Confirm application scope by partnering with Citrix administrators on application scope, user personas, and how users log in to each application.
Test WorkSpaces Applications and browser streaming to validate the logon flow and what end users will actually see; record findings that inform SSO design.
Co-author fleet and image specifications, including sizing for 43 servers and 8 applications, and define Terraform build patterns plus AWS Systems Manager (SSM) patching and image pipeline design with the Landing Zone team.
Contribute to session policy, storage persistence, and SSO configuration specifications; support Landing Zone deployments including fleets, VPC endpoints, domain join, SAML SSO, user pools, and session policies aligned to the agreed design.
Build, package, and optimize application images for each wave (about 14 to 15 servers per wave, including SAP GUI), run functional/smoke testing, support UAT, plan and execute cutovers with migration execution pods, and provide hypercare and issue fixes after go-live; maintain image build notes and operational runbooks for the Operate team.
What's Needed?
5+ years in end-user computing or application virtualization, including at least 3 years delivering Citrix Virtual Apps (XenApp) published applications.
Hands-on delivery experience with AWS WorkSpaces Applications / Amazon AppStream 2.0, including image builders, fleets, stacks, application settings persistence, and home folders.
Working knowledge of Windows Server, Active Directory domain join, Group Policy, DNS, and application packaging, installation, and troubleshooting.
Experience with Infrastructure as Code (Terraform preferred) and AWS Systems Manager for patching and automation.
Understanding of SAML 2.0 identity federation (e.g., Entra ID / Azure AD or ADFS) and how it impacts the end-user login experience, plus strong AWS networking knowledge (VPCs, subnets, security groups, VPC endpoints) and wave-based migration experience (test planning, cutover runbooks, rollback)