About this opportunity
Oteemo, Inc lists this Senior Infrastructure Engineer- Secure Developer Platforms (Azure/VDI) opportunity in virginia beach, Virginia. Review the employer’s description below for duties, qualifications and application requirements.
Job description
Company Description
Oteemo is an industry-leading technology consulting firm at the forefront of AI-driven, cloud native, enterprise DevSecOps transformation. We build intelligent, automated, secure systems for organizations tackling their toughest technical and business challenges and were pushing the boundaries of what AI, generative AI, and agentic systems can do in production, not just in theory. Join us and youll work alongside recognized experts on cutting-edge projects that blend cloud native architecture, extreme automation, and AI/ML at the core. If youre passionate about building whats next in AI and cloud technology and want to do it with a team that sets the standard rather than follows it, Oteemo is where you belong.
Youll deliver non-persistent, streamed desktops on Azure Virtual Desktop and Omnissa Horizon that rebuild clean at every log off, keep developers work, and send all traffic through TLS-inspected egress while still booting in under a minute. run the head-to-head POC that selects the platform; persist developer state with FSLogix or Dynamic Environment Manager and App Volumes.
Build hub-and-spoke VNets segmented from production, with forced-tunnel egress through Azure Firewall Premium (TLS inspection, IDPS), private endpoints, and DNS; tune inspection so Git, package managers, GitHub Copilot, and AI/MCP endpoints keep working.
Golden Image & Endpoint Controls: Own the Azure Image Builder or Packer pipeline to Azure Compute Gallery (build, patch, CIS-harden, scan, publish); keep CarbonBlack App Control allow-lists and BeyondTrust EPM working across rebuilds.
Enforce guardrails as code with Azure Policy and Terraform or Bicep; wire a non-production identity tenant, per-project RBAC, and Key Vault; forward firewall, desktop, and provisioning logs to Sentinel or Splunk.
Self-Service, AI Agents & Handover: expose image pipelines so AXIOM AI agents can propose promotions that humans approve; Bachelors degree in a related field (or equivalent practical experience).
~8+ years in infrastructure or platform engineering, including 4+ years of hands-on Azure in an enterprise or regulated environment.
~ Virtual Desktop: Delivered at least one production AVD or Omnissa / VMware Horizon deployment, including non-persistent pools, image lifecycle, and FSLogix or DEM / App Volumes at scale.
~ Azure Networking: Deep experience with VNets, UDRs, Azure Firewall (Premium TLS inspection preferred), Private Link, DNS, and NSGs, including troubleshooting broken TLS chains.
~ Entra ID, RBAC, PIM, managed identities, Key Vault, and Azure Policy.
~ Working knowledge of Windows 11 multi-session hardening and Linux for container workloads; clear writer who can get a design approved by a Cyber Risk reviewer.
Tuning CarbonBlack App Control, BeyondTrust EPM, CrowdStrike, or Defender for Endpoint for developer workloads.
Drive:
Passion and energy to implement quality technical solutions. Commitment to Quality:
Passion to conceive and produce world-class solutions that drive real-world value for the customer
Customer Focus:
Consultative approach to solving problems for customers. Ability to clearly articulate problems, solutions, risks, rewards etc. (All your information will be kept confidential according to EEO guidelines.
Who can apply
Review the original listing for work authorization, qualifications and employer requirements.