Cloud & Identity Specialist

MAIN PURPOSE OF THE JOB:
The Cloud and Identity Specialist is a technical expert responsible for building, securing, and maintaining cloud and identity platforms across a global enterprise environment. This role is pivotal in delivering robust, scalable, and secure Azure services, managing modern identity systems, and supporting the strategic cloud transformation journey. The specialist will contribute to solution design, operations, governance, incident response, and continuous improvement efforts across all assigned platforms.

TECHNICAL REQUIREMENTS:
3–5 years of technical experience with Microsoft cloud and identity technologies
Solid working knowledge of Azure, Microsoft Entra ID, and Active Directory
Experience supporting Exchange Online, on-prem Exchange, and mail routing
Familiarity with DNS, SSL certificate management, and hybrid identity scenarios
Experience with scripting (PowerShell or Python preferred)
Comfortable supporting CI/CD workflows
Awareness of enterprise backup, monitoring, and DR strategies
Hands-on participation in O365 or AD migrations

PREFERRED EXPERIENCE AND QUALIFICATIONS:
BSC IT, BTech, or equivalent
An understanding of SQL Databases (advantageous)
Exposure to Silverfort, CoreView, AvePoint, or Palo Alto Cloud NGFW (advantageous)
Understanding of GDPR / ISO27001 / POPI advantageous

ESSENTIAL FUNCTIONS & RESPONSIBILITES:
Support configuration, deployment, and day-to-day operations of Azure services including:
Virtual Machines, Scale Sets, App Services, Function Apps, Azure SQL, Storage, Key Vaults, Front Door, API Management
Azure Virtual WAN, ExpressRoute, and Palo Alto Cloud NGFW integration
Assist in implementing infrastructure changes through GitLab pipelines or templates (e.g., Terraform/ARM/Bicep).
Support backup, recovery, and business continuity configurations across Azure workloads.
Troubleshoot and resolve Azure infrastructure incidents and service disruptions.
Support hybrid identity infrastructure (Active Directory + Entra ID), including:
User and group management
Synchronization and lifecycle changes
Conditional access policies and multifactor authentication
Assist with implementation and support of Silverfort identity protections. Apply least privilege principles and support server access configuration through RBAC and group assignments.
Assist with management of privileged identity access and just-in-time controls.
Assist with configuration and support of Exchange Online, on-prem Exchange, and hybrid setups.
Provide Tier 2/3 support for O365 services including Teams, SharePoint, and OneDrive.
Support AvePoint-based Office 365 backup configuration, monitoring, and testing.
Maintain DNS entries across internal and external zones; assist with zone file hygiene and updates.
Assist with management of internal PKI and external SSL certificates, including lifecycle management.
Participate in configuring and tuning monitoring tools across identity and cloud platforms.
Respond to alerts and support tickets/requests and participate in incident troubleshooting.
Assist in disaster recovery testing, documentation, and backup validation activities.
Contribute to M&A integration efforts including:
Office 365 tenant-to-tenant migrations
Work to integrate acquired systems securely and consistently into the global architecture.
Support CoreView configuration, workflows, and policy enforcement.