Microsoft 365 & Azure Infrastructure Architect (she/he)

At the Engineering Competence Center, services and projects are delivered for the Automotive, Rail, and Oil & Gas sectors. Specialized engineering teams work within project and competency groups, and training and certification programs are conducted to enhance engineering competencies.

• 8+ years of experience in IT Infrastructure, with at least 3 years in an Architectural or Lead Engineering role
• Hands-on experience with Azure Virtual Desktop (AVD), FSLogix, and end-to-end modern endpoint management (Intune, Autopilot, Configuration Manager)
• Strong track record of large-scale M365 migrations or Intune rollouts
• Skilled in hybrid identity management, including Active Directory and Entra ID (Azure AD), Conditional Access, MFA, and Passwordless solutions
• Deep expertise in Azure networking, compute, storage, and governance (VMs, VMSS, Availability Sets, VNet peering, NSGs, Azure Firewall, Private Links, Azure Files/NetApp)
• Experienced in automation and Infrastructure as Code (Terraform, Bicep, ARM Templates) and PowerShell scripting
• Understanding of Always On VPN, Split Tunneling, DNS, DHCP, and Zero Trust access models
• Hold or are pursuing relevant certifications such as Microsoft 365 Certified: Administrator Expert or Azure Solutions Architect Expert

• Designing and optimizing user-centric digital workplace environments
• Leading hybrid identity strategies, ensuring seamless integration between on-premises Active Directory and Entra ID, including SSO and Passwordless initiatives
• Architecting and managing modern endpoint strategies with Microsoft Intune, Autopilot, and co-managed Configuration Manager deployments
• Designing, deploying, and maintaining Azure Virtual Desktop environments, FSLogix profile management, and high-performance remote compute
• Ensuring secure and reliable connectivity via Always On VPN, Split Tunneling, and Zero Trust access
• Overseeing Exchange Online and Microsoft Teams environments, ensuring high availability, governance, and optimal voice/video quality
• Implementing and enforcing Azure governance policies, including Azure Policy, Blueprints, Resource Tagging, and Landing Zone management
• Automating deployments and operations using PowerShell, Terraform, Bicep, or ARM Templates
• Monitoring service performance with Azure Monitor and Log Analytics, proactively addressing latency or login issues