D2 Consulting
Azure Virtual Desktop / EUC Engineer
D2 Consulting, Chantilly, Virginia, United States, 22021
Position Summary
The Azure Desktop Engineer will play a critical role in the modernization of the enterprise end‑user computing (EUC) environment as the organization transitions from traditional on‑premises desktop systems to a fully cloud‑managed Azure ecosystem. This engineer will design, implement, and support Azure Virtual Desktop (AVD), Intune, and related Microsoft‑native technologies to deliver secure, scalable, and high‑performing desktop experiences to a global workforce of more than 10,000 users.
The ideal candidate has deep experience with Windows engineering, cloud architecture, modern device management, and migration strategies at scale.
Key Responsibilities Azure Virtual Desktop (AVD) Architecture & Operations
Design, deploy, and operationalize Azure Virtual Desktop for large‑scale enterprise use.
Build, maintain, and optimize AVD golden images using Azure Image Builder or equivalent native tools.
Configure host pools, application groups, FSLogix profile containers, autoscaling, and monitoring solutions.
Implement multi‑region AVD deployments aligned to business continuity and disaster recovery needs.
Optimize performance, availability, and cost across a global AVD footprint.
Modern Device Management & Endpoint Engineering
Implement enterprise‑wide Modern Management strategies using Microsoft Intune and Azure AD.
Develop and maintain Windows Autopilot provisioning processes for 10k+ devices.
Create and manage Intune configuration profiles, compliance policies, and security baselines.
Migrate GPO‑based configurations to Intune/MDM frameworks while ensuring operational continuity.
Lead packaging, testing, and deployment of Win32 and UWP applications through Intune.
Azure & Identity Integration
Integrate desktop infrastructure with Azure Active Directory, Conditional Access, MFA, Identity Protection, and RBAC.
Collaborate with security teams to ensure Zero Trust alignment for all endpoint solutions.
Implement device identity models including Azure AD Join and Hybrid Join as needed.
Migration & Modernization Initiatives
Lead the migration from on‑premises SCCM/ConfigMgr to cloud‑native Intune management.
Develop migration strategies for user profiles (FSLogix/OneDrive Known Folder Move), applications, and security policies.
Partner with networking, infrastructure, and security teams to deliver a seamless cloud transition.
Produce detailed architectural diagrams, runbooks, and operational documentation.
Automate image creation, application packaging, and deployment workflows using PowerShell, Graph API, and Azure Automation.
Implement monitoring, alerting, and logging solutions with Azure Monitor, Log Analytics, and native dashboards.
Drive continuous performance improvements and cost optimization across all cloud‑managed EUC services.
End‑User Experience & Support
Evaluate and enhance the overall desktop experience, including login performance, application responsiveness, and security posture.
Provide Tier 3/4 escalation support for AVD and Intune environments.
Participate in enterprise change management and contribute to technical governance boards.
Required Qualifications
8+ years of experience in Windows Desktop Engineering or End User Computing (EUC).
5-6+ years of hands‑on experience with Azure, including AVD, Azure AD, and relevant security components.
Expert knowledge of Windows 10/11, image creation, and enterprise configuration management.
Strong PowerShell scripting experience (automation, reporting, packaging workflows).
Experience managing large enterprises (5,000+ devices; ideally 10,000+).
Deep understanding of cloud networking (VNETs, VPN, routing, DNS, ExpressRoute).
Hands‑on experience with FSLogix, profile management, and cloud storage integrations.
Proficiency with Microsoft Endpoint Manager (Intune) and Autopilot.
Strong familiarity with Zero Trust concepts and enterprise security hardening.
Preferred Qualifications
Microsoft certifications such as:
MD‑102: Modern Desktop Administrator
AZ‑305: Azure Solutions Architect
Experience with hybrid SCCM/Intune co‑management transitions.
Understanding of Infrastructure‑as‑Code (Bicep, ARM templates, Terraform optional).
Experience working in regulated or high‑security environments.
Additional Information
All your information will be kept confidential according to proper guidelines.
Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically $160k‑180k. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above‑stated range.
Highlights of our benefits include Health/Dental/Vision, 401(k) match, Accrued PTO, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and more!
Voluntary Self‑Identification For government reporting purposes, we ask candidates to respond to the below self‑identification survey. Completion of the form is voluntary and does not affect your application or employment. Please identify your veteran status if you choose to do so.
As set forth in D2 Consulting’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.
If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.
A "disabled veteran" is a veteran of the U.S. military, grounded, naval or air service who is entitled to compensation (or would be entitled if not for retired pay).
A "recently separated veteran" is any veteran during the three‑year period beginning on the date of discharge or release from active duty.
An "active duty wartime or campaign badge veteran" is a veteran who served on active duty during a war, or in a campaign or expedition for which a campaign badge has been authorized.
An "armed forces service medal veteran" is a veteran who participated in a U.S. military operation that earned an armed forces service medal.
Voluntary Self‑Identification of Disability Form CC‑305
Page 1 of 1
OMB Control Number 1250‑0005
Expires 04/30/2026
Why are you being asked to complete this form? We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress toward this goal.
How do you know if you have a disability? A disability is a condition that substantially limits one or more of your major life activities. If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:
Alcohol or other substance use disorder (not currently using drugs illegally)
Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
Blind or low vision
Cancer (past or present)
Cardiovascular or heart disease
Celiac disease
Cerebral palsy
Deaf or serious difficulty hearing
Diabetes
Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
Epilepsy or other seizure disorder
Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
Intellectual or developmental disability
Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
Missing limbs or partially missing limbs
Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
Neurodivergence, for example, attention‑deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
Partial or complete paralysis (any cause)
Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
Short stature (dwarfism)
Traumatic brain injury
PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.
