Azure virtual Desktop SME

Senior VDI (AVD) - L3 SME

Work Mode: Work from Office
Working Hours: 12:00 PM-9:00 PM IST, Monday to Friday
Employment Type: Full-time

Required Technical Skills:

• Azure Virtual Desktop (AVD) - Host pools, session-host management, auto-scaling, Conditional Access, and enterprise-scale operations.
  
• Azure DevOps and CI/CD - Automated golden-image pipelines, Git, testing, release governance, and rollback procedures.
  
• FSLogix - Profile containers, ODFC, cloud cache, storage design, performance optimisation, and troubleshooting.
  
• Golden-Image Management - Image creation and lifecycle management using Packer, Azure Image Builder, or equivalent tools.
  
• PowerShell and Azure Automation - Scripting, Azure Functions, monitoring, health remediation, scaling, and operational automation.
  

_______________________________________________________________________________________________________________________________________________________________________

Role Overview

We are looking for a Senior VDI / Cloud EUC Engineer to serve as the L3 Subject Matter Expert and technical owner of the VDI tower for Workplace Services.

This is a hands-on engineering role covering Azure Virtual Desktop, AWS WorkSpaces, FSLogix, golden-image management, automation, and cloud EUC operations. The successful candidate will own complex incident resolution, image lifecycle automation, capacity planning, technical documentation, and L2 engineer enablement.

The role reports to the EUC Architect and Technical Manager.

Key Responsibilities

Azure Virtual Desktop Engineering

• Administer and engineer pooled and personal AVD host pools across Normal Secure and Restricted Secure environments.
  
• Provision and manage session hosts, including VM sizing, operating-system configuration, security baselines, and agent deployment.
  
• Configure AVD workspaces, application groups, user assignments, and access-control policies.
  
• Design and maintain auto-scaling plans based on user demand, business schedules, cost targets, and SLA commitments.
  
• Monitor session-host health, concurrency, infrastructure utilisation, connection performance, and login duration using Azure Monitor and Log Analytics.
  
• Diagnose and resolve complex platform, session, connectivity, authentication, application, and performance issues.
  
• Support Microsoft Entra ID, Conditional Access, Azure Functions, and other automation dependencies.
  
• Coordinate approved platform changes and service improvements through 's change-management process.
  

Azure DevOps and Image Lifecycle

• Own the Azure DevOps CI/CD pipeline for building, testing, piloting, promoting, and rolling back AVD golden images.
  
• Define automated testing gates, approval workflows, pilot deployments, production releases, and rollback procedures.
  
• Maintain image-build scripts, pipeline definitions, configuration code, and Infrastructure-as-Code templates in Git.
  
• Integrate Packer, Azure Image Builder, or equivalent tools to automate operating-system updates, application installation, security agents, and baseline configurations.
  
• Implement automated configuration, compatibility, and security-compliance checks.
  
• Maintain end-to-end traceability from requirements and code changes through approvals, testing, and production releases.
  
• Produce release documentation, rollback procedures, and post-release monitoring runbooks.
  

FSLogix Profile Management

• Architect and administer FSLogix profile containers, storage accounts, SMB shares, permissions, VHD/VHDX sizing, and environment isolation.
  
• Configure profile and Office containers, cloud cache, exclusion lists, redirection rules, and ODFC settings.
  
• Monitor profile health, storage utilisation, mounting performance, login duration, and related event logs.
  
• Resolve profile corruption, container locks, mounting failures, storage-access errors, and login-performance issues.
  
• Manage capacity, retention, backup, disaster recovery, and profile-migration procedures.
  
• Follow separate approved procedures for Normal Secure and Restricted Secure profile resets. Written approval is mandatory before any Restricted Secure profile action.
  

Golden-Image Management

• Own the complete image lifecycle across all AVD host-pool types.
  
• Integrate operating-system patches, enterprise applications, CrowdStrike, Palo Alto VPN, monitoring tools, drivers, and security baselines.
  
• Validate compatibility with business applications, FSLogix, security controls, and infrastructure components.
  
• Conduct testing in dedicated pools, coordinate user pilots, and obtain technical and business approvals before production deployment.
  
• Maintain image-version standards, release histories, configuration records, and rollback procedures.
  
• Monitor post-release performance and address regressions or compatibility issues.
  
• Coordinate image refreshes with patching, application releases, security requirements, and vendor-support timelines.
  

AWS WorkSpaces - Secure Design Environment

• Administer AWS WorkSpaces used for 's Secure Design Environment.
  
• Manage provisioning, bundles, directories, user assignments, security controls, pixel-only access, and lifecycle states.
  
• Monitor availability, performance, utilisation, connectivity, and service health.
  
