SilverEdge
AVD Endpoint/Thin Client Engineer (Engineering & O&M)
SilverEdge, Reston, Virginia, United States, 22090
Overview
SilverEdge is a premier provider of innovative cyber, software, and intelligence solutions, addressing mission-critical challenges for the Department of Defense (DoD), Intelligence Community (IC), and beyond. We are dedicated to delivering impactful results to meet mission goals through cutting-edge technology and expertise. We are seeking an
AVD Endpoint/Thin Clint Engineer (Engineering & O&M)
to join our dynamic team. This individual will play a pivotal role in developing innovative and effective solutions for our DoD customers within the IC sector.
Own the engineering, hardening, deployment, and day-2 operations of AVD endpoints and thin clients that connect users to secure AVD host pools. You'll build gold images/profiles, automate provisioning at scale, manage firmware/OS lifecycles, enforce Zero Trust policies, and keep the fleet healthy with proactive monitoring and runbooks.
KEY RESPONSIBILITIES:
Engineering & Configuration Design and maintain standard endpoint/thin-client builds (Windows IoT Enterprise LTSC, IGEL OS, HP ThinPro, Dell ThinOS, Stratodesk NoTouch) with the AVD client, SSO, and required plugins (e.g., Teams optimization, webcam/audio, smart-card/CAC). Create and version device configurations and profiles in
Intune
(device compliance, configuration, app deployment, ESP/Autopilot) and/or vendor consoles (IGEL UMS, HP Device Manager, Dell Wyse Management Suite, Stratodesk NoTouch Center, 10ZiG Manager). Implement AVD client policies: RDP Shortpath (UDP), device/USB redirection rules, multi-monitor/resolution, codec preferences, QoS/DSCP tagging. Integrate endpoint security:
Microsoft Defender for Endpoint
onboarding, BitLocker (where applicable), WDAC/App Control, Local Admin/LAPS policies, certificate enrollment (SCEP/PKCS) for Wi-Fi/VPN/EAP-TLS. Configure printing options (Universal Print and/or session printing) and peripherals (headsets, scanners) with approved redirection. Operations & Maintenance (O&M)
Run the daily health routine: monitor AVD client versions, endpoint check-ins, compliance drift, Teams media optimization status, and call quality signals. Patch OS/firmware/drivers at scale; manage phased rings, rollback, and change windows. Track vendor advisories and plan upgrades. Troubleshoot login and session issues from the endpoint side (auth loops, conditional access, FSLogix profile attach symptoms surfaced at the client, UDP reachability). Maintain inventory and CMDB accuracy (tags, ownership, location, warranty/lease, lifecycle stage). Respond to incidents and service requests; execute runbooks; contribute to problem management and post-incident reviews. Monitoring, Performance & Reporting
Build dashboards and alerts using
Intune reports ,
Azure Monitor/Log Analytics/Workbooks , and vendor consoles for: Device compliance & check-in rates AVD client version coverage Session connection success, RTT/latency/jitter (from client perspective) Teams Optimization health and CQD insights Required Qualifications
3-5+ years
in End-User Computing/VDI with a focus on
Azure Virtual Desktop endpoints or thin clients . Hands-on with
Intune/Endpoint Manager ,
Entra ID , Autopilot, device compliance/config profiles, Proactive Remediations. Experience with
thin-client platforms : one or more of
IGEL UMS ,
HP Device Manager/ThinPro ,
Dell WMS/ThinOS ,
Stratodesk NoTouch ,
10ZiG Manager . Strong
PowerShell
(Graph/Intune/WMI/CIM) and practical
KQL
for troubleshooting and reporting. Solid understanding of
RDP
(Shortpath, UDP), media optimization (Teams), device/USB redirection, and endpoint networking (DNS, proxy, firewall, QoS). Endpoint security:
Defender for Endpoint
onboarding, BitLocker (where applicable), WDAC/AppLocker, certificate enrollment (SCEP/PKCS), Conditional Access. Proven change/incident/problem management in an ITIL environment; excellent documentation discipline. Desired Qualifications
Familiarity with
Nerdio Manager for Enterprise
(for alignment with AVD operations),
FSLogix
concepts (from an endpoint perspective),
Universal Print , smart-card/CAC pass-through. Experience integrating endpoint/thin-client telemetry with
Elastic
or
Microsoft Sentinel . IaC exposure (Bicep/Terraform) beneficial for understanding AVD infra dependencies. Government/regulated environment experience; STIG/CIS hardening familiarity.
About SilverEdge
SilverEdge Government Solutions was founded on the belief that nurturing talent and collaborating closely with our customers enables us to think big and deliver the best for our country. Our mission is to bring top technology talent together to solve the world's most challenging problems while protecting the United States and our allies. SilverEdge Government Solutions, LLC is an Equal Opportunity Employer and applicants receive lawful consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.
