Scope: Design, build, and configure a production-ready Omnissa Horizon (formerly VMware Horizon) virtual desktop environment on AWS, including provisioning of approximately 30 custom Windows images.
~30 custom Windows golden images (optimized, hardened, application-layered)
Operational runbooks and image lifecycle documentation
Summary
Senior-level architect responsible for the end-to-end design and deployment of the Omnissa Horizon environment on AWS, including infrastructure architecture, connectivity, identity integration, and image management strategy.
Required Skills & Experience
Category
Requirement
Omnissa / VMware Horizon
5+ years hands-on experience deploying and managing Horizon environments (Connection Servers, UAGs, Blast/PCoIP protocols, instant clones, linked clones)
AWS Infrastructure
Strong working knowledge of VPC design, EC2, EBS, FSx, Direct Connect/VPN, IAM, and Security Groups in context of VDI workloads
VMC on AWS / EC2 Horizon
Experience deploying Horizon infrastructure on AWS (either VMC on AWS or native EC2-based Horizon deployments)
Active Directory & Identity
Integration of Horizon with AD/LDAP, conditional access, MFA (e.g., RADIUS, SAML/SSO)
Networking
VLAN/subnet segmentation for VDI, firewall rules, load balancing (UAG/ALB), DNS/DHCP for desktop pools
Image Management
Experience with Omnissa App Volumes, Dynamic Environment Manager (DEM), or equivalent layering/profile management tools
Windows OS
Deep familiarity with Windows 10/11 Enterprise multi-session and Server OS image optimization for VDI
Security & Compliance
STIG/CIS hardening of VDI images, endpoint security integration, GPO management for virtual desktops
Responsibilities
Lead architectural design of the Horizon environment on AWS (sizing, HA, DR considerations)
Configure Connection Servers, Unified Access Gateways, and vCenter integration
Design the golden image strategy (base images, application layers, personas)
Define and implement desktop pools (instant clone / full clone) with entitlement policies
Integrate with customer identity provider (AD, MFA, SSO)
Establish monitoring and logging (vROps, CloudWatch, or equivalent)
Produce HLD/LLD documentation and operational runbooks
Preferred / Nice-to-Have
Omnissa Certified Professional (VCP-DTM or equivalent)
AWS Solutions Architect certification
Experience with Omnissa Horizon Cloud on AWS
Familiarity with AWS WorkSpaces (for hybrid/comparison context)
Terraform or CloudFormation for infrastructure-as-code deployments
Experience in FedRAMP / IL4-IL5 or StateRAMP environments