Apply on Employer Site

Workday · 2 hours ago

Software Development Engineer, Azure VDI Engineer (US Federal)

McLean, VA

Full-time

Hybrid

Mid Level

$135K/yr - $203K/yr

Workday is a Fortune 500 company and a leading AI platform focused on managing people, money, and agents. They are seeking a Software Development Engineer to maintain and secure their Azure VDI environment while ensuring compliance with U.S. Federal Government security requirements.

Artificial Intelligence (AI)Cloud ComputingEnterprise SoftwareHuman ResourcesSaaSSoftware

Comp. & Benefits

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Coordinate and manage Microsoft Entra ID Governance features, including Access Packages and Microsoft 365 Groups, to govern user access lifecycle

Monitor and troubleshoot automated Workday → Microsoft Entra ID user provisioning

Support user onboarding, including issuing Temporary Access Passes (TAP) and assisting with MFA registration (Passkeys, Microsoft Authenticator)

Perform monthly patching and security updates for Windows 365 custom golden images

Lead VDI endpoints using Microsoft Intune (compliance, configuration, baselines)

Provide Tier 2/3 technical support for VDI-related issues

Maintain operational health of VDI pools

Serve as a key member of the 24/7 incident response team, monitoring alerts from: Microsoft Sentinel, Microsoft Defender for Endpoint, and Microsoft Defender for Cloud Apps

Maintain continuous STIG compliance for all VDI endpoints

Apply security updates to golden images and monitor for deviations using Azure Policy

Participate in Eviction protocols, including rapid rotation of all credentials, keys, and secrets

Manage pool‑specific access controls to segregate user populations (Engineering vs. Efficiency)

Manage, review, and fine‑tune all Microsoft Entra Conditional Access policies

Implement policies for: US‑only access, VPN‑only connections from named locations and device compliance integration with Intune

Qualification

Microsoft Entra IDIdentityAccess ManagementMicrosoft IntuneMicrosoft SentinelWindows 365MFA configurationsDISA STIG complianceIncident responseTeam collaborationProblem-solving

Required

Experience operating systems in high‑security supervised environments (DoD IL4/IL5, FedRAMP High, GCC‑High)

Deep hands‑on expertise with Microsoft Entra ID, including: Conditional Access (building/testing/maintaining complex policies), Identity Governance (Access Packages, Access Reviews), MFA configurations including Passkeys and TAP

Experience with cloud-native security tools: Microsoft Sentinel (monitoring & analytics), Microsoft Defender for Endpoint (VDI security)

Strong experience managing Windows endpoints via Microsoft Intune

Familiarity with applying/monitoring DISA STIG baselines

Experience with on‑call rotations and formal incident response plans

This role may require a security clearance at the TS/SCI w/CI Poly level. Applicants must have the ability to obtain and maintain a U.S. government issued security clearance. An active TS/SCI w/CI Poly is preferred

Preferred

Experience with Windows 365 Government or Azure Virtual Desktop (AVD)

Experience with Defender for Cloud Apps (MCAS) and Microsoft Purview (DLP)

Familiarity with Azure networking (VNet, NSGs, Azure Firewall) and hybrid connectivity (VPN, ExpressRoute)

Expertise in designing, implementing, and analyzing algorithms to solve complex problems, optimize business processes, improve data analysis, and enhance decision-making strategies

Proficient in the entire software lifecycle (conception, design, programming, testing, and maintenance), applying knowledge of programming languages, data structures, and system build to deliver custom solutions and ensure software performance and security

Experienced in tracking and managing code changes using SCM tools, including version and branch management, and conflict resolution

Able to streamline the development process and maintain codebase integrity, ensuring accurate documentation and reversibility of changes

Capable of encouraging a positive and inclusive team environment to improve team efficiency, facilitate effective decision-making, and assist with project management