Senior Infrastructure Engineer — Secure Azure Dev Platform & VDI

Oteemo, Inc; Virginia Beach (VA); On-site; USD 140,000 - 210,000; Full time

Job summary

Oteemo, Inc. seeks an Senior Infrastructure Engineer to build a secure, self-service developer sandbox inside a regulated energy utility's Azure tenant. You will deliver non-persistent, streamed desktops on Azure Virtual Desktop and Omnissa Horizon, rebuild on logoff, and route traffic through TLS-inspected egress.

You’ll own the stack from landing zone to golden image, enforcing guardrails, identity management, and logging. Hands-on Azure in enterprise settings is required.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 8+ years in infrastructure or platform engineering, including 4+ years of hands-on Azure in regulated environments.
• Experience delivering production AVD or Horizon deployments with non-persistent pools and image lifecycle.
• Deep experience with Azure networking: VNets, UDRs, Private Link, DNS, NSGs.
• IaC skills with Terraform or Bicep and CI/CD.
• Windows 11 multi-session hardening and Linux for container workloads.

Responsibilities

• Stand up non-persistent AVD/Omnissa Horizon desktops with instant clone tech.
• Build and secure landing zones with TLS-inspected egress and hub-and-spoke VNets.
• Own image pipelines (Image Builder/packer) and CIS hardening.
• Enforce guardrails via Azure Policy and Terraform/Bicep; RBAC and Key Vault integration.
• Expose image pipelines for AI agent promotions with human approvals.

Skills

Azure

Terraform

Packer

FSLogix/DEM

Education

Bachelor's degree or equivalent practical experience

Tools

Azure Image Builder

Bicep

VMware Horizon

Private Link/DNS

Job description

Oteemo, Inc. seeks an Senior Infrastructure Engineer to build a secure, self-service developer sandbox inside a regulated energy utility's Azure tenant. You will deliver non-persistent, streamed desktops on Azure Virtual Desktop and Omnissa Horizon, rebuild on logoff, and route traffic through TLS-inspected egress.

You’ll own the stack from landing zone to golden image, enforcing guardrails, identity management, and logging. Hands-on Azure in enterprise settings is required.