Position Title: Hybrid Cloud & Identity Engineer

Reports To: Senior Director, Hybrid Cloud, Identity and Infrastructure

Department: Information Technology

Leading Retail Organization

Summary

The Hybrid Cloud & Identity Engineer supports, maintains, and improves the enterprise hybrid cloud, identity, server, storage, and virtualization environment. This role blends hands-on operational support with modern cloud engineering practices across Microsoft Azure, Entra ID, Active Directory, Windows Server, Red Hat Enterprise Linux, SAN storage, hypervisors, backup/recovery, monitoring, and automation.

The engineer is expected to work independently, execute approved changes with strong validation, troubleshoot complex incidents across infrastructure layers, produce clear documentation, and help advance secure, resilient, cost-conscious hybrid cloud operations.

Key Responsibilities

Hybrid Cloud and Azure Administration / Architecture:

Support and administer Azure infrastructure resources, including subscriptions, resource groups, virtual machines, storage accounts, virtual networks, NSGs, routing dependencies, Azure Monitor, backup, recovery, and Azure Arc-enabled servers.
Contribute to Azure landing zone, governance, tagging, RBAC, resource lifecycle, resiliency, and cost-control standards in partnership with infrastructure, security, network, finance, and application teams.
Assist with cloud migration and modernization work, including workload assessment, resource planning, validation testing, cutover support, and post-migration operational readiness.
Apply secure-by-design and least-privilege practices when supporting Azure and identity-related resources.

Identity and Microsoft Platform Engineering:

Administer and support Active Directory, Entra ID, Group Policy, DNS, DHCP, LDAP, PKI-related dependencies, hybrid identity synchronization, authentication, authorization, SSO, MFA, Conditional Access, and Privileged Identity Management.
Support selected Microsoft 365 and E5 ecosystem services, including Exchange Online, SharePoint Online, Teams, OneDrive, Intune, Defender, Identity Protection, and related governance controls within assigned scope.
Support Azure Virtual Desktop environments, including host pool health, session host troubleshooting, FSLogix dependencies, capacity validation, monitoring, and patching coordination.
Maintain directory hygiene, object lifecycle processes, access troubleshooting workflows, and identity-related operational documentation.

Red Hat Linux and Server Lifecycle Management:

Administer Red Hat Enterprise Linux servers, including provisioning support, patching, package management, systemd services, user/group management, permissions, filesystems, LVM, networking, SSH, logs, and core troubleshooting.
Support RHEL lifecycle planning, version upgrades, EOL/EOS remediation, vulnerability remediation, configuration standards, and compliance evidence collection.
Use Red Hat tools and ecosystem capabilities where applicable, such as Red Hat Satellite, Insights, repositories, subscription management, SELinux awareness, and approved shell scripting practices.
Build, patch, upgrade, monitor, and maintain Windows and Linux servers according to enterprise standards, approved changes, and security requirements.

SAN Storage, Hypervisor, and Data Center Infrastructure:

Support enterprise SAN storage concepts and operational workflows, including capacity awareness, LUN presentation, zoning coordination, multipathing dependencies, replication awareness, and escalation with storage vendors or senior engineers.
Support virtualization and private cloud platforms such as VMware vSphere/ESXi, Nutanix AHV/HCI, Hyper-V, or comparable hypervisors, including VM provisioning, resource validation, cluster health, host maintenance, and incident troubleshooting.
Coordinate with hardware, facilities, network, backup, and application teams for physical and virtual server lifecycle work, data center activities, maintenance windows, and dependency validation.
Participate in storage, hypervisor, and backup/recovery validation for production, development, test, and disaster recovery environments.

Security, Compliance, Change, and Incident Response:

Execute scheduled vulnerability remediation, patching, operating system upgrades, monitoring updates, and approved infrastructure changes with appropriate validation and rollback awareness.
Respond to alerts and incidents, isolate issues across identity, compute, network, storage, virtualization, backup, and application dependency layers, and escalate business-impacting risks promptly.
Provide support for PCI, SOX, audit, attack-and-penetration remediation, security control implementation, evidence collection, and change management processes.
Participate in post-incident reviews and contribute corrective actions, monitoring improvements, and runbook updates.

