Oteemo, Inc

Develop and execute automated tests, synthetic data, mock APIs, and infrastructure tests to validate performance, SLAs, and security controls for Azure-based developer desktops. | Requires at least seven years in test or quality engineering, three years focused on cloud or infrastructure, proficiency in at least two listed programming languages, and hands-on Azure and CI/CD experience. | Oteemo is an industry-leading technology consulting firm at the forefront of AI-driven, cloud native, enterprise DevSecOps transformation. We build intelligent, automated, secure systems for organizations tackling their toughest technical and business challenges and we're pushing the boundaries of what AI, generative AI, and agentic systems can do in production, not just in theory. Join us and you'll work alongside recognized experts on cutting-edge projects that blend cloud native architecture, extreme automation, and AI/ML at the core. We foster a dynamic, inclusive, and collaborative culture built on continuous learning, where your ideas shape real outcomes for our clients. If you're passionate about building what's next in AI and cloud technology and want to do it with a team that sets the standard rather than follows it, Oteemo is where you belong. Job Description We're looking for a Senior Test Engineer to prove that a regulated energy utility's new non-persistent Azure developer desktops meet their SLA and security controls. Every phase ends in an exit gate judged against agreed targets: boot under about 1 minute, IDE cold start under about 15 seconds, source control and Copilot reachable 99% or more, and zero TLS-interception failures. You'll turn those targets into automated, repeatable tests and build the mocks and synthetic data that keep production out of the sandbox. Key Responsibilities: SLA & Performance Validation: Turn the SLA into a measurable test plan with pass/fail thresholds and own phase-gate acceptance; baseline the on-premises VDI and score AVD and Horizon on the same harness; automate logon, boot, IDE cold start, and concurrent-workload tests with Login Enterprise or LoadGen. Connectivity & Toolchain Validation: Run synthetic reachability checks for Git, Copilot, artifact repositories, and MCP endpoints through inspected egress; write NuGet, npm, pip, and Docker smoke tests that catch TLS or endpoint-agent breakage first. Security & State Validation: Run negative tests proving production is unreachable, public endpoints are denied, App Control and EPM behave as designed, and every action reaches the SIEM; prove desktops rebuild clean while repos, caches, and tooling survive. Test Data, Mocks & Containers: Build synthetic data generators, masked-subset tooling, and mock APIs (WireMock, Postman, Microcks) so no test touches production; test container and compose workflows end to end. Infrastructure Gates & Reporting: Test IaC and policy with Terratest or Pester; define the gate AXIOM-built candidate images must pass before Security approves; publish SLA scorecards and hand over the regression suite and runbooks. Qualifications Bachelor's degree in a related field (or equivalent practical experience). 7+ years in test or quality engineering, including 3+ years testing infrastructure, platforms, or cloud environments. Automation: Strong skills in at least two of PowerShell, Python, C# / .NET, or TypeScript, with tests in CI/CD (Azure DevOps or GitHub Actions). Performance & Azure: Load testing with k6, JMeter, Locust, or VDI-specific tools; hands-on Azure VMs, networking, and monitoring (Azure Monitor, Log Analytics / KQL); Docker and docker compose. API Testing & Test Data: Postman / Newman, REST, and mock servers; synthetic data generation and masking. Writes test plans and evidence packages that a security or compliance reviewer accepts. Additional Information We Value: Drive: Passion and energy to implement quality technical solutions. Self-motivation and intellectual curiosity Commitment to Quality: Passion to conceive and produce world-class solutions that drive real-world value for the customer Customer Focus: Consultative approach to solving problems for customers. Expectations management. Communication: Superior communication skills. Ability to clearly articulate problems, solutions, risks, rewards etc. (written and verbal) Technical Skills: Love for technology. You have to be inherently passionate about technology. Business Acumen: Technology ultimately is used to enable the business. We look for people who understand how the businesses can be enabled through their technical solutions All your information will be kept confidential according to EEO guidelines.

