The Hybrid Identity and Cloud Architect is responsible for the implementation, governance, and optimization of enterprise infrastructure across on-premises and cloud environments. The role provides technical leadership for Microsoft Active Directory, Microsoft Entra ID, Microsoft Azure, Microsoft 365, Windows Server, identity management, and hybrid cloud technologies.
This position develops scalable, secure, and resilient infrastructure solutions that support enterprise business applications, end-user services, cybersecurity requirements, and digital transformation initiatives. The Hybrid Identity and Cloud Architect serves as the technical authority for identity, authentication, cloud architecture, hybrid infrastructure, and enterprise directory services while partnering with infrastructure, security, application, and business teams.
JOB RESPONSIBILITIES
Hybrid Identity Architecture
- Implement, and maintain enterprise identity solutions utilizing Active Directory, Microsoft Entra ID, and hybrid identity services.
- Maintain identity synchronization, federation, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Conditional Access solutions.
- Develop strategies for identity lifecycle management, role-based access control, and privileged access management.
- Lead enterprise identity modernization initiatives.
Cloud Architecture and Engineering
- Design and maintain scalable, secure, and cost-effective Azure cloud solutions.
- Develop cloud adoption strategies and architectural standards.
- Create reference architectures, technical standards, and implementation roadmaps.
- Support enterprise application hosting and cloud-native modernization efforts.
Active Directory Services
- Maintain Active Directory forests, domains, trusts, organizational units, Group Policy, DNS, DHCP, and certificate services.
- Establish governance and standards for directory services.
- Design high-availability and disaster recovery solutions for identity infrastructure.
- Lead directory consolidation, migrations, and modernization projects.
Microsoft 365 and Collaboration Services
- Architect Microsoft 365 solutions including Exchange Online, Teams, SharePoint Online, OneDrive, and related services.
- Design and support hybrid Exchange and mail-flow architecture.
- Develop collaboration and productivity platform standards.
- Ensure integration between Microsoft 365 and enterprise identity services.
Infrastructure and Platform Engineering
- Design infrastructure solutions across Azure, VMware, Hyper-V, storage, networking, and datacenter technologies.
- Deploy and optimize virtual machine, storage, backup, and disaster recovery solutions.
- Establish automation and infrastructure-as-code standards.
- Support hybrid infrastructure integration between cloud and on-premises systems.
Security and Compliance
- Implement Zero Trust principles across cloud and on-premises environments.
- Partner with cybersecurity teams to ensure compliance with organizational security requirements.
- Support security audits, vulnerability remediation, and governance initiatives.
Automation and Operational Excellence
- Develop automation using PowerShell, Azure Automation, Microsoft Graph, and related technologies.
- Drive infrastructure operational maturity through monitoring, reporting, and automation.
- Establish enterprise standards for configuration management and infrastructure deployment.
- Promote continuous service improvement initiatives.
Leadership and Collaboration
- Act as a technical lead for identity and cloud architecture initiatives.
- Partner with infrastructure, application, cybersecurity, and business teams.
- Mentor engineers and administrators on Microsoft cloud and identity technologies.
- Provide architectural guidance for strategic technology initiatives and acquisitions.
SKILLS/COMPETENCY REQUIREMENTS
- Azure certifications such as Microsoft Certified: Azure Solutions Architect Expert, Azure Administrator Associate, or Azure for SAP Workloads Specialty are highly desirable.
- Extensive experience (4+ years) with Azure infrastructure, including Azure Virtual Machines, Azure NetApp Files, Azure Load Balancer, Azure Storage (Blob, Files, and Managed Disks), and Azure Backup & Recovery solutions.
- Strong networking knowledge, including Azure VNETs, VPN Gateway, ExpressRoute, NSGs, Application Gateway, and DNS configurations for SAP.
- Proficiency in infrastructure-as-code (IaC) tools, such as Terraform, ARM templates, and Bicep, for deploying Azure infrastructure for SAP workloads.
- Understanding of cloud security best practices, including Azure Active Directory (Entra ID), role-based access control (RBAC), managed identities, Key Vault, and Azure Security Center for SAP environments.\
- Strong skills in automation and scripting, using PowerShell, Python, or Bash to manage Azure infrastructure and SAP configurations.
- Experience with Azure monitoring tools, such as Azure Monitor, Log Analytics, Application Insights, and Azure Sentinel, for tracking SAP system health and performance.