Automation, Documentation, and Continuous Improvement:

Develop and maintain repeatable scripts, runbooks, standards, and procedures using PowerShell, Azure PowerShell, Azure CLI, shell scripting, Terraform, Bicep, ARM, Ansible, Puppet, Git, or comparable approved tooling.
Improve documentation quality across SOPs, knowledge base articles, diagrams, inventories, configuration records, handoff notes, and operational procedures.
Identify opportunities to reduce manual work, improve build consistency, strengthen operational readiness, enhance monitoring, and improve self-service request patterns.
Collaborate effectively with cybersecurity, networking, database, application, desktop support, procurement, finance, vendors, and infrastructure teams.

Required Qualifications

5+ years of experience supporting enterprise infrastructure, identity, cloud, Windows Server, Linux, virtualization, storage, or hybrid operations environments.
3+ years of hands-on Azure administration experience with resources such as virtual machines, virtual networks, subscriptions, resource groups, storage, monitoring, backup, RBAC, policies, and Azure Arc.
Working knowledge of Azure architecture patterns, including landing zones, network segmentation, identity integration, governance, resiliency, lifecycle management, and cost-aware design.
Strong experience administering Active Directory, Entra ID, Group Policy, DNS, DHCP, LDAP, authentication, authorization, MFA, Conditional Access, and privileged access concepts.
Hands-on Red Hat Enterprise Linux administration experience, including patching, package management, shell access, system services, storage/filesystem basics, logs, networking, permissions, and troubleshooting.
Experience supporting hypervisor platforms such as VMware ESXi/vSphere, Nutanix AHV/HCI, Hyper-V, or equivalent virtualization technologies.
Working knowledge of SAN storage concepts, including LUNs, zoning, host mappings, multipathing, replication dependencies, capacity management, and storage-related incident triage.
Experience with vulnerability remediation, patch management, monitoring, backup validation, incident troubleshooting, documentation, and formal change control.
Ability to work independently during maintenance windows or low-staffed coverage periods while making appropriate escalation decisions.
Strong written and verbal communication skills with the ability to translate technical issues into clear business and operational language.

Preferred Qualifications

Microsoft Azure Administrator Associate, Azure Solutions Architect Expert, Microsoft Identity, RHCSA, RHCE, VMware, Nutanix, ITIL, FinOps, or related infrastructure certifications.
Experience with Red Hat Satellite, Red Hat Insights, SELinux, Ansible, Puppet, Terraform, Bicep, Git-based workflows, REST APIs, or Microsoft Graph.
Experience with Azure Virtual Desktop, FSLogix, Intune, MECM, Defender, Exchange Online, SharePoint Online, Teams, OneDrive, and Microsoft 365 E5 security capabilities.
Experience with Dell/EMC, IBM, HPE, Brocade, Rubrik, Nutanix, VMware/Broadcom, or comparable enterprise infrastructure platforms.
Experience supporting cloud migrations, data center modernization, storage refreshes, hypervisor transitions, OS lifecycle programs, disaster recovery, or large infrastructure transformations.
Familiarity with observability and monitoring platforms such as Datadog, Splunk, Microsoft Sentinel, Dynatrace, Prometheus, Grafana, Zabbix, or comparable tools.

Success Measures

Reliable execution of approved maintenance windows, deployments, patching, and validation tasks.
Measurable progress on server, identity, Azure, Linux, storage, hypervisor, lifecycle, and compliance hygiene.
Reduced incident recurrence through better documentation, monitoring quality, root-cause follow-up, and operational standards.
High-quality handoffs across teams, vendors, and coverage windows.
Demonstrated ability to work independently while escalating appropriately when business impact, security risk, or architectural decision points are present.

Xformics Inc

New Jobs

Hybrid Cloud & Identity Engineer