Azure Expert (Microsoft 365, Intune, VDI)

VaporVM; Dubai; On-site; AED 350,000 - 600,000; Full time

Job summary

VaporVM is seeking a senior Azure Architect to design, implement and govern enterprise Azure environments in a healthcare/government context. You will lead landing zones, VDI, security engineering and identity management across on‑prem and cloud tenants.

You will drive IaC, cloud governance and cost optimization while implementing Azure PaaS, container apps and APIM, with a focus on Zero Trust and modern endpoint management. Collaboration with security teams and stakeholders is essential.

Qualifications

• Bachelor's degree in Information Technology, Computer Science or related field.
• 7-10+ years of experience in Microsoft infrastructure with at least 5 years on Azure and Microsoft 365 in enterprise environments.
• Proven experience designing and operating Azure infrastructure, networking, identity and security at scale.
• Hands-on experience with Azure PaaS and application delivery services including API Management, Application Gateway with WAF, Front Door, App Service and Functions.
• Strong hands-on experience with Microsoft Intune, Windows Autopilot and modern endpoint management.
• Experience deploying and managing Azure Virtual Desktop and/or Windows 365.
• Proficiency in PowerShell and Infrastructure as Code (Bicep, ARM, Terraform); familiarity with Azure DevOps or GitHub Actions is advantageous.
• Good understanding of Zero Trust, security solutions and cloud security best practices.
• Experience in hybrid environments with on-premises AD, Windows Server and Configuration Manager.
• Microsoft certifications such as AZ-305,AZ-104, MS-102, AZ-140, AZ-500 or SC-300 are advantageous.

Responsibilities

• Design, implement and manage Azure infrastructure including landing zones, subscriptions and management groups, VMs, storage, VNet, VPN/ExpressRoute, Azure Firewall and private endpoints.
• Design and deploy Azure application and integration services (APIM, App Gateway with WAF, Front Door, App Service, Functions, Logic Apps).
• Configure and manage supporting platform services (Azure SQL, AKS, Azure Service Bus, Redis, TLS, private access).
• Implement Azure governance using Policy, RBAC, tagging and naming standards per UAE government cloud rules.
• Automate provisioning with IaC (Bicep, ARM, Terraform) and scripting (PowerShell, Azure CLI).
• Implement backup, DR and HA with Azure Backup/ASR and test recoveries.
• Monitor cost and performance using Azure Monitor, Log Analytics, Cost Management; optimize costs via right-sizing and reservations.
• Ensure security with Defender for Cloud, Key Vault, NSGs and secure score guidance.
• Administer Microsoft 365 services (Exchange Online, SharePoint Online, Teams, Apps) and manage Entra ID (Azure AD) hybrid identity, MFA, Conditional Access.

Skills

Azure architecture

Azure security

PowerShell

Terraform

Bicep

ARM templates

AKS

Hybrid identity

Education

Bachelor's degree in IT or Computer Science

Tools

Azure DevOps

GitHub Actions

Terraform

PowerShell

Azure CLI

Job description

Microsoft
Azure

Design, implement and manage Azure
infrastructure, including landing zones, subscriptions and management groups,
virtual machines, storage, virtual networks, VPN and ExpressRoute connectivity,
Azure Firewall, load balancers and private endpoints.

Design, deploy and manage Azure application and
integration services, including Azure API Management (APIM) for publishing,
securing and monitoring APIs; Azure Application Gateway with Web Application
Firewall (WAF) and Azure Front Door for secure application delivery; and Azure
App Service, Azure Functions and Logic Apps for hosting web applications, APIs
and integrations.

Configure and manage supporting platform
services, such as Azure SQL Database, Azure Container Apps or Azure Kubernetes
Service (AKS), Azure Service Bus and Azure Cache for Redis, including scaling,
custom domains, TLS certificates, VNet integration and private access.

Implement Azure governance using Azure Policy,
role-based access control (RBAC), resource tagging and naming standards, in line with their and UAE Government cloud requirements.

Automate provisioning and configuration using Infrastructure as Code (Bicep, ARM templates or Terraform) and scripting (PowerShell, Azure CLI).

Implement backup, disaster recovery and high availability using Azure Backup, Azure Site Recovery and availability zones, and take part in periodic recovery testing.

Monitor performance, availability and cost using Azure Monitor, Log Analytics and Microsoft Cost Management, and implement cost optimization measures such as right-sizing, reservations and savings plans.

