Cloud Engineer - Nerdio AVD

Title: Cloud Engineer - Nerdio AVD

Location: Remote, United States

Duration: Contract

Ability to obtain a Public Trust or existing federal clearance preferred

It is a short-term project that ends on May 31 st , 2026

Job Summary

Client is seeking a skilled Nerdio AVD Cloud Engineer for a short-term contract supporting a high-impact team delivering secure, compliant, and scalable Azure Virtual Desktop (AVD) solutions enhanced by Nerdio Manager. This is a hands-on engineering role focused on building, automating, and operating Azure Virtual Desktop environments using Nerdio Manager for Enterprise, while supporting large-scale deployments, migrations to cloud-based virtual desktops, and modernization of end-user computing for mission-critical systems, often in regulated environments.

Key Responsibilities

Implement and manage Azure Virtual Desktop (AVD) deployments using Nerdio Manager for Enterprise, including automated provisioning, host pool configuration, scaling plans, session host management, and image versioning

Design and configure AVD environments with Nerdio-guided workflows, including integration with Microsoft Entra ID (formerly Azure AD), Active Directory (AD DS, Entra Domain Services), FSLogix profile containers, and Microsoft Intune for endpoint management

Build and maintain infrastructure-as-code (IaC) for AVD and Nerdio-enhanced environments using Bicep, Terraform, ARM templates, PowerShell, and Nerdio automation features

Execute virtual desktop migrations and transitions (from on-premises VDI/Citrix/VMware to AVD, rehost, refactor applications for remote delivery, replatform to cloud desktops) leveraging Nerdio tools, Azure Migrate, and best practices

Configure secure networking and Zero-Trust access controls including Azure Virtual Networks (VNet), Private Endpoints, Network Security Groups (NSGs), Azure Firewall, Conditional Access, MFA, and integration with on-premises connectivity (ExpressRoute, VPN)

Implement identity and access management solutions using Microsoft Entra ID, RBAC, Privileged Identity Management (PIM), and Nerdio's role-based access controls for least-privilege administration

Integrate and operate DevSecOps pipelines with Azure DevOps, GitHub Actions, Azure Pipelines, and security tools (Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, Azure Security Hub)

Automate compliance monitoring, evidence collection, auto-scaling, patching, and reporting using Nerdio Manager features, Azure Policy, Microsoft Defender for Cloud, and Sentinel for standards such as FedRAMP High, NIST 800-53, or CMS ARS requirements

Support application delivery, user profile management (FSLogix), performance optimization, and hybrid/containerized workloads in AVD environments, including integration with Windows 365 where applicable

Troubleshoot production issues in AVD/Nerdio environments, perform root cause analysis, optimize performance, latency, user experience, and cost (including auto-scaling and resource right-sizing)

Contribute to architecture review packages, security documentation, diagrams, System Security Plans (SSP), and authorization-to-operate (ATO) artifacts

Collaborate daily with cloud architects, security engineers, VDI specialists, developers, and stakeholders

Required Skills & Experience

4+ years of hands-on experience building and operating production workloads in Azure (commercial and/or Government)

2+ years working specifically with Azure Virtual Desktop (AVD) and Nerdio Manager (for Enterprise or MSP)

Strong proficiency in Infrastructure as Code: Bicep (required), Terraform (strong plus), ARM templates

Experience deploying and managing AVD at scale using Nerdio Manager, including host pools, scaling, image management, and automation

Solid understanding of Azure networking (VNet, Private Link, Firewall, ExpressRoute, VPN) and virtual desktop protocols (RDP, DCV)

Hands-on experience with Azure DevOps (Repos, Pipelines, Boards) and GitHub Actions

Familiarity with Microsoft security and management tools (Defender for Cloud, Azure Policy, Sentinel, Log Analytics, Intune, FSLogix)

Scripting and automation skills: PowerShell (required), Python or Bash (plus)

U.S. citizenship and ability to obtain and maintain CMS Public Trust clearance

Preferred Qualifications

Active Microsoft certifications:

Azure Administrator Associate (AZ-104)

Azure Solutions Architect Expert (AZ-305) or DevOps Engineer Expert (AZ-400)

Azure Security Engineer Associate (AZ-500)

Microsoft certifications related to Azure Virtual Desktop or Modern Work

Experience with compliance frameworks such as FedRAMP High, NIST 800-53, CMS ARS/MARS-E, or similar regulatory controls

Prior work on CMS contracts (SPARC, ESIM, EPMO, XLC) or healthcare-related virtual desktop projects

Knowledge of FSLogix, Microsoft Intune, Windows 365, Azure Health Data Services, or related EUC technologies

Experience with AVD hybrid/on-premises extensions, auto-scaling policies, cost optimization, and performance tuning in Nerdio environments

Active Public Trust clearance or higher

Other Requirements

Must have resided in the U.S. for at least 3 of the last 5 years

Must be eligible for CMS Public Trust clearance

No visa sponsorship available