Looking For AVD Architect

Tech Mahindra; Pune District; On-site; INR 3,500,000 - 6,500,000; Full time

Job summary

Tech Mahindra is seeking an Azure Virtual Desktop architect to design and implement enterprise-scale VDI solutions across regions. You will drive migrations from on-prem to cloud, build gold images, and enforce security baselines while collaborating with stakeholders. You will mentor engineers and produce comprehensive runbooks and architecture documents.

The role emphasizes hands-on design, cost awareness, and cloud-first modernization in a fast-paced enterprise environment.

Qualifications

• Deep expertise in AVD architecture including host pools, session hosts sizing, RDP Shortpath, multi-region design, and DR.
• Hands-on experience with FSLogix, Azure Files, and Azure NetApp Files.
• Knowledge of Entra ID, Hybrid identity, Intune/MEM for session host management.
• Strong networking, ExpressRoute/VPN, Private Endpoints, NSGs and Azure Firewall.
• Experience with IaC using Terraform and/or Bicep/ARM, plus automation scripting.

Responsibilities

• Design and architect enterprise-scale Azure Virtual Desktop environments and define landing zones.
• Lead migrations from on-premise VDI (Citrix/VMware Horizon/RDS) to Azure VDI or Windows 365.
• Create golden images and manage image pipelines; implement profile containers and app masking.
• Define monitoring, cost controls, and autoscaling, with runbooks and handover material.
• Mentor engineering teams, run technical workshops, and ensure security baselines.

Skills

AVD architecture

Enterprise scale design

Cloud migrations

Security hardening

Infra as Code

Cost optimization

Stakeholder management

Networking expertise

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

Bicep/ARM templates

Azure DevOps

GitHub Actions

Azure Monitor/Log Analytics

PowerShell

Job description

• Design and architect enterprise-scale Azure Virtual Desktop environments, including host pools, workspaces, application groups, and scaling plans.
• Define landing zone architecture for AVD: networking (hub-spoke/vWAN), identity integration, storage (FSLogix on Azure Files/NetApp Files), and image management strategy.
• Lead migrations from on-premises VDI platforms (Citrix, VMware Horizon, RDS) to Azure Virtual Desktop or Windows 365.
• Build and maintain golden images using Azure Compute Gallery, Azure Image Builder, and automated pipelines.
• Implement FSLogix profile containers and app masking; optimize profile performance and storage tiering.
• Establish security baselines: Conditional Access, MFA, Zero Trust network design, Defender for Endpoint, screen capture protection, and RBAC.
• Implement autoscaling, right-sizing, and Reserved Instance/Savings Plan strategies to control Azure consumption costs.
• Automate deployment and configuration using Infrastructure as Code (Terraform, Bicep/ARM) and CI/CD pipelines (Azure DevOps or GitHub Actions).
• Define monitoring and observability using Azure Monitor, Log Analytics, and AVD Insights; establish SLAs and performance baselines.
• Produce high-quality architecture documentation: HLDs, LLDs, runbooks, and operational handover material.
• Provide L3/L4 escalation support, root cause analysis, and mentoring to engineering and operations teams.
• Stay current with the Microsoft roadmap (Windows 365, Windows App, multimedia redirection, GPU workloads) and advise stakeholders on adoption.

Must Have :

• Deep expertise in AVD architecture: host pools (pooled/personal), session host sizing, RDP Shortpath, multi-region design, and disaster recovery.
• Strong hands- on experience with FSLogix (profile containers, Cloud Cache, app masking) and Azure Files / Azure NetApp Files.
• Expert-level knowledge of Microsoft Entra ID (Azure AD), Hybrid identity (Entra Connect), Entra Domain Services, Group Policy, and Intune/MEM for session host management.
• Solid Azure core skills: virtual networking, ExpressRoute/VPN, Private Endpoints, NSGs/Azure Firewall, storage, and compute.
• Windows 10/11 Enterprise multi-session administration, image optimization, and application packaging (MSIX App Attach / App-V).
• Infrastructure as Code proficiency with Terraform and/or Bicep/ARM templates, plus PowerShell scripting and automation.
• Experience with Azure cost management, autoscaling plans, and capacity planning for VDI workloads.
• Security hardening experience: Conditional Access, MFA, Defender suite, CIS/Microsoft security baselines.

Proven track record producing architecture documentation and leading technical workshops with stakeholders.

• Strong experience in Azure Virtual Desktop
• Must have Infrastructure Technologies and Cloud operations & Security overview
• Must have Analytical and Problem-solving skills
• Excellent written and verbal communication; able to explain complex designs to technical and non-technical audiences.
• Strong stakeholder management and the ability to influence architecture decisions across teams.
• Must have knowledge on ITSM processes
• Should have Automation knowledge
• Should have Public Cloud experience

Enthusiastic, self-motivated, effective under pressure, and willing to take risk

• Bachelors degree in computer science, Information Technology, or equivalent practical experience.
• 10-12 years of overall experience in IT infrastructure, cloud engineering, or end-user computing.
• 5+ years of dedicated, hands-on AVD experience at enterprise scale (500+ users preferred).
• Excellent troubleshooting, documentation, and stakeholder communication skills.
• Certification: Microsoft Certified Azure Virtual Desktop Specialty (AZ-140) and Azure Solutions Architect Expert (AZ-305), or equivalent demonstrable experience.