Virtual Desktop Infrastructure Engineer

The Virtual Desktop Infrastructure (VDI) Engineer requires familiarity with existing and emerging virtual desktop technologies. The VDI Engineer will engineer solutions for baseline VDI builds, to ensure operating system upgrades are incorporated at least six months before the operating system reaches end of life.

• Infrastructure Administration: Deploy, configure, patch, and maintain the 10ZiG Manager server instance hosted inside the AWS Virtual Private Cloud (VPC).
• Endpoint Profile Management: Develop, push, and test operating system configurations (PeakOS, RepurpOS, NOS) to physical thin and zero client hardware devices.
• Lifecycle & Firmware Updates: Administer automated security patches, manage SSL/TLS certificates for secure client-to-manager communication, and oversee device enrollment.
• Hardware Conversion: Build configurations to repurpose legacy desktop hardware into secure, streamlined thin-client endpoints.

   

   

Pillar 2: VDI Platform Engineering & Testing

• Azure Virtual Desktops (AVD): Build and maintain gold images, manage multi-session host pools, configure FSLogix profile containers, and implement cost-saving auto-scaling rules.
• AWS WorkSpaces: Package and deploy applications, integrate Active Directory/AWS Directory Services, administer WorkSpaces pools, and configure streaming protocols (WSP/PCoIP).
• Horizon Virtual Desktops: Provision and optimize instant clones, manage virtualization storage layers, configure Horizon Connection Servers, and orchestrate hybrid extensions.
• Testing & User Feedback Loops: Establish pilot groups, gather performance metrics (latency, logon times, peripheral compatibility), and refine virtual desktop templates based on structured user feedback.

Pillar 3: Security Compliance & Systems Hardening

• ISSO Collaboration: Serve as the direct technical points of contact for Information System Security Officers (ISSOs). Maintain compliance packages and continuous monitoring workflows.
• STIG Implementation: Apply Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) across all virtual desktop operating system templates, active directory policies, 10ZiG firmware, and supporting cloud resources.
• Certificate to Operate (CTO) Support: Author, test, and gather supporting technical evidence required to achieve and maintain Certificates to Operate (CTO) and Authorities to Operate (ATO).

Pillar 4: Architecture, Documentation & Advisory

• CONOPS Development: Draft and update Concept of Operations (CONOPS) documents outlining system boundaries, scaling mechanics, failover parameters, and disaster recovery processes.
• Standard Operating Procedures (SOPs): Create, update, and publish operational guides for tier-1 and tier-2 help desk personnel (e.g., desktop provisioning, profile resets, hardware replacements).
• Technical Whitepapers: Author architectural evaluation documents comparing cost, performance, and capabilities of the various VDI platforms.
• Technical Recommendations: Provide strategic input regarding cloud consumption optimization, hardware lifecycle planning, and Zero Trust security architectures.

OPERATING HOURS AND EXPECTATIONS: This is a Full Time position, with standard operating hours Monday - Friday.

TRAVEL: Position does not require travel.

CLEARANCE:

• Active Top Secret / SCI.  ***TS/SCI required upon application for initial consideration.   This position is not open for any clearance upgrades, reactivation, or sponsorship.***

EDUCATION:

• Master's degree in this functional area, or;
• Bachelor's degree with three (3)+ years of experience, or;
• Eight (8) or more years of experience directly involving engineering.

CERTIFICATION(S): 

• Possess active IAT Level II (Security+, or equivalent) Certification.
• Amazon Web Services certified Solutions Architect or SysOps Administrator (If one does not hold a AWS Solutions Architect or SysOps Administrator certification at the time of application, then it will be required within 180 days of on-boarding).
•  

 REQUIRED SKILLS AND EXPERIENCE:

• Three (3)+ years of relevant technical experience including experience maintaining and operating commercial cloud services such as those provided as part of C2E (Amazon Web Services, Microsoft Azure, Google Cloud).
• Proficient in creating, maintaining and enhancing programming/scripting languages including Microsoft Powershell, Python, Bash, and/or Perl. Experience with automation tools like Terraform, OpenTofu, Ansible, puppet, and/or chef. Experience using a coding repository (e.g., GitHub, GitLab, etc.)

DESIRED EXPERIENCE/TECHNICAL PREREQUISTES:

• VDI Administration: Experience administering at least one of the primary VDI platforms (AVD, AWS WorkSpaces, Horizon).
• Endpoint Management: Experience configuring and operating 10ZiG Manager or equivalent thin-client deployment consoles.
• Scripting & Automation: Proficiency with scripting languages (PowerShell, Bash, or Python) to automate template deployment, cloud resource scheduling, and user profile management.
• Infrastructure Security: Documented experience executing STIG checklists and supporting CTO/ATO documentation packages in highly regulated enterprise environments.
• Writing Capabilities: Strong technical communication skills, with experience drafting standard operating procedures (SOPs), technical design blueprints, and system whitepapers.

DESIRED CERTIFICATIONS:

• Microsoft Certified: Azure Virtual Desktop Specialty
• AWS Certified Solutions Architect or SysOps Administrator
• VMware Certified Professional - Desktop and Mobility (VCP-DTM) or Omnissa Horizon credentials

WHAT WE OFFER:

At CIS Secure and its associated companies, Intrepid Solutions and Services and Darkblade Systems, we believe in promoting fair and transparent pay practices. We are committed to disclosing the compensation range for transparency and to set clear expectations for all applicants for this posting. This range represents the anticipated low and high end of the base salary for the advertised job, promotion, or transfer opportunity. Please note that the pay range provided is a good faith estimate for the position at the time of posting. The actual salary offered may vary based on various factors including but not limited to relevant experience, knowledge, skills and abilities, education, geographic location, as well as internal equity, and alignment to market data.

Job Type: Full-time (onsite)

Pay Range: Based on Experience

Benefits:

• 401(k) with company matching
• Dental insurance
• Medical insurance
• Health Savings Account option
• Flexible Spending
• Vision insurance
• Life and Disability Insurance
• Ancillary offerings (Hospital Indemnity, Accident, Critical Illness, Pet Insurance)
• Paid Time Off
• Holiday pay

Intrepid Solutions, a CIS Secure company, is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.