Design and secure a self-service developer sandbox using Azure Virtual Desktop and Omnissa Horizon, including landing zones, image pipelines, security controls, and automated logging. | Requires 8+ years in infrastructure engineering, 4+ years of hands-on Azure work in regulated environments, Terraform or Bicep proficiency, virtual desktop deployment experience, and a bachelor's degree. | Oteemo is an industry-leading technology consulting firm at the forefront of AI-driven, cloud native, enterprise DevSecOps transformation. We build intelligent, automated, secure systems for organizations tackling their toughest technical and business challenges and we're pushing the boundaries of what AI, generative AI, and agentic systems can do in production, not just in theory. Join us and you'll work alongside recognized experts on cutting-edge projects that blend cloud native architecture, extreme automation, and AI/ML at the core. We foster a dynamic, inclusive, and collaborative culture built on continuous learning, where your ideas shape real outcomes for our clients. If you're passionate about building what's next in AI and cloud technology and want to do it with a team that sets the standard rather than follows it, Oteemo is where you belong. Job Description We're looking for a Senior Infrastructure Engineer to build a secure, self-service developer sandbox inside a regulated energy utility's Azure tenant. You'll deliver non-persistent, streamed desktops on Azure Virtual Desktop and Omnissa Horizon that rebuild clean at every log off, keep developers' work, and send all traffic through TLS-inspected egress while still booting in under a minute. You'll own the stack from landing zone to golden image. Key Responsibilities: Non-Persistent Desktops: Stand up pooled AVD and Omnissa Horizon (instant clone) desktops streamed over HTTPS 443; run the head-to-head POC that selects the platform; persist developer state with FSLogix or Dynamic Environment Manager and App Volumes. Landing Zone & Inspected Egress: Build hub-and-spoke VNets segmented from production, with forced-tunnel egress through Azure Firewall Premium (TLS inspection, IDPS), private endpoints, and DNS; tune inspection so Git, package managers, GitHub Copilot, and AI/MCP endpoints keep working. Golden Image & Endpoint Controls: Own the Azure Image Builder or Packer pipeline to Azure Compute Gallery (build, patch, CIS-harden, scan, publish); keep CarbonBlack App Control allow-lists and BeyondTrust EPM working across rebuilds. Identity, Guardrails & Logging: Enforce guardrails as code with Azure Policy and Terraform or Bicep; wire a non-production identity tenant, per-project RBAC, and Key Vault; forward firewall, desktop, and provisioning logs to Sentinel or Splunk. Self-Service, AI Agents & Handover: Build ephemeral resource templates with TTL and an orphaned-resource reaper; expose image pipelines so AXIOM AI agents can propose promotions that humans approve; deliver architecture, runbooks, and a support model. Qualifications Bachelor's degree in a related field (or equivalent practical experience). 8+ years in infrastructure or platform engineering, including 4+ years of hands-on Azure in an enterprise or regulated environment. Virtual Desktop: Delivered at least one production AVD or Omnissa / VMware Horizon deployment, including non-persistent pools, image lifecycle, and FSLogix or DEM / App Volumes at scale. Azure Networking: Deep experience with VNets, UDRs, Azure Firewall (Premium TLS inspection preferred), Private Link, DNS, and NSGs, including troubleshooting broken TLS chains. IaC & Identity: Expert Terraform or Bicep run through CI/CD; Packer or Azure Image Builder; Entra ID, RBAC, PIM, managed identities, Key Vault, and Azure Policy. Working knowledge of Windows 11 multi-session hardening and Linux for container workloads; clear writer who can get a design approved by a Cyber Risk reviewer. Nice to Have / Preferred Qualifications: Certifications: Azure: AZ-104, AZ-700, AZ-140, AZ-305; Terraform Associate; VCP-DTM. Tuning CarbonBlack App Control, BeyondTrust EPM, CrowdStrike, or Defender for Endpoint for developer workloads. Additional Information We Value: Drive: Passion and energy to implement quality technical solutions. Self-motivation and intellectual curiosity Commitment to Quality: Passion to conceive and produce world-class solutions that drive real-world value for the customer Customer Focus: Consultative approach to solving problems for customers. Expectations management. Communication: Superior communication skills. Ability to clearly articulate problems, solutions, risks, rewards etc. (written and verbal) Technical Skills: Love for technology. You have to be inherently passionate about technology. Business Acumen: Technology ultimately is used to enable the business. We look for people who understand how the businesses can be enabled through their technical solutions All your information will be kept confidential according to EEO guidelines.