Azure Virtual Desktop (AVD) Architect

Summary: The Lead – Azure Virtual Desktop Services owns the end-to-end management, security, optimization, and evolution of the organization's Azure Virtual Desktop (AVD) platform, covering both single-session and multi-session environments. The role leads a team responsible for provisioning, compliance, patching, automation, cost optimization, and disaster recovery, while acting as the key point of contact for business stakeholders, the MAPS team, and security personnel.

2. Key Responsibilities

A. AVD Platform Management

• Operate and support single-session, multi-session, and persistent AVD environments.
• Manage platform configuration, provisioning, de-provisioning, applications, access, and user transitions.

B. Updates, Patching & Compliance

• Maintain current applications, images, and security patches across AVD host pools.
• Own compliance reporting, audit readiness, and remediation in line with policies and standards.

C. Security & Cross-Team Coordination

• Partner with the MAPS and security teams to maintain a secure, compliant AVD estate.
• Coordinate security reviews, vulnerability remediation, access controls, and policy enforcement.

D. Cost, Capacity & Performance Optimization

• Optimize capacity, performance, and Azure consumption through right-sizing and scaling.
• Track utilization and costs, report trends, and recommend FinOps savings initiatives.

E. Automation, Tooling & Enhancements

• Own PowerShell scripts, APIs, portals, databases, and supporting automation tools.
• Drive automation, standardization, self-service, reliability, and continuous improvement.

F. Business Continuity & Disaster Recovery

• Maintain and regularly test documented AVD disaster recovery and business continuity plans.
• Define and monitor RTO/RPO targets, backups, and failover strategies.

G. Stakeholder & Team Leadership

• Lead and develop the AVD team, allocate work, and ensure delivery against SLAs.
• Manage stakeholder alignment through service reviews, roadmaps, status updates, and risk communication.

3. Required Qualifications & Experience

Education

• Bachelor's degree in Computer Science, Information Technology, or a related field (or equivalent experience).

Experience

• 8–12 years in IT infrastructure/end-user computing, with at least 4–5 years of hands-on experience in Azure Virtual Desktop.
• Proven experience leading or technically guiding a team in a managed-service or enterprise environment.
• Experience managing stakeholder relationships across business, security, and technical teams.

Technical Skills

• Deep expertise in Azure Virtual Desktop (host pools, session hosts, FSLogix, MSIX app attach, scaling plans, image management).
• Strong working knowledge of Azure services: Entra ID (Azure AD), networking (VNets, NSGs, peering), storage, Azure Monitor, Log Analytics, Azure Policy, and Defender for Cloud.
• Advanced PowerShell scripting; experience with REST APIs, Azure CLI, and Infrastructure as Code (ARM/Bicep/Terraform).
• Experience with databases and web-based admin/support portals used for automation and workflow.
• Hands-on experience with Azure cost management, right-sizing, and FinOps practices.
• Experience designing and testing DR/BCP solutions (Azure Site Recovery, Azure Backup, multi-region designs).
• Knowledge of security and compliance frameworks (e.g., ISO 27001, SOC 2, CIS benchmarks).

4. Preferred Qualifications

• Microsoft certifications such as AZ-140 (Azure Virtual Desktop Specialty), AZ-104, AZ-305, or SC-300.
• Experience with CI/CD pipelines (Azure DevOps/GitHub Actions).
• ITIL certification or familiarity with ITSM tools (e.g., ServiceNow).
• Experience in large-scale or regulated enterprise environments.