Azure & Hybrid Cloud Infrastructure Engineer Techmantra Gulf DMCC

Azure & Hybrid Cloud Infrastructure Engineer Job Summary We are seeking an experienced Azure & Hybrid Cloud Infrastructure Engineer to manage, secure, and support our hybrid IT environment, including Microsoft Azure, Microsoft 365, Microsoft Entra ID, on-premises Active Directory, and Exchange. The role requires strong hands-on experience in securing cloud and hybrid infrastructure and supports Azure Landing Zone implementation for migrating on-premises workloads to the cloud. The ideal candidate should demonstrate a proactive security mindset, strong ownership, and flexibility to work after office hours when required. Key Responsibilities Manage and support Azure cloud infrastructure including compute, storage, networking, monitoring, backup, and security controls. Implement and maintain cloud security best practices across identity, networking, workloads, and data. Administer Microsoft Entra ID (Azure AD) including hybrid identity (AD Connect), SSO, MFA, conditional access, and identity governance. Manage and secure on-premises Active Directory (users, groups, GPOs, DNS, replication, and access control). Administer and support Exchange hybrid environment (on-prem Exchange and Exchange Online), including secure mail flow and troubleshooting. Design and operate Azure Landing Zone with governance and security controls (RBAC, policies, logging, and monitoring). Support secure migration of workloads from on-premises to Azure. Configure and manage Azure security services such as Defender for Cloud, Azure Firewall, NSGs, and Log Analytics. Perform security reviews, risk assessments, and support audits and compliance activities. Maintain technical documentation, SOPs, and operational runbooks. Required Skills & Experience Proven hands-on experience securing Azure and hybrid cloud environments. Strong knowledge of Azure security architecture and governance. Experience managing hybrid Active Directory and Exchange environments. Strong understanding of Azure networking (VNet, VPN, ExpressRoute, NSGs, Firewall, DNS). Experience integrating cloud applications with Entra ID using SAML, OAuth, and OpenID Connect. Experience with automation and scripting (PowerShell, Azure CLI; IaC is a plus). Strong troubleshooting, communication, and documentation skills. Required / Preferred Certifications Microsoft Certified: Azure Administrator Associate (AZ-104) – Mandatory / Highly Preferred Microsoft Certified: Security Engineer Associate (AZ-500) – Strongly Preferred Microsoft Certified: Identity and Access Administrator Associate (SC-300) Microsoft Certified: Azure Solutions Architect Expert (AZ-305) Microsoft Certified: Microsoft 365 Administrator Expert Behavioral & Work Requirements Strong security awareness with a proactive and responsible mindset. Positive attitude with strong ownership and accountability. Flexible to work after office hours based on operational or project requirements. Ability to work independently and collaboratively in a hybrid environment.