Secure the Azure environment using Microsoft Defender for Cloud, Azure Key Vault, network security groups and secure score recommendations.

Microsoft
365 and Identity

Administer Microsoft 365 services, including Exchange Online, SharePoint Online, OneDrive, Microsoft Teams and Microsoft 365 Apps, including tenant configuration, licensing and service health.

Manage Microsoft Entra ID (Azure AD), including hybrid identity with Entra Connect, single sign-on, multi-factor authentication, Conditional Access, Privileged Identity Management and identity governance.

Implement data protection and compliance using Microsoft Purview, including sensitivity labels, Data Loss Prevention (DLP), retention policies, eDiscovery and audit, to protect sensitive health data.

Configure and manage Microsoft Defender for Office 365 and Defender for Identity in coordination with the security team.

Microsoft
Intune and Endpoint Management

Manage Windows, macOS, iOS and Android devices through Microsoft Intune, including enrollment, configuration profiles, compliance policies and security baselines.

Implement Windows Autopilot for zero-touch device provisioning, and manage application packaging and deployment (Win32, Microsoft Store, line-of-business apps).

Manage Windows Update for Business, update rings and driver and feature updates, and support co-management with Configuration Manager (SCCM) where applicable.

Implement mobile application management (MAM) and app protection policies for bring-your-own-device (BYOD) scenarios, and integrate Intune with Microsoft Defender for Endpoint.

Virtual
Desktop Infrastructure (VDI)

Design, deploy and manage virtual desktop environments using Azure Virtual Desktop and/or Windows 365, including host pools, application groups, workspaces and session hosts.

Manage golden images, FSLogix profile containers, MSIX app attach, autoscaling plans and user experience optimization, including Microsoft Teams optimization.

Monitor VDI performance, capacity and user experience using Azure Virtual Desktop Insights, and troubleshoot connectivity and session issues.

Support existing or legacy VDI platforms (e.g., Citrix, VMware Horizon) and plan migrations to Azure-based solutions where appropriate.

General

Act as the escalation point for complex incidents, problems and changes related to Azure, Microsoft 365, Intune and VDI, in line with their IT service management processes.

Evaluate the Microsoft roadmap and new features, and recommend improvements to architecture, security and user experience.

Generate periodic reports on platform health, availability, capacity, security posture (e.g., Secure Score, device compliance), license usage and cloud costs for management.

Maintain up-to-date architecture diagrams, configuration documentation, runbooks and standard operating procedures.

Ensure compliance with information security policies and applicable UAE and Dubai Government regulations, including DESC requirements and healthcare data protection rules.

Desired Candidate Profile

Bachelor s degree in Information Technology,
Computer Science or a related field.

[7 10]+ years of experience in Microsoft infrastructure, including at least [5] years with Azure and Microsoft 365 in an enterprise environment.

Proven experience designing and operating Azure infrastructure, networking, identity and security at scale.

Hands-on experience with Azure PaaS and application delivery services, including API Management, Application Gateway (WAF), Front Door, App Service and Azure Functions.

Strong hands-on experience with Microsoft Intune, Windows Autopilot and modern endpoint management.

Hands-on experience deploying and managing Azure Virtual Desktop and/or Windows 365.

Proficiency in PowerShell and Infrastructure as Code (Bicep, ARM or Terraform); experience with Azure DevOps or GitHub Actions is an advantage.

Good understanding of Zero Trust principles,
Microsoft security solutions and cloud security best practices.

Experience with hybrid environments, including on-premises Active Directory, Windows Server and Configuration Manager.

Experience in healthcare or government environments is preferred.

Microsoft Certified: Azure Solutions Architect Expert (AZ-305) and Azure Administrator Associate (AZ-104)

Microsoft 365 Certified: Administrator Expert (MS-102)

Microsoft 365 Certified: Endpoint Administrator Associate (MD-102)

Microsoft Certified: Azure Virtual Desktop Specialty (AZ-140)

Microsoft Certified: Azure Security Engineer Associate (AZ-500) and/or Identity and Access Administrator Associate (SC-300) (advantageous)

ITIL 4 Foundation (advantageous)

Strong analytical and troubleshooting skills

Architecture and solution design thinking

Security-first and automation-first mindset

Stakeholder management and ability to explain technical topics to non-technical audiences

Clear written and verbal communication in English (Arabic is an advantage)

Commitment to continuous learning as Microsoft cloud services evolve