InfrastructureEngineer

Hubexo; Vigo; Hybrid; EUR 18,000 - 24,000; Full time

Benefits offered by this job

Hybrid Vigo schedule: 3 days in office

Early finish Fridays 3:00 PM

Summer schedule 8:00–3:00

Meal allowance

Private health insurance

Employee Assistance Programme

Birthday day off

Up to 2 extra vacation days per year

Job summary

Hubexo is seeking a proactive Infrastructure Engineer in Vigo, Spain, with a hybrid work model (3 days in the office, 2 remote). You will manage MS Entra ID, on-prem AD, and the MS 365 environment while supporting enterprise identity and security initiatives across Iberia.

You will design and optimize network and cloud infrastructure, automate tasks with PowerShell, and document SOPs for compliance. Fluency in English is required for global collaboration.

Qualifications

• Must have hybrid identity and cloud/workplace management experience.
• Experience administering MS Entra ID and on-prem Active Directory.
• Strong knowledge of Microsoft 365 services (Exchange, SharePoint, Teams).
• Proficient in network engineering and cloud networking fundamentals.
• Scripting with PowerShell for automation and admin tasks.

Responsibilities

• Design, secure, maintain, and optimize enterprise IT infrastructure with focus on MS 365/Entra and hybrid identity.
• Administer and secure Microsoft 365 tenant and related services (Exchange Online, SharePoint, Teams).
• Configure and manage Azure networking, VNets, NSGs, Firewalls, and connectivity.
• Automate tasks with PowerShell and document SOPs and compliance processes.

Skills

Entra ID & AD

Microsoft 365

Networking

PowerShell

English proficiency

Education

Microsoft certifications (Enterprise Administrator Expert; Identity and Access Administrator)

CCNA / Network+ certificates

Tools

Azure

Intune

Microsoft 365 admin

Exchange Online

Microsoft Defender / Purview

Job description

InfrastructureEngineer

Construdata21, powered by Hubexo | Vigo | Hybrid: 3 days office and 2 remotely

Role Overview

We are seeking a highly skilled and proactive Infrastructure Engineer to design, secure, maintain, and optimize our enterprise IT infrastructure. In this role, your primary focus will be managing our MS 365/Entra environments, ensuring seamless connectivity, robust identity management, and a secure modern workplace.

This role will provide infrastructure and workplace support across the Iberian region while collaborating closely with the wider global IT organisation.

The ideal candidate is an experienced IT infrastructure professional with strong knowledge of Microsoft 365, Microsoft Entra ID, legacy Active Directory, and networking. You will play a critical role in engineering identity solutions, modernizing network architecture, and driving infrastructure projects from conception to completion together with our wider global IT team.

Key Responsibilities

Identity & Modern Workplace Management

• Cloud Identity & Governance: Manage Microsoft Entra ID as the primary identity provider. Maintain Conditional Access policies, Multi-Factor Authentication (MFA), Privileged Identity Management (PIM), and Single Sign-On (SSO) integrations for enterprise applications.
• Directory Services: Maintain on-premises Active Directory and domain services (DNS, GPOs, OUs) for legacy workloads, supporting the long-term roadmap toward cloud-native identity.

Microsoft 365Engineering

• Tenant Administration:Serve as the primary engineer for the Microsoft 365 tenant, optimizing core services including Exchange Online, SharePoint, OneDrive, and Microsoft Teams.
• Modern Endpoint Management:Utilize Microsoft Intune for device enrollment, mobile device management (MDM), mobile application management (MAM), and automated deployment (Autopilot).
• Security & Compliance:Monitor Microsoft Purview and Defender for Office 365 to ensure data loss prevention (DLP), eDiscovery, and threat protection are aligned with company compliance standards.

