System Engineer---Multi-cloud VDI Architecture

Key Tasks and Responsibilities

The Contractor shall execute the following duties across our six technical pillars:

Hybrid Virtualization & Multi-Cloud VDI Architecture

• On-Premises Server & VDI Clusters: Manage and optimize enterprise-scale VMware server clusters and high-performance Virtual Desktop Infrastructure (VDI) environments utilizing VMware Horizon.
• Azure Virtual Desktop (AVD): Architect, deploy, and administer the Azure Virtual Desktop (AVD) environment. Manage host pools, application groups, workspace assignments, and user profile configurations (e.g., FSLogix).
• Horizon Infrastructure: Administer the full Horizon stack, including Connection Servers, Horizon Connection Gateways, and underlying SQL databases.
• Secure Access & Load Balancing: Maintain Unified Access Gateways (UAGs) and collaborate on traffic routing/high-availability configurations via F5 Load Balancers.
• vGPU Technology: Configure, license, and update NVIDIA GPUs dedicated to performance-heavy VDI cluster environments.

Cloud Infrastructure & Workload Management

• Azure Workload Management: Design, provision, and maintain Azure core workloads, including enterprise Virtual Machines (VMs), storage accounts, and network infrastructure (VNets, Peering, Network Security Groups)
• Azure Enterprise Governance: Act as an Azure Global Administrator managing subscriptions, resource allocation, access permissions, and resource groups.
• AWS Administration: Provision and manage AWS EC2 servers, S3 storage, IAM permissions, and hybrid network connectivity.
• Proficiency in Infrastructure as a code(IaaC) preferred

Storage, Hardware & Virtualization Foundations

• ESXi Host & Hardware Management: Install, configure, patch, and maintain ESXi hosts, including underlying hardware and out-of-band management interfaces (iDRAC/iLO).
• Storage Area Networks (SAN): Own the installation, configuration, networking (iSCSI, Copper/DAC/SFP), and patching of Nimble SAN hardware and software.
• vCenter & Networking: Maintain vCenter Server lifecycle. Manage advanced virtual networking, including distributed virtual switches (dvSwitches), port groups, vKernels, and VLAN segmentations.

Identity, Directory Services & Core Infrastructure

• Active Directory (AD) Management: Maintain the health and replication of multi-site Active Directory Domain Controller forests and domains. Manage Group Policies (GPOs), accounts, and permissions.
• Hybrid Identity & Azure AD / Entra ID Sync: Oversee directory synchronization using multiple sync servers hosted in AWS to Azure/Office 365. Set up Enterprise Applications and single sign-on (SSO) integrations.
• Core Network Services: Manage multiple redundant core service servers, including DHCP, WINS, and NPS (Network Policy Server), ensuring yearly certificate renewals.
• Certificate Management: Administer Domain Certificate Authorities (CAs) across both on-premises and cloud environments. Responsible for the end-to-end lifecycle (requesting, deploying, monitoring, and renewing) of internal and public-facing SSL/TLS Certificates across all enterprise applications, web servers, and NPS infrastructures.

Email, Data Protection & File Services

• Enterprise OS Patching: Establish and execute baseline operating system patching, vulnerability remediation, and firmware upgrades for all hybrid server workloads (Windows Server/Linux) across AWS, Azure, and on-premises environments.
• Email & Messaging: Manage hybrid Exchange infrastructure, combining on-prem Exchange servers with Office 365 cloud provisioning, licensing, accounts, and distribution groups.
• Email Security: Act as the primary administrator for Barracuda Spam Filters, resolving complex email delivery issues and managing domain transport rules and MX records.
• Veeam Enterprise Backups: Manage corporate data protection strategies utilizing Veeam Backup on-premises and Veeam backup appliances within AWS, overseeing licensing and enterprise-to-site communication.
• ExaGrid Storage: Maintain ExaGrid target backup appliances, handling both hardware and software lifecycles.
• File Shares: Support enterprise file systems across multiple on-premises/AWS servers, including Amazon FSx file shares.

Enterprise Application Infrastructure Support

Provide Tier 3 backend system administration, database availability, and infrastructure hosting for core business platforms (commercial and home grown) including but not limited to:

Knowledge, Skills, and Abilities

• Expert Knowledge: Deep architectural understanding of cross-platform hybrid design, data center computing, virtualization layers, and enterprise multi-cloud connectivity (AWS and Azure).
• Protocol Mastery: Advanced understanding of infrastructure and networking protocols, including Kerberos, LDAP, SAML, OIDC, iSCSI, DHCP, and DNS.
• Automation & Scripting: Highly proficient with PowerShell and scripting languages to automate server tasks, configuration management, and administrative infrastructure workflows.
• Problem Solving: Superior Tier 3 troubleshooting capabilities across complex compute, storage, backup, virtual desktop, and application-delivery frameworks.
• Communication: Strong ability to document architectural system topologies, write clear technical runbooks, and explain complex identity/system flows to both technical and non-technical stakeholders.