Hybrid Cloud & Identity Engineer

Position Title: Hybrid Cloud & Identity Engineer

Reports To: Senior Director, Hybrid Cloud, Identity and Infrastructure

Department: Information Technology

Leading Retail Organization

Summary

The Hybrid Cloud & Identity Engineer supports, maintains, and improves the enterprise hybrid cloud, identity, server, storage, and virtualization environment. This role blends hands-on operational support with modern cloud engineering practices across Microsoft Azure, Entra ID, Active Directory, Windows Server, Red Hat Enterprise Linux, SAN storage, hypervisors, backup/recovery, monitoring, and automation.

The engineer is expected to work independently, execute approved changes with strong validation, troubleshoot complex incidents across infrastructure layers, produce clear documentation, and help advance secure, resilient, cost-conscious hybrid cloud operations.

Key Responsibilities

Hybrid Cloud and Azure Administration / Architecture:

• Support and administer Azure infrastructure resources, including subscriptions, resource groups, virtual machines, storage accounts, virtual networks, NSGs, routing dependencies, Azure Monitor, backup, recovery, and Azure Arc-enabled servers.
• Contribute to Azure landing zone, governance, tagging, RBAC, resource lifecycle, resiliency, and cost-control standards in partnership with infrastructure, security, network, finance, and application teams.
• Assist with cloud migration and modernization work, including workload assessment, resource planning, validation testing, cutover support, and post-migration operational readiness.
• Apply secure-by-design and least-privilege practices when supporting Azure and identity-related resources.

Identity and Microsoft Platform Engineering:

• Administer and support Active Directory, Entra ID, Group Policy, DNS, DHCP, LDAP, PKI-related dependencies, hybrid identity synchronization, authentication, authorization, SSO, MFA, Conditional Access, and Privileged Identity Management.
• Support selected Microsoft 365 and E5 ecosystem services, including Exchange Online, SharePoint Online, Teams, OneDrive, Intune, Defender, Identity Protection, and related governance controls within assigned scope.
• Support Azure Virtual Desktop environments, including host pool health, session host troubleshooting, FSLogix dependencies, capacity validation, monitoring, and patching coordination.
• Maintain directory hygiene, object lifecycle processes, access troubleshooting workflows, and identity-related operational documentation.

Red Hat Linux and Server Lifecycle Management:

• Administer Red Hat Enterprise Linux servers, including provisioning support, patching, package management, systemd services, user/group management, permissions, filesystems, LVM, networking, SSH, logs, and core troubleshooting.
• Support RHEL lifecycle planning, version upgrades, EOL/EOS remediation, vulnerability remediation, configuration standards, and compliance evidence collection.
• Use Red Hat tools and ecosystem capabilities where applicable, such as Red Hat Satellite, Insights, repositories, subscription management, SELinux awareness, and approved shell scripting practices.
• Build, patch, upgrade, monitor, and maintain Windows and Linux servers according to enterprise standards, approved changes, and security requirements.

SAN Storage, Hypervisor, and Data Center Infrastructure:

• Support enterprise SAN storage concepts and operational workflows, including capacity awareness, LUN presentation, zoning coordination, multipathing dependencies, replication awareness, and escalation with storage vendors or senior engineers.
• Support virtualization and private cloud platforms such as VMware vSphere/ESXi, Nutanix AHV/HCI, Hyper-V, or comparable hypervisors, including VM provisioning, resource validation, cluster health, host maintenance, and incident troubleshooting.
• Coordinate with hardware, facilities, network, backup, and application teams for physical and virtual server lifecycle work, data center activities, maintenance windows, and dependency validation.
• Participate in storage, hypervisor, and backup/recovery validation for production, development, test, and disaster recovery environments.

Security, Compliance, Change, and Incident Response:

• Execute scheduled vulnerability remediation, patching, operating system upgrades, monitoring updates, and approved infrastructure changes with appropriate validation and rollback awareness.
• Respond to alerts and incidents, isolate issues across identity, compute, network, storage, virtualization, backup, and application dependency layers, and escalate business-impacting risks promptly.
• Provide support for PCI, SOX, audit, attack-and-penetration remediation, security control implementation, evidence collection, and change management processes.
• Participate in post-incident reviews and contribute corrective actions, monitoring improvements, and runbook updates.

