Azure Virtual Desktop (AVD) & Endpoint Management Engineer

Job Responsibilities

• Administer and maintain Azure Virtual Desktop and Nerdio Manager for Enterprise, including platform health, automation jobs, autoscaling, roles, scopes, delegated permissions, host pools, session hosts, and workspaces.
• Troubleshoot and resolve AVD/Nerdio issues involving session host provisioning, connectivity, FSLogix profiles, performance, failed automation jobs, configuration issues, and access or policy assignments.
• Maintain, patch, test, version, and deploy centralized golden/master desktop images, coordinating operating system, security, and application updates across AVD and physical workstation environments.
• Review and optimize Microsoft Intune configuration profiles, compliance policies, security baselines, device groups, assignments, and policy architecture to reduce conflicts, duplication, and configuration drift.
• Assess and improve Windows Autopilot provisioning, enrollment status pages, deployment profiles, device assignments, and zero-touch workstation deployment processes.
• Support Microsoft Entra ID security and identity capabilities, including Conditional Access, RBAC, Privileged Identity Management (PIM), Just-in-Time administration, Windows LAPS, and least-privilege access practices.
• Integrate and support endpoint lifecycle operations involving Tanium and CrowdStrike Falcon, including endpoint visibility, patching, software deployment, inventory, compliance reporting, and endpoint protection.
• Monitor platform capacity, utilization, image compliance, service health, incidents, and operational trends; develop recurring reports and participate in service review meetings.
• Support onboarding of new agencies or business units into the centrally governed AVD/Nerdio environment, including subscription readiness, connectivity, configuration standards, host pool alignment, and operational readiness.
• Develop and maintain Standard Operating Procedures (SOPs), Operations & Maintenance documentation, administrative runbooks, onboarding procedures, governance standards, and technical support documentation.
• Identify and implement appropriate automation and process improvements that improve scalability, platform consistency, administrative efficiency, monitoring, reporting, and desktop lifecycle management.
• Collaborate with customer technical teams, project stakeholders, and agency administrators; participate in technical reviews, change-management activities, maintenance windows, knowledge-transfer sessions, and incident resolution.

Job Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Systems, Engineering, or a related technical discipline preferred.
• Equivalent combination of relevant technical education, professional certifications, and significant hands-on enterprise engineering experience may be considered in lieu of a degree.

We’re actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member, you'll enjoy:

• Competitive salary, paid twice per month
• Best in class medical coverage
• 100% of medical premiums covered by True Zero
• Company wide new business incentive programs
• Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)
• 3 weeks of PTO starting + 11 Paid Holidays Annually
• 401k Program with 100% company match on the first 4%
• Monthly reimbursement of Cell Phone and Home Internet costs
• Paternity/Maternity Leave
• Investment in training and certifications to broaden and deepen your technical skills