Enterprise & Cloud Networking

• Network Infrastructure:Configure, monitor, and troubleshoot enterprise networking equipment, including routers, switches, firewalls, and wireless access points.
• Cloud Networking:Manage Azure virtual networks (VNets), subnets, Network Security Groups (NSGs), Azure Firewalls, and Application Gateways.
• Connectivity & Routing:Manage WAN, LAN, and VPN architectures. Optimize cloud connectivity paths to ensure low-latency access to Microsoft 365 and cloud resources.
• Network Security:Maintain network segmentation, firewall rule bases, and intrusion prevention systems (IPS) to safeguard infrastructure from external and internal threats.

Operations & Project Delivery

• Infrastructure Automation:Utilize PowerShell or other scripting languages to automate repetitive tasks, provisioning, and identity workflows.
• Monitoring & Escalation:Act as the escalation point for complex identity, cloud, and network outages, utilizing monitoring tools to proactively identify and resolve bottlenecks, coordinating response with the global IT team.
• Documentation:Create and maintain standard operating procedures (SOPs), and other compliance and operation relevant documentation.

Required Technical Skills & Qualifications

Must-Have Core Competencies:

• Microsoft Entra ID & Active Directory:Technical knowledge of hybrid identity architectures, Kerberos/NTLM, SAML, OAuth, GPO management, and Entra ID governance.
• Microsoft 365 Ecosystem:Proven experience engineering and securing M365 suites, including advanced enterprise licensing configurations (E3/E5).
• Networking:Solid understanding of TCP/IP, DNS, VLANs, subnetting, and managing enterprise firewalls (e.g., Cisco, Fortinet, Sophos).
• Scripting:Proficiency in PowerShell for managing M365/Entra objects and automating system administration tasks.
• English: Professional working proficiency in English (written and spoken), with the ability to collaborate effectively with global teams, document technical processes, and participate in cross-regional projects.

Preferred Experience & Certifications

• 2-3 years of experience in a dedicated Infrastructure or Network Engineering role.
• Relevant Microsoft certifications are valued (e.g.,Microsoft Certified: Enterprise Administrator Expert,Microsoft Certified: Identity and Access Administrator Associate).
• Relevant networking certifications are valued (e.g.,CCNA,Network+, or equivalent vendor-specific certifications).
• Experience transitioning traditional on-premises infrastructure to cloud-native or hybrid models.

Soft Skills & Cultural Fit

• Problem-Solving Mindset:Excellent analytical skills with a knack for isolating root causes across complex network and identity layers.
• Communication:Strong interpersonal and communication skills, with the ability to collaborate effectively across local and global teams and share knowledge proactively.
• Adaptability:Comfort working in a fast-paced environment with evolving cloud technologies and security landscapes.

What We Offer

• Salary: €18,000 - €24,000 gross per year.
• Permanent contract.
• Hybrid working model: Three days per week in our Vigo office and two days working remotely.
• Early finish on Fridays: Working hours from 8:00 AM to 3:00 PM, so you can start your weekend a little earlier.
• Summer schedule: From June to September, enjoy reduced working hours from 8:00 AM to 3:00 PM, giving you more time to enjoy your afternoons.
• Meal allowance, helping to make your working day easier.
• Private health insurance, because taking care of your wellbeing matters.
• Employee Assistance Programme focused on supporting your health and wellbeing.
• Birthday day off, so you can celebrate your special day however you choose.
• Additional annual leave: Opportunity to earn up to two extra vacation days per year in recognition of your commitment and contribution.

Equal Opportunities

At Hubexo, we are committed to fostering an inclusive and diverse workplace where everyone has equal opportunities to grow and succeed. We welcome applications from all qualified candidates and assess each application based on skills, experience, and potential, regardless of age, gender, ethnic origin, sexual orientation, gender identity, religion, or disability.

If you require any reasonable adjustments or accommodations during the recruitment process, please let us know, and we will be happy to support you.

Joining Hubexo

We’re a global team of around 2,000 people across 25 countries, connected by a shared purpose: helping the world build better.

When you join Hubexo, you gain more than just a job. You’ll find opportunities to grow, the tools and support you need to do your best work, and colleagues who value collaboration, trust, and genuine teamwork.