Virtual Desktop Infrastructure Engineer

We are seeking a Virtual Desktop Infrastructure (VDI) Engineer, responsible for the design, engineering, implementation, integration, accreditation support, troubleshooting, and sustainment of secure communications solutions supporting Department of Defense (DoD) classified environments. The VDI Engineer serves as a technical subject matter expert for solutions utilizing commercial technologies in accordance with NSA Commercial Solutions for Classified (CSfC) requirements, Capability Packages, and applicable DoD cybersecurity standards.

This position requires extensive experience with secure network architecture, encryption, VPN technologies, firewalls, routing and switching, endpoint security, PKI, certificates, mobile and remote access solutions, and classified network environments. The Engineer works closely with cybersecurity, network engineering, systems engineering, Information System Security Managers/Officers (ISSM/ISSO), and government stakeholders to develop secure, compliant, and operationally effective CSfC solutions.

The CSfC capability is known as Virtual Secure – Remote (ViSR) and supports remote SIPRNet access for up to 2,000 concurrent users initially but could be scalable up to 15,000 concurrent users as the Government continues to onboard users. The successful candidate will lead the Operations and Maintenance activities and provide engineering support to expand the capacity of the Fort Bragg ViSR solution set. The candidate will also provide support to implement the solution architecture in other NETCOM areas of operation. 

KEY RESPONSIBILITIES:

• Design, engineer, implement, configure, and sustain NSA CSfC solutions supporting classified DoD communications and information systems.
• Develop CSfC architectures in accordance with applicable NSA CSfC Capability Packages (CPs) and approved Components List requirements.
• Engineer secure solutions using two independent layers of commercial encryption to protect classified information across untrusted networks.
• Design and support CSfC solutions for Mobile Access, Campus WLAN, Multi-Site Connectivity, Data-at-Rest, and other applicable use cases.
• Evaluate commercial hardware and software products for compliance with CSfC requirements and integration into existing DoD network architectures.
• Configure and troubleshoot VPN gateways, IPsec tunnels, firewalls, routers, switches, wireless infrastructure, endpoint devices, and associated security components.
• Support CSfC solution registration, authorization, assessment, documentation, and maintenance activities.
• Maintain configuration compliance with approved CSfC architectures, Capability Packages, and established security baselines.
• Perform technical analysis of new or revised NSA CSfC requirements and determine their impact on deployed solutions.
• Support implementation of required software, firmware, certificates, cryptographic algorithms, and security configuration updates.
• Design, install, upgrade, and configure VMware Horizon Connection Servers, Unified Access Gateways (UAGs), and Horizon Agents.
• Provision and manage automated desktop pools using Instant Clones, managing the lifecycle of parent VMs, replica VMs, and golden images.
• Maintain the underlying virtual infrastructure by administering VMware vCenter Server, configuring ESXi hosts, and optimizing vSAN or external block/file storage arrays.
• Configure and troubleshoot VMware Dynamic Environment Manager (DEM) for user profiles and policies, and use Omnissa App Volumes to dynamically deliver application packages.
• Optimize the Blast Extreme and PCoIP display protocols to ensure high-performance audio/video redirection, GPU acceleration, and low-latency user sessions over WAN/LAN.
• Write and maintain PowerShell and PowerCLI scripts to automate pool provisioning, connection monitoring, and repetitive vSphere maintenance tasks.
• Perform vulnerability remediation, patching, configuration management, and lifecycle management for CSfC components.
• Perform root-cause analysis of CSfC service interruptions and develop corrective actions to restore mission capability.
• Develop and execute implementation plans, test plans, rollback procedures, and validation procedures for system changes.
• Participate in technical reviews, engineering boards, change-control activities, and configuration-management processes.
• Provide Tier III engineering support for VDI-related incidents and escalated technical issues.
• Coordinate with vendors, government engineering organizations, cybersecurity personnel, and other technical stakeholders to resolve interoperability and security issues.

• Maintain accurate as-built documentation and configuration records for deployed CSfC solutions.

• Perform special projects and other duties as assigned.

EDUCATION & EXPERIENCE:

• AA/AS + 7 years of IT experience
• BA/BS + 5 years of IT experience
• 3 years Virtual Desktop Infrastructure (VDI) experience
• Computing Environment Certification (e.g., MCSA, Linux, etc)
• Qualifying Professional Certifications for DoD Cyber Workforce 8140 Baseline IAT Level II
• Experience working DoD IT environments
• Working knowledge of DoD RMF processes
• Experience working in a Microsoft Active Directory Environment
• Experience implementing Identity Management applications and AAA

SECURITY CLEARANCE: Active Secret Required