Cloud Architect

Job summary

The Hybrid Identity and Cloud Architect leads the implementation, governance, and optimization of enterprise infrastructure across on-premises and cloud environments. The role designs and modernizes identity services using Active Directory and Microsoft Entra ID, architects Azure and Microsoft 365 solutions, and supports SAP workloads, security, and disaster recovery. It also establishes automation and infrastructure-as-code standards using tools such as PowerShell, Microsoft Graph, Terraform, ARM templates, and Bicep.

Qualifications

• At least 4 years of experience with Azure infrastructure.
• Experience with Azure Virtual Machines, Azure NetApp Files, Azure Load Balancer, Azure Storage, and Azure Backup and Recovery.
• Knowledge of Azure Virtual Networks, VPN Gateway, ExpressRoute, Network Security Groups, Application Gateway, and DNS configurations for SAP.
• Proficiency with infrastructure-as-code tools such as Terraform, ARM templates, and Bicep.
• Knowledge of cloud security practices, including Microsoft Entra ID, role-based access control, managed identities, Key Vault, and Azure Security Center.
• Scripting skills in PowerShell, Python, or Bash.
• Experience with Azure Monitor, Log Analytics, Application Insights, and Azure Sentinel.
• Relevant Azure certifications are desirable.

Responsibilities

• Implement and maintain enterprise identity solutions using Active Directory, Microsoft Entra ID, and hybrid identity services.
• Maintain identity synchronization, federation, single sign-on, multi-factor authentication, and Conditional Access.
• Develop identity lifecycle, access control, and privileged access strategies.
• Design secure, scalable, and cost-effective Azure solutions and develop cloud adoption standards.
• Maintain Active Directory forests, domains, trusts, organizational units, Group Policy, DNS, DHCP, and certificate services.
• Design identity infrastructure for high availability and disaster recovery; lead directory migrations and modernization.
• Architect Microsoft 365 services, including Exchange Online, Teams, SharePoint Online, and OneDrive.
• Design and support hybrid Exchange and mail-flow architecture.
• Design hybrid infrastructure across Azure, VMware, Hyper-V, storage, networking, and datacenter systems.
• Implement Zero Trust principles and support security audits, vulnerability remediation, and governance.
• Develop infrastructure automation using PowerShell, Azure Automation, and Microsoft Graph.
• Lead identity and cloud architecture initiatives, provide technical guidance, and mentor engineers and administrators.

Skills

Certifications

Relocation