Infrastructure Manager

You will own the architecture, deployment, and operational health of core collaboration and identity services—specifically Active Directory, Entra ID, Azure, Exchange hybrid/Online, M365, Intune, and Purview . Leading a small group of senior engineers, you will manage daily priorities, review infrastructure automation, troubleshoot tier-3 issues, spearhead major incident responses, and collaborate across teams to deliver secure, reliable infrastructure.

• Team Leadership & Enablement: Provide leadership and professional development for an engineering team that manages directory, messaging, Microsoft 365, Azure, and endpoint management services.
• Hybrid Identity Architecture: Own and architect the hybrid identity landscape spanning Active Directory and Entra ID, directing identity synchronization, authentication protocols, directory-integrated services (DNS, Kerberos, GPOs, PKI), and operational access for M365 and Azure.
• Access Control & Identity Security: Administer identity security controls, including Conditional Access, Multi-Factor Authentication (MFA), RBAC, application registrations, enterprise apps, consent governance, and Azure Key Vault.
• Messaging & Mail Flow Systems: Oversee Hybrid Exchange infrastructure, SMTP relays, mail routing, and Proofpoint email security, while executing the migration strategy to Exchange Online.
• Endpoint & Collaboration Support: Manage operational health and deployment for Microsoft 365 suites, including Teams, SharePoint Online, OneDrive, Microsoft Intune, and Workspace ONE.
• Data Governance & Compliance: Maintain Microsoft Purview configurations to support data retention, sensitivity labeling, Data Loss Prevention (DLP), eDiscovery, legal holds, and auditing.
• Power Platform Governance: Oversee Power Platform environments by enforcing Data Loss Prevention (DLP) policies and managing connector configurations.
• Escalation & Operational Availability: Function as the primary escalation contact for complex platform issues and own the management of the 24x7 on-call rotation.
• Cross-Functional Collaboration: Partner closely with Security, DevOps, Business Solutions, Cloud, and wider IT infrastructure groups to build and deploy highly secure enterprise solutions.

• 7+ years of progressive IT infrastructure experience within large hybrid enterprise environments, featuring direct technical ownership and guidance across identity, messaging, cloud, and endpoint ecosystems.
• 5+ years of experience managing technical teams, balancing delivery, platform ownership, and cross-functional success with continuous hands-on technical involvement.

• Active Directory & Entra ID: Hybrid identity frameworks, PKI, DNS, GPO administration, and directory-integrated authentication models.
• Exchange Environments: Designing hybrid and Exchange Online architectures, focusing on transport mechanisms, namespace planning, and system coexistence.
• Identity Security Integration: OAuth, Single Sign-On (SSO), MFA, conditional access policy, access reviews, privileged access management, and hybrid identity architectural patterns.

• Azure Administration: Subscription layout, resource organization, Azure/Entra RBAC, app registrations, service principals, managed identities, consent governance, and Key Vault.
• Microsoft 365 Core Services: Technical administration of Teams, SharePoint Online, and OneDrive.
• Endpoint Management: Enterprise platform management using Microsoft Intune and Workspace ONE.
• Information Protection: Microsoft Purview tooling, including retention schedules, sensitivity labels, DLP, eDiscovery, and log auditing.
• Email Security Gateways: Secure mail hygiene administration utilizing Proofpoint.
• Server Infrastructure: Windows Server administration across all currently supported lifecycle versions.

• Migration Execution: Hands-on experience designing and executing enterprise-scale migrations to Exchange Online, including hybrid transport setup and namespace coexistence.
• Automation Engineering: Advanced scripting using PowerShell and Microsoft Graph API to build provisioning workflows, custom reporting, and automated operational fixes (the ideal candidate writes original automation code rather than just executing existing scripts).
• Technical Documentation: Creating architecture diagrams, standard operating procedures, technical specifications, and operational runbooks for identity and messaging infrastructure.