The Position

The Virtual Desktop Infrastructure (VDI) Engineer designs, engineers, implements, integrates, supports accreditation, troubleshoots, and sustains secure communications solutions for Department of Defense classified environments. The role is a technical subject matter expert for commercial technology solutions that comply with NSA Commercial Solutions for Classified (CSfC) requirements, Capability Packages, and applicable DoD cybersecurity standards. The engineer leads Operations and Maintenance activities and provides engineering support to expand the Fort Bragg Virtual Secure – Remote (ViSR) solution, which supports remote SIPRNet access for up to 2,000 concurrent users initially and may scale to 15,000. The role also supports implementation of the solution architecture in other NETCOM areas of operation. The position works with cybersecurity, network and systems engineering teams, ISSMs/ISSOs, and government stakeholders to develop secure, compliant, operationally effective CSfC solutions. It includes engineering and sustaining CSfC components and VMware Horizon virtual desktop infrastructure, providing Tier III VDI support, and maintaining technical documentation and configuration records. The employer is Intrepid Acquisition Holdings, LLC. An active Secret clearance is required.

Requirements

AA/AS degree and 7 years of IT experience, or BA/BS degree and 5 years of IT experience.
3 years of Virtual Desktop Infrastructure (VDI) experience.
Computing Environment Certification, such as MCSA or Linux.
Qualifying professional certifications for DoD Cyber Workforce 8140 Baseline IAT Level II.
Experience working in DoD IT environments.
Working knowledge of DoD Risk Management Framework (RMF) processes.
Experience working in a Microsoft Active Directory environment.
Experience implementing Identity Management applications and AAA.
Active Secret security clearance.

Responsibilities

Design, engineer, implement, configure, and sustain NSA CSfC solutions for classified DoD communications and information systems.
Develop CSfC architectures according to applicable NSA Capability Packages and approved Components List requirements.
Engineer solutions using two independent layers of commercial encryption to protect classified information across untrusted networks.
Design and support CSfC solutions for Mobile Access, Campus WLAN, Multi-Site Connectivity, Data-at-Rest, and other applicable use cases.
Evaluate commercial hardware and software products for CSfC compliance and integration with existing DoD network architectures.
Configure and troubleshoot VPN gateways, IPsec tunnels, firewalls, routers, switches, wireless infrastructure, endpoint devices, and related security components.
Support CSfC solution registration, authorization, assessment, documentation, and maintenance.
Maintain configuration compliance with approved CSfC architectures, Capability Packages, and security baselines.
Analyze new or revised NSA CSfC requirements and determine their impact on deployed solutions.
Support software, firmware, certificate, cryptographic algorithm, and security configuration updates.
Design, install, upgrade, and configure VMware Horizon Connection Servers, Unified Access Gateways, and Horizon Agents.
Provision and manage automated desktop pools using Instant Clones, including parent VM, replica VM, and golden image lifecycles.
Administer VMware vCenter Server, configure ESXi hosts, and optimize vSAN or external block/file storage arrays.
Configure and troubleshoot VMware Dynamic Environment Manager for user profiles and policies, and use Omnissa App Volumes to deliver application packages.
Optimize Blast Extreme and PCoIP protocols for audio/video redirection, GPU acceleration, and low-latency sessions over WAN/LAN.
Write and maintain PowerShell and PowerCLI scripts to automate desktop-pool provisioning, connection monitoring, and recurring vSphere maintenance.
Perform vulnerability remediation, patching, configuration management, and lifecycle management for CSfC components.
Conduct root-cause analysis of CSfC service interruptions and develop corrective actions to restore mission capability.
Develop and execute implementation plans, test plans, rollback procedures, and validation procedures for system changes.
Participate in technical reviews, engineering boards, change-control activities, and configuration-management processes.
Provide Tier III engineering support for VDI incidents and escalated technical issues.
Coordinate with vendors, government engineering organizations, cybersecurity personnel, and other technical stakeholders to resolve interoperability and security issues.
Maintain accurate as-built documentation and configuration records for deployed CSfC solutions.
Perform special projects and other assigned duties.