Citrix/VDI Engineer

Role Summary:
Role requires deep expertise across Citrix Virtual Apps and Desktops (CVAD / Citrix DaaS), Citrix ADC (NetScaler), profile/container technologies (e.g., FSLogix), and cloud platforms (Azure/AWS). A seasoned L3 Citrix/VDI Engineer to design, implement, and support enterprise-scale virtual desktop/application environments. Escalation point for complex issues, own platform architecture/standards, and drive automation, performance tuning, and security.

Must-Have skills:

• Hands-on with Citrix CVAD/Citrix DaaS and Citrix ADC (NetScaler) at enterprise scale
• Architect CVAD (on‑prem & Citrix DaaS) including Delivery Controllers, StoreFront/Workspace, MCS/Provisioning Services (PVS), WEM, Profile Management / FSLogix, and policy baselines.
• Design Citrix ADC (NetScaler) for Gateway/VPN, Load Balancing, Content Switching, GSLB, nFactor authentication, SSL/TLS, and Web App Firewall in HA and multi‑site topologies.
• Define cloud landing zones and hybrid connectivity (ExpressRoute/VPN), image strategy, capacity planning, and DR across Azure/AWS.
• Lead deployments, upgrades, and migrations (e.g., on‑prem CVAD to Citrix DaaS, StoreFront to Workspace, ADC 12.x→13.x/14.x, Windows 10→11 images).
• Build golden images with MDT/SCCM/Autopilot, hardening, app layering, and GPU (Citrix HDX 3D Pro) when applicable.
• Integrate identity and access: Entra ID/Azure AD, ADFS, SAML/OAuth, MFA, conditional access; implement Zero Trust controls for VDI.
• Serve as L3 escalation for performance, login slowness, printing, profile/FSLogix, app publishing, and ADC gateway issues.
• Own platform observability: Citrix Director/Monitor, Citrix Application Delivery Management (ADM), Log Analytics/Splunk, Perfmon/WPA; develop health checks and Proactive Remediations.
• Manage certificates, DNS, STA/CGP, EDT/UDP, HDX policies, session reliability, MTU/Path MTU tuning, and WAN optimization.
• Baseline and tune CPU/Memory/IOPS, ICA RTT, Framehawk/EDT, and login duration sub‑metrics (GPO, profile, shell).
• Establish capacity models, autoscale policies (Citrix Autoscale / Cloud autoscaling), and BC/DR runbooks including multi‑region failover.
• Implement hardening/secure baselines for ADC, Windows Server, CVAD, WEM, and images; enforce least privilege, RBAC, and admin partitioning on ADC.
• Coordinate with InfoSec on VAPT findings, WAF policies, TLS cipher suites, FIPS, and audit/attestation (e.g., ISO/NIST).
• Automate with PowerShell, Citrix PowerShell SDK, REST/ Nitro API (ADC), Terraform/ARM templates; codify builds, publish apps, and policy deployments.
• Create self‑service workflows and pipelines for image rollouts, app updates, and platform changes.
• Produce HLD/LLD, standards, SOPs, and change management artifacts; maintain CMDB accuracy.
• Mentor L1/L2 engineers; lead knowledge transfer, and represent EUC in architecture councils..

Good-to-Have skills:

• Endpoint management and enterprise mobility solutions.
• Ability to handle multiple technology tasks and work independently as well as a team member
• Microsoft Certified: Azure Solutions Architect Expert
• Certifications: Microsoft Certified: Endpoint Administrator Associate or Azure certifications preferred.