Associate Infrastructure Engineer

Associate Infrastructure Engineer

Job #: req35992 Organization: World Bank Sector: Information Technology Grade: GF Term Duration: 3 years 0 months Recruitment Type: Local Recruitment Location: Washington, DC,United States Required Language(s): English Preferred Language(s): Closing Date: 4/2/2026 (MM/DD/YYYY) at 11:59pm UTC

Description

Do you want to build a career that is truly worthwhile? Working at the World Bank Group provides a unique opportunity for you to help our clients solve their greatest development challenges. The World Bank Group is one of the largest sources of funding and knowledge for developing countries; a unique global partnership of five institutions dedicated to ending extreme poverty, increasing shared prosperity and promoting sustainable development. With 189 member countries and more than 130 offices worldwide, we work with public and private sector partners, investing in groundbreaking projects and using data, research, and technology to develop solutions to the most urgent global challenges. For more information, visit www.worldbank.org

ITS Vice Presidency Context:

The Information and Technology Solutions (ITS) Vice Presidential Unit (VPU) enables the World Bank Group to achieve its mission of ending extreme poverty and boost shared prosperity on a livable planet by delivering transformative information and technologies to its staff working in over 150+ locations. For more information on ITS, see this video:https://www.youtube.com/watch?reload=9&v=VTFGffa1Y7w

Unit Context:

Digital Solutions (ITSDS)

The Digital Solutions team delivers modern productivity, collaboration, and endpoint solutions to over 30,000 users. We support Microsoft 365, WebEx, Power Platform, and AI tools like Copilot, Google Gemini, and Grammarly, while engineering, deploying, and supporting Windows Endpoints. We are a collaborative, customer-focused team committed to solving problems with reliable, impactful technology.

Duties and accountabilities:

Role Overview

The Associate Infrastructure Engineer serves as a core engineering contributor responsible for designing, optimizing, and maintaining the WBG enterprise virtualization and cloud-integrated compute platforms. The role ensures secure, resilient, and scalable infrastructure services by delivering high-quality engineering solutions across on-premise and hybrid cloud ecosystems. Operating with moderate autonomy, the engineer applies strong technical depth, analytical problem solving, and modern engineering practices—including automation, IaC, observability, and operational governance—to enhance platform stability and performance. The role collaborates closely with cross-functional teams across cloud, network, security, and digital workplace domains and contributes to modernization, resiliency, and identity-aligned transformation initiatives.

Role Scope & Distinction (Grade Level Summary)

• Engineering Ownership: Leads platform improvements, architecture input, modernization, and engineering upgrades.

• Technical Leadership: Serves as Tier 3 engineering escalation authority for Citrix, Azure, and Cloud PC engineering.

• Autonomy & Problem Solving: Operates independently to analyze complex issues and deliver strategic, sustainable solutions.

• Strategic Contribution: Drives cloud transformation, platform reliability, compliance alignment, and forward-looking engineering initiatives.

• Cross Team Influence: Collaborates with security, networking, cloud, and application teams to drive organization-wide engineering outcomes.

Duties & Responsibilities:

Infrastructure Engineering & Platform Reliability

• Engineer, optimize, and support Citrix Virtual Apps and Desktops environments across on-premises and cloud-hosted platforms, ensuring reliability, scalability, and performance.

• Lead engineering improvements for Citrix workloads, including optimization of HDX, profile management (FSLogix), gold images, GPU policies, graphics acceleration, and printing.

• Build, maintain, and version golden images following WBG engineering and security baselines (e.g., CIS), Shared Image Gallery, and pipeline best practices.

• Engineer, maintain, and upgrade Citrix Delivery Controllers, Provisioning Servers (PVS), Cloud Connectors, StoreFront, Director, License Servers, and Workspace app integrations.

• Coordinate large-scale platform updates, technology refresh cycles, DR enhancements, and architecture improvements.

• Lead validation, regression testing, change documentation, rollout planning, and post-upgrade monitoring.

Cloud & Virtual Desktop Engineering

• Engineer and administer cloud-based virtual desktop solutions, including Windows 365 Cloud PCs and Azure Virtual Desktop (AVD), integrating with Entra ID,

Conditional Access, MFA, and other WBG security controls.

• Manage configuration, lifecycle, policy enforcement, and performance monitoring of Windows 365 cloud devices and AVD workloads.

• Integrate Citrix DaaS with Azure cloud environments, ensuring alignment with WBG’s Cloud Adoption Framework and enterprise security requirements.

