Hybrid Cloud & Identity Engineer

Position Title: Hybrid Cloud & Identity Engineer

Reports To: Senior Director, Hybrid Cloud, Identity and Infrastructure

Department: Information Technology

Leading Retail Organization

The Hybrid Cloud & Identity Engineer supports, maintains, and improves the enterprise hybrid cloud, identity, server, storage, and virtualization environment. This role blends hands-on operational support with modern cloud engineering practices across Microsoft Azure, Entra , Active Directory, Windows Server, Red Hat Enterprise Linux, SAN storage, hypervisors, backup/recovery, monitoring, and automation.

The engineer is expected to work independently, execute approved changes with strong validation, troubleshoot complex incidents across infrastructure layers, produce clear documentation, and help advance secure, resilient, cost-conscious hybrid cloud operations.

• Support and administer Azure infrastructure resources, including subscriptions, resource groups, virtual machines, storage accounts, virtual networks, NSGs, routing dependencies, Azure Monitor, backup, recovery, and Azure Arc-enabled servers.
• Contribute to Azure landing zone, governance, tagging, RBAC, resource lifecycle, resiliency, and cost-control standards in partnership with infrastructure, security, network, finance, and application teams.
• Assist with cloud migration and modernization work, including workload assessment, resource planning, validation testing, cutover support, and post-migration operational readiness.
• Apply secure-by-design and least-privilege practices when supporting Azure and identity-related resources.

• Administer and support Active Directory, Entra , Group Policy, DNS, DHCP, LDAP, PKI-related dependencies, hybrid identity synchronization, authentication, authorization, SSO, MFA, Conditional Access, and Privileged Identity Management.
• Support selected Microsoft 365 and E5 ecosystem services, including Exchange Online, SharePoint Online, Teams, One Drive, Intune, Defender, Identity Protection, and related governance controls within assigned scope.
• Support Azure Virtual Desktop environments, including host pool health, session host troubleshooting, FSLogix dependencies, capacity validation, monitoring, and patching coordination.
• Maintain directory hygiene, object lifecycle processes, access troubleshooting workflows, and identity-related operational documentation.

• Administer Red Hat Enterprise Linux servers, including provisioning support, patching, package management, systemd services, user/group management, permissions, file systems, LVM, networking, SSH, logs, and core troubleshooting.
• Support RHEL lifecycle planning, version upgrades, EOL/EOS remediation, vulnerability remediation, configuration standards, and compliance evidence collection.
• Use Red Hat tools and ecosystem capabilities where applicable, such as Red Hat Satellite, Insights, repositories, subscription management, SELinux awareness, and approved shell scripting practices.
• Build, patch, upgrade, monitor, and maintain Windows and Linux servers according to enterprise standards, approved changes, and security requirements.

• Support enterprise SAN storage concepts and operational workflows, including capacity awareness, LUN presentation, zoning coordination, multipathing dependencies, replication awareness, and escalation with storage vendors or senior engineers.
• Support virtualization and private cloud platforms such as VMware vSphere/ESXi, Nutanix AHV/HCI, Hyper-V, or comparable hypervisors, including VM provisioning, resource validation, cluster health, host maintenance, and incident troubleshooting.
• Coordinate with hardware, facilities, network, backup, and application teams for physical and virtual server lifecycle work, data center activities, maintenance windows, and dependency validation.
• Participate in storage, hypervisor, and backup/recovery validation for production, development, test, and disaster recovery environments.

• Execute scheduled vulnerability remediation, patching, operating system upgrades, monitoring updates, and approved infrastructure changes with appropriate validation and rollback awareness.
• Respond to alerts and incidents, isolate issues across identity, compute, network, storage, virtualization, backup, and application dependency layers, and escalate business-impacting risks promptly.
• Provide support for PCI, SOX, audit, attack-and-penetration remediation, security control implementation, evidence collection, and change management processes.
• Participate in post-incident reviews and contribute corrective actions, monitoring improvements, and runbook updates.

• Develop and maintain repeatable scripts, runbooks, standards, and procedures using Power Shell,…