Senior Engineer - Cloud & Systems

Administrative Responsibilities:

• Lead and oversee administrative management of enterprise Windows, virtualization, and cloud
• environments.
• Provide advanced administration and optimization of Active Directory, core infrastructure services,
• and clustered systems.
• Manage and fine‑tune VMware virtualization platforms including HA, DRS, and Motion for
• performance and availability.
• Perform administrative control of Azure IaaS, PaaS, and hybrid services, including:
• Azure Virtual Machines, VM Scale Sets, Availability Sets/Zones
• Azure Virtual Networks, NSGs, VPN Gateway, ExpressRoute, Load Balancers
• Azure Storage (Blob, File, Disk, Backup, Site Recovery)
• Azure Monitor, Log Analytics, Alerts, Update Management
• Azure Automation, Azure Policy, and Azure VMware Services
• Administer Azure security and encryption services, including:
• Azure Key Vault administration (keys, secrets, certificates)
• Customer‑Managed Keys (CMK) implementation and key rotation
• Azure Disk Encryption (ADE) for Windows and Linux VMs
• Oversee Azure governance, RBAC, Conditional Access, and compliance controls
• Administer Microsoft 365 SaaS tenant services, including:
• Exchange Online, Teams, SharePoint Online, OneDrive, Stream
• Microsoft Defender for Endpoint, Office 365, Cloud Apps
• Manage additional SaaS and cloud-integrated services as per organizational standards
• Oversee patch management, vulnerability remediation, and OS hardening across hybrid platforms
• Administer endpoint and configuration management tools including SCCM and Intune
• Review, approve, and implement changes through formal change management processes
• Handle escalated administrative issues and provide L3/L4 support
• Maintain administrative documentation, runbooks, standards, and operational procedures
• Coordinate with security, compliance, architecture, and external vendors for audits and service
• optimization

Functional Responsibilities:

• Provide advanced functional support for enterprise Windows Server and hybrid cloud
• environments
• Design, manage, and optimize Active Directory and Azure AD (Entra ID) services
• Deliver functional ownership of DNS, DHCP, DFS, NTP, File/Print Services, and MS Failover
• Clusters
• Lead functional operations of VMware infrastructure including Cluster, HA, DRS, vMotion, and capacity optimization
• Architect, configure, and support Azure IaaS and PaaS services to meet business and operational
• requirements
• Provide functional ownership of Azure components including VMs, VNets, VPN/ExpressRoute,
• Load Balancers, Storage, Backup, and Site Recovery
• Implement and manage Azure security features including RBAC, Conditional Access, Azure
• Policy, CMK, Azure Key Vault, and Azure Disk Encryption (ADE)
• Deliver functional administration and optimization of Microsoft 365 SaaS services (Exchange
• Online, Teams, SharePoint Online, OneDrive, Stream)
• Manage SaaS security and compliance using Microsoft Defender, Intune, and tenant-level
• governance controls
• Lead patching, vulnerability remediation, and OS hardening across on-prem and cloud platforms
• Provide L3/L4 functional support, troubleshooting, and resolution of complex infrastructure and
• cloud issues
• Drive root cause analysis, corrective actions, and service improvement initiatives
• Ensure functional compliance with security policies, regulatory standards, and audit requirements
• Collaborate with cross-functional teams, security, architects, and external vendors for service
• delivery excellence
• Mentor engineers and provide functional guidance and technical leadership

Knowledge, Skills & Experience

Academic & Professional Qualifications:

• Bachelor's degree in computer science, Information Systems, Engineering, or equivalent.
• Relevant technology advanced certification -e.g. VMWare VCP, Microsoft MCSDo
• ITIL V3 / V4 Foundation
• Windows Server Hybrid Administrator Associate
• Azure Administrator Associate
• Microsoft Certified: Azure Solutions Architect Expert
• VMware Certified Professional (VCP)

Experience:

• 5-8 years of relevant experience in information technology or a similar field.

Skills and Requirements:

• Advanced expertise in Windows Server architecture, administration, and enterprise system
• management
• Deep knowledge of Active Directory design, Azure AD (Entra ID), DNS, DHCP, DFS, NTP, and MS
• Failover Clustering
• Strong hands-on experience with VMware technologies including Cluster, HA, DRS, vMotion, and capacity optimization
• Extensive experience with Microsoft Azure services, including:
• Azure Virtual Machines, VM Scale Sets, Availability Sets, and Zones
• Azure Virtual Network (VNet), NSG, VPN Gateway, ExpressRoute, and Load Balancer
• Azure Storage (Blob, File, Disk, Backup, Site Recovery)
• Azure Monitor, Log Analytics, Application Insights, and alerting
• Azure Automation, Update Management, and Azure Policy
• Azure Identity, RBAC, Conditional Access, and Key Vault
• Azure VMware Services
• Advanced administration of Microsoft 365 SaaS services including:
• Exchange Online, Teams, SharePoint Online, OneDrive, Stream
• Microsoft Defender (Endpoint, Office 365, Cloud Apps)
• Intune, endpoint compliance, device security, and MDM/MAM policies
• Strong experience with SaaS platform governance, security controls, and tenant-level management
• Proven expertise in patch management, vulnerability remediation, and OS hardening across hybrid environments
• Advanced skills in SCCM, Intune, and endpoint lifecycle management
• Experience with Oracle Cloud Infrastructure (IaaS / PaaS) environments
• Ability to provide L3/L4 escalation support and lead complex troubleshooting and root cause
• analysis
• Strong understanding of cloud security, compliance frameworks, and audit requirements
• Proven ability to lead technical initiatives, mentor engineers, and drive service improvements
• Excellent communication skills and ability to collaborate with cross-functional teams and stakeholders