• Drive engineering initiatives for Azure cloud adoption, including VM performance optimization, cost management, governance compliance, and modernization of virtual infrastructure.

Infrastructure Operations & Security

• Serve as Tier 3 engineering escalation for Citrix, Windows, Azure, and cloud-hosted virtual desktop issues, with deep troubleshooting across compute, identity, storage, networking, and application layers.

• Maintain end-to-end vulnerability management for Citrix infrastructure, Azure workloads, and Windows 365 devices—including assessment, prioritization, remediation, compliance tracking, and risk documentation.

• Implement security hardening, patching, firmware updates, and continuous compliance monitoring across Citrix, Azure cloud, and virtual desktop environments.

• Service Management, Governance & Business Continuity

• Participate in and support Incident, Problem, and Change Management activities aligned with WBG ITS Service Management and ITIL practices.

• Contribute to annual disaster recovery planning, tests, and runbook updates.

• Ensure engineering and operational activities follow WBG standards, policies, and governance requirements

WBG TRE Engineering, Support, and Compliance

• Ensure monthly Microsoft Security Update compliance for TRE VDIs and PCs by tracking patch status through Intune, producing compliance reports for SWIFT and FedLine environments, and retaining evidence to support audits, risk reviews, and regulatory assessments

• Support TRE VDI availability by maintaining regular weekend reboot schedules, coordinating controlled execution with engineering and operations teams, and monitoring post-maintenance stability to minimize impact to regulated users and critical services.

• Oversee TRE application lifecycle management by ensuring application checklist sign-offs are completed for every update and change, working closely with application owners to maintain compliance and audit readiness

• Support onboarding of new TRE team members by preparing and executing structured onboarding plans aligned with WBG onboarding and mandatory training requirements.

SAFe and Agile Ways of Working

• Apply Agile and SAFe principles to support effective service delivery outcomes, including prioritization and flow of work.

Collaborate and Partner Across IT Functions

• Engage with cross-functional teams across ITS, including cloud, security, networking, application owners, and digital workplace teams.

• Participate in Engineering Challenge Review forums to resolve cross-team technical blockers.

• Provide technical guidance, KT sessions, and engineering leadership to support teams.

Desired Technical Skills:

Expertise in

• Citrix Engineering: CVAD (XenApp/XemDesktop), Provisioning (PVS), Delivery Controllers (DDC), StoreFront, Director

• Cloud Engineering: Azure Virtual Desktop (AVD), Windows 365 Enterprise/Frontline

• OS Image Engineering: Windows 11 hardening and Imaging

• Profile Mgmt: MS FSLogix & Citrix UPM

• Security: Vulnerability Management, Hardening, Compliance

• Troubleshooting: Full stack (Network, Identity, Hypervisor, Storage, Apps)

• Monitoring & performance Mgmt: Splunk, Azure Monitor, Goliath, Stratusphere Liquidware, Citrix UberAgent

• Scripting: PowerShell, WMI

• ITIL; Network/System Architecture, Config & Mgmt; IT Consulting; Change Management; Continuous Improvement; Log Analytics using Splunk;

• Automation using Powershell & Azure; Collaborating; Strategic Communication

• Technology Quotient; Business Acumen; Workflow Management

Selection Criteria

Required Qualifications:

• Master's degree with 5 years of experience or a bachelor’s degree with a minimum of 7 years of relevant experience, or an equivalent combination of education and experience.

Desired Certifications

• AZ-140 - Microsoft Certified Azure Virtual Desktop Specialty

• Citrix Certified Professional – Virtualization (1Y0-312)

• ITIL 4 Foundation

• SAFe Agilist (SA) or SAFe Practitioner (SP)

WBG Culture Attributes:

1. Sense of urgency: Anticipate and quickly respond to the needs of internal and external stakeholders.
2. Thoughtful risk-taking: Challenge the status quo and push boundaries to achieve greater impact.
3. Empowerment and accountability: Empower yourself and others to act and hold each other accountable for results.

World Bank Group Core Competencies

The World Bank Group offers comprehensive benefits, including a retirement plan; medical, life and disability insurance; and paid leave, including parental leave, as well as reasonable accommodations for individuals with disabilities.

We are proud to be an equal opportunity and inclusive employer with a dedicated and committed workforce, and do not discriminate based on gender, gender identity, religion, race, ethnicity, sexual orientation, or disability.

Learn more about working at the World Bank and IFC including our values and inspiring stories.