#J-18808-Ljbffr
The ideal candidate has deep experience with Windows engineering, cloud architecture, modern device management, and migration strategies at scale.
Key Responsibilities Azure Virtual Desktop (AVD) Architecture & Operations
Design, deploy, and operationalize Azure Virtual Desktop for large‑scale enterprise use.
Build, maintain, and optimize AVD golden images using Azure Image Builder or equivalent native tools.
Configure host pools, application groups, FSLogix profile containers, autoscaling, and monitoring solutions.
Implement multi‑region AVD deployments aligned to business continuity and disaster recovery needs.
Optimize performance, availability, and cost across a global AVD footprint.
Modern Device Management & Endpoint Engineering
Implement enterprise‑wide Modern Management strategies using Microsoft Intune and Azure AD.
Develop and maintain Windows Autopilot provisioning processes for 10k+ devices.
Create and manage Intune configuration profiles, compliance policies, and security baselines.
Migrate GPO‑based configurations to Intune/MDM frameworks while ensuring operational continuity.
Lead packaging, testing, and deployment of Win32 and UWP applications through Intune.
Azure & Identity Integration
Integrate desktop infrastructure with Azure Active Directory, Conditional Access, MFA, Identity Protection, and RBAC.
Collaborate with security teams to ensure Zero Trust alignment for all endpoint solutions.
Implement device identity models including Azure AD Join and Hybrid Join as needed.
Migration & Modernization Initiatives
Lead the migration from on‑premises SCCM/ConfigMgr to cloud‑native Intune management.
Develop migration strategies for user profiles (FSLogix/OneDrive Known Folder Move), applications, and security policies.
Partner with networking, infrastructure, and security teams to deliver a seamless cloud transition.
Produce detailed architectural diagrams, runbooks, and operational documentation.
Automate image creation, application packaging, and deployment workflows using PowerShell, Graph API, and Azure Automation.
Implement monitoring, alerting, and logging solutions with Azure Monitor, Log Analytics, and native dashboards.
Drive continuous performance improvements and cost optimization across all cloud‑managed EUC services.
End‑User Experience & Support
Evaluate and enhance the overall desktop experience, including login performance, application responsiveness, and security posture.
Provide Tier 3/4 escalation support for AVD and Intune environments.
Participate in enterprise change management and contribute to technical governance boards.
Required Qualifications
8+ years of experience in Windows Desktop Engineering or End User Computing (EUC).
5-6+ years of hands‑on experience with Azure, including AVD, Azure AD, and relevant security components.
Expert knowledge of Windows 10/11, image creation, and enterprise configuration management.
Strong PowerShell scripting experience (automation, reporting, packaging workflows).
Experience managing large enterprises (5,000+ devices; ideally 10,000+).
Deep understanding of cloud networking (VNETs, VPN, routing, DNS, ExpressRoute).
Hands‑on experience with FSLogix, profile management, and cloud storage integrations.
Proficiency with Microsoft Endpoint Manager (Intune) and Autopilot.
Strong familiarity with Zero Trust concepts and enterprise security hardening.
Preferred Qualifications
Microsoft certifications such as:
MD‑102: Modern Desktop Administrator
AZ‑305: Azure Solutions Architect
Experience with hybrid SCCM/Intune co‑management transitions.
Understanding of Infrastructure‑as‑Code (Bicep, ARM templates, Terraform optional).
Experience working in regulated or high‑security environments.
Additional Information
All your information will be kept confidential according to proper guidelines.
Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically $160k‑180k. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above‑stated range.
Highlights of our benefits include Health/Dental/Vision, 401(k) match, Accrued PTO, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and more!
Voluntary Self‑Identification For government reporting purposes, we ask candidates to respond to the below self‑identification survey. Completion of the form is voluntary and does not affect your application or employment. Please identify your veteran status if you choose to do so.
As set forth in D2 Consulting’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.
If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.
A "disabled veteran" is a veteran of the U.S. military, grounded, naval or air service who is entitled to compensation (or would be entitled if not for retired pay).
A "recently separated veteran" is any veteran during the three‑year period beginning on the date of discharge or release from active duty.
An "active duty wartime or campaign badge veteran" is a veteran who served on active duty during a war, or in a campaign or expedition for which a campaign badge has been authorized.
An "armed forces service medal veteran" is a veteran who participated in a U.S. military operation that earned an armed forces service medal.
Voluntary Self‑Identification of Disability Form CC‑305
Page 1 of 1
OMB Control Number 1250‑0005
Expires 04/30/2026
Why are you being asked to complete this form? We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress toward this goal.
How do you know if you have a disability? A disability is a condition that substantially limits one or more of your major life activities. If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:
Alcohol or other substance use disorder (not currently using drugs illegally)
Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
Blind or low vision
Cancer (past or present)
Cardiovascular or heart disease
Celiac disease
Cerebral palsy
Deaf or serious difficulty hearing
Diabetes
Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
Epilepsy or other seizure disorder
Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
Intellectual or developmental disability
Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
Missing limbs or partially missing limbs
Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
Neurodivergence, for example, attention‑deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
Partial or complete paralysis (any cause)
Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
Short stature (dwarfism)
Traumatic brain injury
PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.
#J-18808-Ljbffr