DevOps Software Engineer: IAM & Secure VDI Ops

HR Tech Job; Reston (VA); On-site; USD 124,000 - 222,000; Full time

Job summary

Workday in Reston, VA is seeking a Software Development Engineer with DevOps experience for a 24/7 operations role. You will manage an IL5-compliant Azure VDI environment, focusing on IAM governance and security in support of a U.S. Federal Government contract.

Responsibilities include Entra/Intune-based endpoint management, incident response, STIG compliance, and ongoing security monitoring with Microsoft Defender and Sentinel. Strong preference for TS/SCI w/CI Poly clearance.

Qualifications

• Experience in high-security DoD/FedRAMP environments.
• Federal clearances or ability to obtain TS/SCI w/CI Poly preferred.
• Hands-on IAM and VDI security experience.

Responsibilities

• Coordinate Entra ID governance features and access packages.
• Monitor/workday provisioning to Entra ID.
• Assist onboarding with TAP and MFA enrollment.
• Apply monthly patching for Windows 365 golden images.
• Lead VDI endpoints with Intune configuration and baselines.
• Provide Tier2/3 support for VDI issues.
• Maintain VDI pool health and monitoring.
• Join 24/7 incident response for security alerts.
• Maintain STIG compliance for VDI endpoints.
• Apply security updates to golden images via Azure Policy.
• Manage credential rotation and secret evictions.
• Control access per user group (Engineering vs. Efficiency).
• Maintain CA policies and security rules.
• Enforce US-only access and VPN/location-based access.

Skills

Entra ID Governance

Conditional Access

MFA/TAP

Microsoft Sentinel

Intune Management

VDI Security

Govt Security

Tools

Azure AD

Windows 365

Microsoft Entra

Job description

Workday in Reston, VA is seeking a Software Development Engineer with DevOps experience for a 24/7 operations role. You will manage an IL5-compliant Azure VDI environment, focusing on IAM governance and security in support of a U.S. Federal Government contract.

Responsibilities include Entra/Intune-based endpoint management, incident response, STIG compliance, and ongoing security monitoring with Microsoft Defender and Sentinel. Strong preference for TS/SCI w/CI Poly clearance.