Freedom Technology Solutions Groups is looking for a dynamic System Architect to serve as the Team Lead and (SME) subject matter expert on the VDI team. This team will be responsible for establishing the processes, technology, and providing user support to allow the EITaaS Team to provide an Enterprise VDI solution technology to support the internal EITaaS team, and as required MAJCOMs.  You will work with your manager to understand requirements, priorities, and objectives to ensure work supports the larger capabilities and direction of the overall solution.  You will participate in the full life cycle of activities including deployment and validation efforts to ensure product success and will follow all established processes and standards.  Flexibility and adaptability are ways of life here on the EITaaS team, so if you are comfortable breaking out of the mold and have a passion for learning new technologies and willing to apply your experience to build and support a critical VDI solution for DAF, then this position may be exactly what you are looking for.

More About the Role:

• Responsible for implementing and maintaining Azure Virtual Desktop (AVD) VDI capabilities, providing end users have maximum functionality while maintaining application security.
• Continuous reviewing of VDI infrastructure to maintain latest software and security patching.
• Support continuous monitoring efforts to proactively resolve environmental issues.
• Support and maintain documentation for the EITaaS VDI Azure Virtual Desktop environment, such as process and design documentation.
• Assist less experienced colleagues in resolving end user issues with the AVD services.
• Support Windows Zero Touch Implementation (ZTI) processes for AVD solutions.
• Support the management and maintenance of Azure AVD resources and OS images; deploy monthly OS and application patches to existing AVD VMs.
• Help troubleshoot AVD issues/problems and provide remediation steps for resolution.
• Support the creation, execution and troubleshooting of PowerShell scripts and other deployment capabilities to automate Azure Virtual Desktop (AVD) functionality and operations.
• Support the strategy and plans to implement Windows Zero Touch Implementation (ZTI) for AVD solutions.
• Support the creation of Host Pools for Azure AVD images, manage and maintain AVD Images; apply patches to the monthly images, and roll out host pool updates with monthly images.
• Work with your Manager to help support identification, reporting, tracking and mitigation of risks/issues discovered.

Qualifications:

Required: 

• Ability to obtain/maintain a security clearance
• 10+ Years of relevant experience (Bachelor’s Degree in applicable field may be substituted for 5 years of experience).
• Current certification for Security+ or any of CISSP, CCNA, or CCNP
• Experience building Windows client systems. Experience with automated build processes preferred but not required.
• Experience with Azure resources and deployments.
• Ability to create and execute documented detailed technical processes.
• Strong Windows Operating System problem-solving and analytical skills.
• Strong communication and interpersonal skills to collaborate effectively with cross-functional teams and clients.
• Experience with Windows virtualization capabilities: Azure Virtual Desktop or VMware Horizon VDI preferred; Microsoft Hyper-V, VMware EXSI, or Microsoft RDS acceptable.

Desired: 

• Experience with Windows Zero Touch Installation (ZTI) processes.
• Experience with STIG Windows security controls and NIST 800-53 or other regulatory requirements.
• Experience creating, executing and troubleshooting complex PowerShell scripts.
• Experience with managing Active Directory domain user and computer objects.
• Experience with Microsoft Configuration Manager.
• One of the following certifications: Azure DevOps Engineering Expert, Azure Solutions Architect Expert, Azure Administrator Associate, Azure Security Engineer Associate
• Experience integrating, securing, and understanding the following Microsoft platform services: Active Directory Certificate Services (ADCS), Active Directory Federated Services (ADFS), Windows AD-integrated PKI, Single Sign On (SSO) implementation
• Experience with:
  • Endpoint policy controls via AD Group Policy Object and Intune
  • Terraform deployments
  • Windows Smartcard authentication