Automation, Documentation, and Continuous Improvement:

• Develop and maintain repeatable scripts, runbooks, standards, and procedures using PowerShell, Azure PowerShell, Azure CLI, shell scripting, Terraform, Bicep, ARM, Ansible, Puppet, Git, or comparable approved tooling.
• Improve documentation quality across SOPs, knowledge base articles, diagrams, inventories, configuration records, handoff notes, and operational procedures.
• Identify opportunities to reduce manual work, improve build consistency, strengthen operational readiness, enhance monitoring, and improve self-service request patterns.
• Collaborate effectively with cybersecurity, networking, database, application, desktop support, procurement, finance, vendors, and infrastructure teams.

Required Qualifications

• 5+ years of experience supporting enterprise infrastructure, identity, cloud, Windows Server, Linux, virtualization, storage, or hybrid operations environments.
• 3+ years of hands-on Azure administration experience with resources such as virtual machines, virtual networks, subscriptions, resource groups, storage, monitoring, backup, RBAC, policies, and Azure Arc.
• Working knowledge of Azure architecture patterns, including landing zones, network segmentation, identity integration, governance, resiliency, lifecycle management, and cost-aware design.
• Strong experience administering Active Directory, Entra ID, Group Policy, DNS, DHCP, LDAP, authentication, authorization, MFA, Conditional Access, and privileged access concepts.
• Hands-on Red Hat Enterprise Linux administration experience, including patching, package management, shell access, system services, storage/filesystem basics, logs, networking, permissions, and troubleshooting.
• Experience supporting hypervisor platforms such as VMware ESXi/vSphere, Nutanix AHV/HCI, Hyper-V, or equivalent virtualization technologies.
• Working knowledge of SAN storage concepts, including LUNs, zoning, host mappings, multipathing, replication dependencies, capacity management, and storage-related incident triage.
• Experience with vulnerability remediation, patch management, monitoring, backup validation, incident troubleshooting, documentation, and formal change control.
• Ability to work independently during maintenance windows or low-staffed coverage periods while making appropriate escalation decisions.
• Strong written and verbal communication skills with the ability to translate technical issues into clear business and operational language.

Preferred Qualifications

• Microsoft Azure Administrator Associate, Azure Solutions Architect Expert, Microsoft Identity, RHCSA, RHCE, VMware, Nutanix, ITIL, FinOps, or related infrastructure certifications.
• Experience with Red Hat Satellite, Red Hat Insights, SELinux, Ansible, Puppet, Terraform, Bicep, Git-based workflows, REST APIs, or Microsoft Graph.
• Experience with Azure Virtual Desktop, FSLogix, Intune, MECM, Defender, Exchange Online, SharePoint Online, Teams, OneDrive, and Microsoft 365 E5 security capabilities.
• Experience with Dell/EMC, IBM, HPE, Brocade, Rubrik, Nutanix, VMware/Broadcom, or comparable enterprise infrastructure platforms.
• Experience supporting cloud migrations, data center modernization, storage refreshes, hypervisor transitions, OS lifecycle programs, disaster recovery, or large infrastructure transformations.
• Familiarity with observability and monitoring platforms such as Datadog, Splunk, Microsoft Sentinel, Dynatrace, Prometheus, Grafana, Zabbix, or comparable tools.

Success Measures

• Reliable execution of approved maintenance windows, deployments, patching, and validation tasks.
• Measurable progress on server, identity, Azure, Linux, storage, hypervisor, lifecycle, and compliance hygiene.
• Reduced incident recurrence through better documentation, monitoring quality, root-cause follow-up, and operational standards.
• High-quality handoffs across teams, vendors, and coverage windows.
• Demonstrated ability to work independently while escalating appropriately when business impact, security risk, or architectural decision points are present.