Azure & Hybrid Cloud Infrastructure Engineer

Azure & Hybrid Cloud Infrastructure Engineer

Job Summary
We are seeking an experienced Azure & Hybrid Cloud Infrastructure Engineer to manage, secure, and support our hybrid IT environment, including Microsoft Azure, Microsoft 365, Microsoft Entra ID, on-premises Active Directory, and Exchange. The role requires strong hands-on experience in securing cloud and hybrid infrastructure and supports Azure Landing Zone implementation for migrating on-premises workloads to the cloud. The ideal candidate should demonstrate a proactive security mindset, strong ownership, and flexibility to work after office hours when required.
Key Responsibilities
Manage and support Azure cloud infrastructure including compute, storage, networking, monitoring, backup, and security controls.
Implement and maintain cloud security best practices across identity, networking, workloads, and data.
Administer Microsoft Entra ID (Azure AD) including hybrid identity (AD Connect), SSO, MFA, conditional access, and identity governance.
Manage and secure on-premises Active Directory (users, groups, GPOs, DNS, replication, and access control).
Administer and support Exchange hybrid environment (on-prem Exchange and Exchange Online), including secure mail flow and troubleshooting.
Design and operate Azure Landing Zone with governance and security controls (RBAC, policies, logging, and monitoring).
Support secure migration of workloads from on-premises to Azure.
Configure and manage Azure security services such as Defender for Cloud, Azure Firewall, NSGs, and Log Analytics.
Perform security reviews, risk assessments, and support audits and compliance activities.
Maintain technical documentation, SOPs, and operational runbooks.
Required Skills & Experience
Proven hands-on experience securing Azure and hybrid cloud environments.
Strong knowledge of Azure security architecture and governance.
Experience managing hybrid Active Directory and Exchange environments.
Strong understanding of Azure networking (VNet, VPN, Express

Route, NSGs, Firewall, DNS).
Experience integrating cloud applications with Entra ID using SAML, OAuth, and OpenID Connect.
Experience with automation and scripting (Power

Shell, Azure CLI; IaC is a plus).
Strong troubleshooting, communication, and documentation skills.
Required / Preferred Certifications
Microsoft Certified: Azure Administrator Associate (AZ-104) – Mandatory / Highly Preferred
Microsoft Certified: Security Engineer Associate (AZ-500) – Strongly Preferred
Microsoft Certified: Identity and Access Administrator Associate (SC-300)
Microsoft Certified: Azure Solutions Architect Expert (AZ-305)
Microsoft Certified: Microsoft 365 Administrator Expert
Behavioral & Work Requirements
Strong security awareness with a proactive and responsible mindset.
Positive attitude with strong ownership and accountability.
Flexible to work after office hours based on operational or project requirements.
Ability to work independently and collaboratively in a hybrid environment.