System Engineer III

Overview

Technical authority for an established Azure Virtual Desktop (AVD) environment, focused on architecture, image lifecycle, automation, performance, security and modernization.

What you'll do

• Design, deploy and refine AVD architecture for reliability, scalability, cost efficiency and security.
• Troubleshoot complex issues such as user experience, profile issues, connectivity, performance and application behavior.
• Own and evolve the AVD platform, including host pools, session hosts, scaling, FSLogix and performance optimization.
• Build, maintain and optimize golden images (Windows Enterprise multi-session).
• Manage image pipelines (e.g. Azure Image Builder, Managed Images / Shared Image Gallery) and ensure image consistency, patching, application delivery alignment and rollback strategies.
• Engineer AVD infrastructure including VNets, subnets, NSGs, DNS and routing.
• Partner with network and security teams on traffic flow, access control and optimizations.
• Define and enforce configuration standards, change control, Windows lifecycle (update rings, feature updates, delivery optimization, etc.) and best practices for global device management.
• Design, deploy and troubleshoot Intune configuration policies, compliance policies and app deployments.
• Align Intune policy behavior with AVD session host requirements and troubleshoot policy conflicts and application failures.
• Drive automation, monitoring and reliability by building scalable solutions with PowerShell, Bicep, Azure Automation and Git; delivering actionable reporting via Log Analytics and Power BI.
• Lead proactive remediations and analytics, participating in incident management and root cause analysis.
• Provide advanced expertise and mentorship, collaborate with Security on policy design and integration, and deliver clear documentation to align stakeholders and achieve measurable results.
• Understand and integrate Entra ID, Conditional Access Policies and identity-driven access and device posture considerations.
• Partner with security teams to align with zero-trust models.
• Create clear, durable technical documentation (runbooks, architecture diagrams, SOPs) and train support staff on new AVD features, changes and workflows.
• Participate in on-call rotation and assist in incident troubleshooting for prompt mitigation of issues.

What you'll need

• 8+ years in enterprise endpoint engineering or cloud infrastructure.
• 5+ years dedicated to AVD in environments of 5,000+ devices (or comparable complexity).
• Experience with Azure infrastructure services: Intune policy creation and troubleshooting, and golden image creation and lifecycle management.
• Hands-on scripting experience with PowerShell, Bicep and/or Terraform.
• Solid understanding of Azure networking concepts and experience automating cloud platform operations.

Nice to have

• AWS experience (virtual desktops, infrastructure or automation).
• Experience in heavily regulated environments.
• Certifications in area of expertise: AZ-104 (Microsoft Azure Administrator); AZ-140; AZ-800 / AZ-801; MS-102; MD-102.

Details

• Location: India (Bengaluru).
• Work mode: remote-first, with remote, hybrid and office-based models supported.
• Camera-on video participation required for all virtual meetings.