Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Cloud Security Architecture
Good to have skills : NA
Minimum 3 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:
The Virtual Desktops & Bastion Host Specialist is responsible for deploying, managing, securing, and optimizing enterprise Virtual Desktop Infrastructure (VDI) and Bastion Host/Jump Server environments. This role ensures secure remote access, privileged access workflows, and high availability of mission-critical virtual desktop and access gateway platforms.

Roles & Responsibilities:
- Deploy and manage Bastion Hosts (CyberArk PSM, Teleport, Delinea, PBPS, custom secure jump servers).
- Manage privileged session access and enforcement policies.
- Configure MFA, role-based access control (RBAC), and least-privilege workflows.
- Monitor, record, and audit privileged sessions for compliance and threat detection.
- Troubleshoot connectivity issues between Bastion Hosts and backend servers.
- Maintain high availability and failover strategies for Bastion infrastructure.
- Deploy, configure, and manage VDI environments (Citrix / VMware Horizon / Microsoft AVD).
- Maintain and optimize master images, golden images, and application layering.
- Manage virtual desktop pools, session hosts, and user assignment policies.
- Monitor system performance (CPU, RAM, storage, IOPS) and conduct capacity planning.
- Troubleshoot user sessions, profile loading issues, application performance, and connectivity failures.
- Implement profile management solutions (FSLogix, Citrix UPM, VMware DEM).
- Ensure OS patching, AV updates, and compliance across all VDI instances.
- Implement hardening standards for VDI and Bastion systems (CIS Benchmarks, STIGs).
- Integrate VDI and Bastion hosts with SIEM, PAM, MFA, and identity platforms (AD, AAD, IDPs).
- Conduct access reviews, audit facilitation, and compliance reporting.
- Ensure logging, session recording, and secure credential workflows are active and functioning.
- Maintain configuration baselines and follow Change Management processes (ITIL).
- Automate provisioning, session lifecycle management, and monitoring tasks using scripts (PowerShell, Python).
- Manage backup, recovery, and disaster recovery for VDI and Bastion platforms.
- Conduct root cause analysis (RCA) for recurring issues.
- Provide L3 support for VDI, remote access, Bastion Host issues.
- Work closely with Infra, AD, Security, and Application teams to support business operations.
- Document system designs, procedures, knowledge base articles, and SOPs.

Professional & Technical Skills:
- Must To Have Skills: Proficiency in Cloud Security Architecture.
- Strong understanding of virtualization (VMware ESXi, Hyper-V), storage, and networking.
- Experience with Provide L3 support for VDI, remote access, Bastion Host issues, CyberArk PSM, Teleport, Delinea, or other Bastion/Jump Server solutions
- Knowledge of identity and access management in cloud environments.
- Familiarity with compliance requirements related to cloud security.
- Expertise with AD, Group Policy, MFA integrations, and SSO.
Proficiency in PowerShell scripting.
- Experience with monitoring tools (ControlUp, Director, Horizon Console, Azure Monitor, etc.).
- Good understanding of security fundamentals, RBAC, privileged access workflows.
- Strong troubleshooting and problem-solving abilities.
- Ability to work in fast-paced environments and manage multiple priorities.
- Good communication and stakeholder engagement skills.




Additional Information:
- The candidate should have minimum 6+ years of experience in VDI and/or Bastion Host administration.
- This position is based at our Gurugram office.
- A 15 years full time education is required.
Certifications preferred: Citrix (CCA-V/CCP-V), VMware VCP-DTM, Microsoft AZ-140 (AVD), PAM/Bastion certifications where applicable.
- Experience supporting large-scale enterprise environments (5K 20K+ VDI users).

15 years full time education

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities.

Visit us at www.accenture.com 

Equal Employment Opportunity Statement

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, military veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.