Senior Infra Engineer: Secure Azure Dev Platform (VDI)

Oteemo, Inc; Richmond (VA); On-site; USD 150,000 - 190,000; Full time

Job summary

Oteemo in Richmond, VA seeks a Senior Infrastructure Engineer to design and operate secure, scalable Azure-based infrastructure for regulated environments. You will own the stack from landing zone to golden image and drive guardrails, logging, and compliant egress.

You'll deliver non-persistent desktops, enforce policy, and enable self-service with AI agents, while collaborating with security and compliance teams to meet industry standards.

Qualifications

• 8+ years in infrastructure or platform engineering.
• 4+ years hands-on Azure in an enterprise or regulated environment.
• Experience delivering production AVD or Omnissa / VMware Horizon deployments, including non-persistent pools, image lifecycle, and FSLogix or DEM / App Volumes at scale.
• Azure Networking with VNets, UDRs, Azure Firewall, Private Link, DNS, and NSGs, including TLS inspection.
• IaC & Identity: Terraform or Bicep in CI/CD; Packer or Azure Image Builder; Entra ID, RBAC, PIM, Key Vault, and Azure Policy.

Responsibilities

• Stand up non-persistent desktops (AVD/Omnissa Horizon) and validate a POC.
• Build landing zones with inspected egress and TLS inspection via Azure Firewall Premium; ensure required endpoints stay functional.
• Own image pipelines using Azure Image Builder or Packer and CIS hardening across rebuilds.
• Enforce guardrails as code with Azure Policy and IaC; manage per-project RBAC and Key Vault.
• Develop self-service templates and AI agent workflows for promotions and handover.

Skills

Azure cloud architecture

Security & compliance

CI/CD pipelines

Education

Bachelor's degree in related field or equivalent

Tools

Terraform

Bicep

Packer

Azure Image Builder

Entra ID

Key Vault

Azure Policy

FSLogix

App Volumes

Job description

Oteemo in Richmond, VA seeks a Senior Infrastructure Engineer to design and operate secure, scalable Azure-based infrastructure for regulated environments. You will own the stack from landing zone to golden image and drive guardrails, logging, and compliant egress.

You'll deliver non-persistent desktops, enforce policy, and enable self-service with AI agents, while collaborating with security and compliance teams to meet industry standards.