Cloud Architect

Protective Industrial Products•Latham, NY

25d

About The Position

The Hybrid Identity and Cloud Architect is responsible for implementing, governing, and optimizing enterprise infrastructure across on-premises and cloud environments. The role provides technical leadership for Microsoft Active Directory, Microsoft Entra ID, Microsoft Azure, Microsoft 365, Windows Server, identity management, and hybrid cloud technologies. The position develops scalable, secure, and resilient infrastructure solutions that support enterprise business applications, end-user services, cybersecurity requirements, and digital transformation initiatives. It serves as the technical authority for identity, authentication, cloud architecture, hybrid infrastructure, and enterprise directory services while partnering with infrastructure, security, application, and business teams.

Requirements

At least 4 years of experience with Azure infrastructure, including Azure Virtual Machines, Azure NetApp Files, Azure Load Balancer, Azure Storage (Blob, Files, and Managed Disks), and Azure Backup & Recovery solutions.
Strong networking knowledge, including Azure VNETs, VPN Gateway, ExpressRoute, NSGs, Application Gateway, and DNS configurations for SAP.
Proficiency in infrastructure-as-code tools such as Terraform, ARM templates, and Bicep for deploying Azure infrastructure for SAP workloads.
Understanding of cloud security best practices, including Azure Active Directory (Entra ID), role-based access control (RBAC), managed identities, Key Vault, and Azure Security Center for SAP environments.
Strong automation and scripting skills using PowerShell, Python, or Bash to manage Azure infrastructure and SAP configurations.
Experience with Azure monitoring tools such as Azure Monitor, Log Analytics, Application Insights, and Azure Sentinel for tracking SAP system health and performance.

Nice To Haves

Azure certifications such as Microsoft Certified: Azure Solutions Architect Expert, Azure Administrator Associate, or Azure for SAP Workloads Specialty are highly desirable.

Responsibilities

Implement and maintain enterprise identity solutions using Active Directory, Microsoft Entra ID, and hybrid identity services.
Maintain identity synchronization, federation, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Conditional Access solutions.
Develop strategies for identity lifecycle management, role-based access control, and privileged access management.
Lead enterprise identity modernization initiatives.
Design and maintain scalable, secure, and cost-effective Azure cloud solutions.
Develop cloud adoption strategies and architectural standards.
Create reference architectures, technical standards, and implementation roadmaps.
Support enterprise application hosting and cloud-native modernization efforts.
Maintain Active Directory forests, domains, trusts, organizational units, Group Policy, DNS, DHCP, and certificate services.
Establish governance and standards for directory services.
Design high-availability and disaster recovery solutions for identity infrastructure.
Lead directory consolidation, migrations, and modernization projects.
Architect Microsoft 365 solutions, including Exchange Online, Teams, SharePoint Online, OneDrive, and related services.
Design and support hybrid Exchange and mail-flow architecture.
Develop collaboration and productivity platform standards.
Ensure integration between Microsoft 365 and enterprise identity services.
Design infrastructure solutions across Azure, VMware, Hyper-V, storage, networking, and datacenter technologies.
Deploy and optimize virtual machine, storage, backup, and disaster recovery solutions.
Establish automation and infrastructure-as-code standards.
Support hybrid infrastructure integration between cloud and on-premises systems.
Implement Zero Trust principles across cloud and on-premises environments.
Partner with cybersecurity teams to ensure compliance with organizational security requirements.
Support security audits, vulnerability remediation, and governance initiatives.
Develop automation using PowerShell, Azure Automation, Microsoft Graph, and related technologies.
Drive infrastructure operational maturity through monitoring, reporting, and automation.
Establish enterprise standards for configuration management and infrastructure deployment.
Promote continuous service improvement initiatives.
Act as a technical lead for identity and cloud architecture initiatives.
Partner with infrastructure, application, cybersecurity, and business teams.
Mentor engineers and administrators on Microsoft cloud and identity technologies.
Provide architectural guidance for strategic technology initiatives and acquisitions.