Apply on Employer Site

D2 Consulting · 1 month ago

Azure Desktop Engineer - Mid

Chantilly, VA

Full-time

Onsite

Senior Level, Lead/Staff

$160K/yr - $180K/yr

8+ years exp

D2 Consulting is a Veteran-Owned Small Business committed to modernizing enterprise end-user computing environments. The Azure Desktop Engineer will design, implement, and support Azure Virtual Desktop solutions to provide secure and scalable desktop experiences for a global workforce.

Cyber SecurityInformation TechnologySoftware

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Design, deploy, and operationalize Azure Virtual Desktop for large-scale enterprise use

Build, maintain, and optimize AVD golden images using Azure Image Builder or equivalent native tools

Configure host pools, application groups, FSLogix profile containers, autoscaling, and monitoring solutions

Implement multi-region AVD deployments aligned to business continuity and disaster recovery needs

Optimize performance, availability, and cost across a global AVD footprint

Implement enterprise-wide Modern Management strategies using Microsoft Intune and Azure AD

Develop and maintain Windows Autopilot provisioning processes for 10k+ devices

Create and manage Intune configuration profiles, compliance policies, and security baselines

Migrate GPO-based configurations to Intune/MDM frameworks while ensuring operational continuity

Lead packaging, testing, and deployment of Win32 and UWP applications through Intune

Integrate desktop infrastructure with Azure Active Directory, Conditional Access, MFA, Identity Protection, and RBAC

Collaborate with security teams to ensure Zero Trust alignment for all endpoint solutions

Implement device identity models including Azure AD Join and Hybrid Join as needed

Lead the migration from on-premises SCCM/ConfigMgr to cloud-native Intune management

Develop migration strategies for user profiles (FSLogix/OneDrive Known Folder Move), applications, and security policies

Partner with networking, infrastructure, and security teams to deliver a seamless cloud transition

Produce detailed architectural diagrams, runbooks, and operational documentation

Automate image creation, application packaging, and deployment workflows using PowerShell, Graph API, and Azure Automation

Implement monitoring, alerting, and logging solutions with Azure Monitor, Log Analytics, and native dashboards

Drive continuous performance improvements and cost optimization across all cloud-managed EUC services

Evaluate and enhance the overall desktop experience, including login performance, application responsiveness, and security posture

Provide Tier 3/4 escalation support for AVD and Intune environments

Participate in enterprise change management and contribute to technical governance boards

Qualification

Azure Virtual DesktopMicrosoft IntuneWindows Desktop EngineeringPowerShell scriptingAzure Active DirectoryFSLogixZero Trust conceptsCloud networkingAzure AutomationEnterprise security hardeningInfrastructure-as-CodeHybrid SCCM/IntuneMicrosoft certifications

Required

8+ years of experience in Windows Desktop Engineering or End User Computing (EUC)

5-6+ years of hands-on experience with Azure, including AVD, Azure AD, and relevant security components

Expert knowledge of Windows 10/11, image creation, and enterprise configuration management

Strong PowerShell scripting experience (automation, reporting, packaging workflows)

Experience managing large enterprises (5,000+ devices; ideally 10,000+)

Deep understanding of cloud networking (VNETs, VPN, routing, DNS, ExpressRoute)

Hands-on experience with FSLogix, profile management, and cloud storage integrations

Proficiency with Microsoft Endpoint Manager (Intune) and Autopilot

Strong familiarity with Zero Trust concepts and enterprise security hardening

Preferred

Microsoft certifications such as: AZ-104: Azure Administrator, AZ-140: Azure Virtual Desktop Specialty, MD-102: Modern Desktop Administrator, AZ-305: Azure Solutions Architect

Experience with hybrid SCCM/Intune co-management transitions

Understanding of Infrastructure-as-Code (Bicep, ARM templates, Terraform optional)

Experience working in regulated or high-security environments