• Resolve provisioning, authentication, connectivity, profile, and application issues.
  
• Perform approved rebuild, restore, restart, migration, retirement, and de-provisioning activities.
  
• Coordinate identity, directory, network, security, monitoring, and logging dependencies.
  
• Maintain configuration records, access procedures, support runbooks, and intellectual-property protection controls.
  
• Treat any attempted data movement from the Secure Design Environment as a potential security incident and escalate it immediately.
  

Capacity, Performance, and Cost Optimisation

• Analyse session concurrency, density, CPU, memory, storage, and network utilisation across AVD host pools.
  
• Identify capacity constraints, performance degradation, and usage patterns.
  
• Forecast compute, storage, licensing, and session-host requirements.
  
• Recommend approved scaling, rebalancing, consolidation, and rightsizing actions.
  
• Prepare capacity and utilisation reports covering risks, trends, forecasts, and recommended actions.
  
• Review AVD and AWS WorkSpaces costs and identify idle or over-provisioned resources.
  

Automation and Monitoring

• Develop PowerShell and Azure automation for health checks, auto-restart, FSLogix monitoring, and capacity reporting.
  
• Create Azure Monitor alerts for host health, capacity thresholds, login performance, and FSLogix errors.
  
• Write KQL queries for diagnostics, trend analysis, and operational dashboards.
  
• Develop Azure Function-based automation for scaling, host draining, restarts, and health remediation.
  
• Apply scripting standards covering error handling, structured logging, peer review, source control, and version management.
  
• Identify recurring VDI ticket patterns and target at least 70% automation-opportunity conversion.
  

L3 Support and Knowledge Management

• Resolve complex, cross-functional VDI incidents involving Intune, Entra ID, SCCM, security services, platform failures, or image regressions.
  
• Lead end-to-end VDI login-failure diagnosis across the device, identity, Conditional Access, session host, FSLogix, application, and network/VPN layers.
  
• Develop and maintain L3 SOPs and runbooks.
  
• Coach L2 engineers through structured knowledge transfer, procedure reviews, and competency validation.
  
• Maintain configuration records, architecture notes, and operational procedures in s SharePoint repository.
  
• Present VDI architecture and operational knowledge to the VDI Product Owner, Daniel Paraschiv, for validation.
  

Mandatory Technical Skills

• Expert knowledge of Azure Virtual Desktop, including pooled and personal host pools, session-host management, scaling, Conditional Access, and Normal Secure/Restricted Secure environments.
  
• Expert knowledge of Azure DevOps, CI/CD pipeline design, Git, branching, automated testing, and release governance.
  
• Expert knowledge of FSLogix profile containers, ODFC, cloud cache, exclusions, storage design, and corruption diagnosis.
  
• Expert knowledge of golden-image management using Packer, Azure Image Builder, or equivalent tools.
  
• Expert PowerShell and Azure CLI scripting skills.
  
• Advanced knowledge of Azure Monitor, Log Analytics, KQL, alerting, workbooks, and AVD diagnostics.
  
• Advanced knowledge of Microsoft Entra ID, MFA, Conditional Access, Named Locations, and group-based access.
  
• Advanced knowledge of Azure networking, including VNet peering, NSGs, Private Endpoints, DNS, and AVD network requirements.
  
• Advanced knowledge of Azure Functions and Logic Apps.
  
• Proficiency in AWS WorkSpaces administration and lifecycle management.
  
• Proficiency in ARM, Bicep, or Terraform.
  
• Expert knowledge of Windows 11 multi-session, operating-system hardening, WSUS, and driver management.
  
• Working knowledge of CrowdStrike or equivalent EDR tools.
  
• Proficiency in ServiceNow incident, change, and CMDB processes.
  

Qualifications and Experience

• 15-18+ years of experience in enterprise VDI or cloud desktop engineering.
  
• At least four years of hands-on AVD experience supporting production environments at a scale of 1,000+ session hosts.
  
• At least three years of production FSLogix management at enterprise scale.
  
• Proven experience building Azure DevOps pipelines for image or infrastructure lifecycle management.
  
• Previous hands-on AWS WorkSpaces experience is preferred; the ability to develop expertise rapidly is required.
  
• Experience delivering VDI services under SLAs within an enterprise managed-services model.
  
• Bachelor's degree in Computer Science, Information Technology, or an equivalent technical field.
  
• Strong written and verbal English, including the ability to create technical SOPs and present findings to stakeholders.
  
• Experience supporting air-gapped or restricted-security VDI environments is a strong advantage.
  

Preferred Certifications

• Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140)
  
• Microsoft Certified: Azure Administrator Associate (AZ-104)
  
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305)