SilverEdge is a premier provider of innovative cyber, software, and intelligence solutions, addressing mission-critical challenges for the Department of Defense (DoD), Intelligence Community (IC), and beyond. We are dedicated to delivering impactful results to meet mission goals through cutting-edge technology and expertise. We are seeking an
AVD Endpoint/Thin Clint Engineer (Engineering & O&M)
to join our dynamic team. This individual will play a pivotal role in developing innovative and effective solutions for our DoD customers within the IC sector.
Own the engineering, hardening, deployment, and day-2 operations of AVD endpoints and thin clients that connect users to secure AVD host pools. You'll build gold images/profiles, automate provisioning at scale, manage firmware/OS lifecycles, enforce Zero Trust policies, and keep the fleet healthy with proactive monitoring and runbooks.
KEY RESPONSIBILITIES:
Engineering & Configuration Design and maintain standard endpoint/thin-client builds (Windows IoT Enterprise LTSC, IGEL OS, HP ThinPro, Dell ThinOS, Stratodesk NoTouch) with the AVD client, SSO, and required plugins (e.g., Teams optimization, webcam/audio, smart-card/CAC). Create and version device configurations and profiles in
Intune
(device compliance, configuration, app deployment, ESP/Autopilot) and/or vendor consoles (IGEL UMS, HP Device Manager, Dell Wyse Management Suite, Stratodesk NoTouch Center, 10ZiG Manager). Implement AVD client policies: RDP Shortpath (UDP), device/USB redirection rules, multi-monitor/resolution, codec preferences, QoS/DSCP tagging. Integrate endpoint security:
Microsoft Defender for Endpoint
onboarding, BitLocker (where applicable), WDAC/App Control, Local Admin/LAPS policies, certificate enrollment (SCEP/PKCS) for Wi-Fi/VPN/EAP-TLS. Configure printing options (Universal Print and/or session printing) and peripherals (headsets, scanners) with approved redirection. Operations & Maintenance (O&M)
Run the daily health routine: monitor AVD client versions, endpoint check-ins, compliance drift, Teams media optimization status, and call quality signals. Patch OS/firmware/drivers at scale; manage phased rings, rollback, and change windows. Track vendor advisories and plan upgrades. Troubleshoot login and session issues from the endpoint side (auth loops, conditional access, FSLogix profile attach symptoms surfaced at the client, UDP reachability). Maintain inventory and CMDB accuracy (tags, ownership, location, warranty/lease, lifecycle stage). Respond to incidents and service requests; execute runbooks; contribute to problem management and post-incident reviews. Monitoring, Performance & Reporting
Build dashboards and alerts using
Intune reports ,
Azure Monitor/Log Analytics/Workbooks , and vendor consoles for: Device compliance & check-in rates AVD client version coverage Session connection success, RTT/latency/jitter (from client perspective) Teams Optimization health and CQD insights Required Qualifications
3-5+ years
in End-User Computing/VDI with a focus on
Azure Virtual Desktop endpoints or thin clients . Hands-on with
Intune/Endpoint Manager ,
Entra ID , Autopilot, device compliance/config profiles, Proactive Remediations. Experience with
thin-client platforms : one or more of
IGEL UMS ,
HP Device Manager/ThinPro ,
Dell WMS/ThinOS ,
Stratodesk NoTouch ,
10ZiG Manager . Strong
PowerShell
(Graph/Intune/WMI/CIM) and practical
KQL
for troubleshooting and reporting. Solid understanding of
RDP
(Shortpath, UDP), media optimization (Teams), device/USB redirection, and endpoint networking (DNS, proxy, firewall, QoS). Endpoint security:
Defender for Endpoint
onboarding, BitLocker (where applicable), WDAC/AppLocker, certificate enrollment (SCEP/PKCS), Conditional Access. Proven change/incident/problem management in an ITIL environment; excellent documentation discipline. Desired Qualifications
Familiarity with
Nerdio Manager for Enterprise
(for alignment with AVD operations),
FSLogix
concepts (from an endpoint perspective),
Universal Print , smart-card/CAC pass-through. Experience integrating endpoint/thin-client telemetry with
Elastic
or
Microsoft Sentinel . IaC exposure (Bicep/Terraform) beneficial for understanding AVD infra dependencies. Government/regulated environment experience; STIG/CIS hardening familiarity.
About SilverEdge
SilverEdge Government Solutions was founded on the belief that nurturing talent and collaborating closely with our customers enables us to think big and deliver the best for our country. Our mission is to bring top technology talent together to solve the world's most challenging problems while protecting the United States and our allies. SilverEdge Government Solutions, LLC is an Equal Opportunity Employer and applicants receive lawful consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.