Key
Responsibilities
Leadership and Architecture
- Own the cloud and endpoint architecture, roadmap and standards.
- Lead major projects such as cloud migrations and Intune rollouts.
- Mentor engineers and act as the final technical escalation point.
- Work with Security and business leaders on risk, vendors and budgets.
Microsoft Azure
- Design and manage Azure subscriptions, VMs, storage, VNets, firewalls and ExpressRoute/VPN.
- Administer Entra ID: RBAC, Conditional Access, MFA and PIM.
- Apply governance, monitoring, backup and disaster recovery (Azure Policy, Monitor, Site Recovery).
AWS and VPC Networking
- Manage core AWS services (EC2, S3, RDS, Route 53) across multiple accounts with AWS Organizations.
- Design VPCs: CIDR planning, subnets, routing, NAT, Security Groups and NACLs.
- Build hybrid connectivity with Transit Gateway, Site-to-Site VPN and Direct Connect.
- Secure and monitor workloads with IAM, CloudWatch, CloudTrail and GuardDuty.
Microsoft Intune and Endpoint Management
- Manage Windows, macOS, iOS and Android devices in Intune.
- Run zero-touch enrolment with Autopilot, Apple Business Manager and Android Enterprise.
- Own compliance, configuration and app policies, plus update rings and patching.
- Integrate Intune with Conditional Access and Defender for Endpoint.
Required Qualifications
- 8+ years in infrastructure, including 5+ years running Azure and AWS in production at enterprise scale.
- Expert in cloud networking: AWS VPC, Azure VNet, Transit Gateway, VPN, Direct Connect/ExpressRoute, BGP and DNS.
- 3+ years managing Intune at scale (1,000+ devices), including Autopilot.
- Deep knowledge of Entra ID, Conditional Access and identity federation.
- Strong PowerShell skills; Python is a plus.
- Proven experience leading projects, mentoring engineers and presenting to senior stakeholders.
Preferred Qualifications and Certifications
Azure
- AZ-305 Solutions Architect Expert, AZ-700 Network Engineer
AWS
- Solutions Architect – Professional, Advanced Networking – Specialty
Intune
- MD-102 Endpoint Administrator
Security
