AVD Endpoint/Thin Client Engineer (Engineering & O&M)

SilverEdge is a premier provider of innovative cyber, software, and intelligence solutions, addressing mission-critical challenges for the Department of Defense (DoD), Intelligence Community (IC), and beyond. We are dedicated to delivering impactful results to meet mission goals through cutting-edge technology and expertise. We are seeking an AVD Endpoint/Thin Clint Engineer (Engineering & O&M) to join our dynamic team. This individual will play a pivotal role in developing innovative and effective solutions for our DoD customers within the IC sector.

Own the engineering, hardening, deployment, and day-2 operations of AVD endpoints and thin clients that connect users to secure AVD host pools. You’ll build gold images/profiles, automate provisioning at scale, manage firmware/OS lifecycles, enforce Zero Trust policies, and keep the fleet healthy with proactive monitoring and runbooks.

KEY RESPONSIBILITIES:

Engineering & Configuration

• Design and maintain standard endpoint/thin-client builds (Windows IoT Enterprise LTSC, IGEL OS, HP ThinPro, Dell ThinOS, Stratodesk NoTouch) with the AVD client, SSO, and required plugins (e.g., Teams optimization, webcam/audio, smart-card/CAC).
• Create and version device configurations and profiles in Intune (device compliance, configuration, app deployment, ESP/Autopilot) and/or vendor consoles (IGEL UMS, HP Device Manager, Dell Wyse Management Suite, Stratodesk NoTouch Center, 10ZiG Manager).
• Implement AVD client policies: RDP Shortpath (UDP), device/USB redirection rules, multi-monitor/resolution, codec preferences, QoS/DSCP tagging.
• Integrate endpoint security: Microsoft Defender for Endpoint onboarding, BitLocker (where applicable), WDAC/App Control, Local Admin/LAPS policies, certificate enrollment (SCEP/PKCS) for Wi-Fi/VPN/EAP-TLS.
• Configure printing options (Universal Print and/or session printing) and peripherals (headsets, scanners) with approved redirection.

Operations & Maintenance (O&M)

• Run the daily health routine: monitor AVD client versions, endpoint check-ins, compliance drift, Teams media optimization status, and call quality signals.
• Patch OS/firmware/drivers at scale; manage phased rings, rollback, and change windows. Track vendor advisories and plan upgrades.
• Troubleshoot login and session issues from the endpoint side (auth loops, conditional access, FSLogix profile attach symptoms surfaced at the client, UDP reachability).
• Maintain inventory and CMDB accuracy (tags, ownership, location, warranty/lease, lifecycle stage).
• Respond to incidents and service requests; execute runbooks; contribute to problem management and post-incident reviews.

Monitoring, Performance & Reporting

• Build dashboards and alerts using Intune reports, Azure Monitor/Log Analytics/Workbooks, and vendor consoles for:
• Device compliance & check-in rates
• AVD client version coverage
• Session connection success, RTT/latency/jitter (from client perspective)
• Teams Optimization health and CQD insights

• 3–5+ years in End-User Computing/VDI with a focus on Azure Virtual Desktop endpoints or thin clients.
• Hands-on with Intune/Endpoint Manager, Entra ID, Autopilot, device compliance/config profiles, Proactive Remediations.
• Experience with thin-client platforms: one or more of IGEL UMS, HP Device Manager/ThinPro, Dell WMS/ThinOS, Stratodesk NoTouch, 10ZiG Manager.
• Strong PowerShell (Graph/Intune/WMI/CIM) and practical KQL for troubleshooting and reporting.
• Solid understanding of RDP (Shortpath, UDP), media optimization (Teams), device/USB redirection, and endpoint networking (DNS, proxy, firewall, QoS).
• Endpoint security: Defender for Endpoint onboarding, BitLocker (where applicable), WDAC/AppLocker, certificate enrollment (SCEP/PKCS), Conditional Access.
• Proven change/incident/problem management in an ITIL environment; excellent documentation discipline.

• Familiarity with Nerdio Manager for Enterprise (for alignment with AVD operations), FSLogix concepts (from an endpoint perspective), Universal Print, smart-card/CAC pass-through.
• Experience integrating endpoint/thin-client telemetry with Elastic or Microsoft Sentinel.
• IaC exposure (Bicep/Terraform) beneficial for understanding AVD infra dependencies.
• Government/regulated environment experience; STIG/CIS hardening familiarity.

SilverEdge Government Solutions was founded on the belief that nurturing talent and collaborating closely with our customers enables us to think big and deliver the best for our country. Our mission is to bring top technology talent together to solve the world’s most challenging problems while protecting the United States and our allies. SilverEdge Government Solutions, LLC is an Equal Opportunity Employer and applicants receive lawful consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.