Cloud & Hybrid Infrastructure Engineer

Alkem Laboratories Ltd.; Navi Mumbai; Hybrid; INR 4,000,000 - 7,000,000; Full time

Job summary

Alkem Laboratories Limited is seeking a senior Infrastructure Architect to own the hybrid cloud and identity platforms across global operations. You will design reference architectures for Azure, AWS, and on‑premise systems, drive governance, and ensure security and cost efficiency.

The role requires deep expertise in AD/Entra, IAM, IaC, and FinOps, with experience supporting distributed manufacturing and R&D environments. A strong emphasis on automation and resilience is expected.

Qualifications

• Bachelor's degree in engineering/CS/IT/related discipline.
• Cloud, infrastructure or identity certifications are an added advantage.

Responsibilities

• Design, implement, and maintain reference architectures for cloud, on-premise, and hybrid infrastructure environments.
• Evaluate workload placement strategies based on performance, security, and TCO.
• Conduct architecture reviews for cloud migrations and infrastructure upgrades.
• Maintain architecture docs, standards, and runbooks.

Skills

Azure

AWS

Active Directory

Entra ID

Entra Connect

Group Policy

MFA

SSO

Passwordless

PIM

Identity Governance

Windows Server

Linux Server

Backup & DR

IaC

Scripting

FinOps

Observability

Monitoring

LDAP

Kerberos

SAML

OAuth

OpenID Connect

Education

Bachelor's Degree in Engineering/CS/IT/ECET

Cloud/Infra/Identity Certifications

Tools

Entra Connect

Cloud Sync

Group Policy Administration

Job description

Alkem Laboratories Limited is an Indian multinational pharmaceutical company headquartered in Mumbai, that manufactures and sells pharmaceutical generics, formulations and nutraceuticals in India and globally over 50 countries. We have consistently been ranked amongst the top five pharmaceutical companies in India. Our portfolio includes illustrious brands like Clavam, Pan, Pan-D, and Taxim-O, which feature amongst the top 50 pharmaceutical brands in India.

Purpose of the Role:

To own the architecture, engineering, operations, security, availability, identity services, automation, resilience, and cost governance of Alkem’s hybrid infrastructure landscape, including Azure, AWS, Microsoft Active Directory, Microsoft Entra ID, virtualization platforms, data centres, storage, backup, and disaster recovery environments.

The role is responsible for delivering secure, scalable, resilient, and cost-effective infrastructure and identity services across Alkem’s corporate offices, manufacturing locations, R&D centres, data centres, and international operations.

Key Responsibilities:

• Design, implement, and maintain reference architectures, standards, patterns, and governance frameworks for Azure, AWS, private cloud, and on-premise infrastructure environments.
• Evaluate workload placement strategies based on business requirements, performance, security, compliance, recoverability, integration, data residency, and total cost of ownership.
• Conduct architecture reviews for new applications, cloud migrations, infrastructure upgrades, and modernization initiatives.
• Maintain architecture documentation, infrastructure standards, build specifications, configuration baselines, technical diagrams, and operational runbooks.

Cloud Platform Operations & Governance

• Manage cloud subscriptions, accounts, landing zones, management groups, resource hierarchies, tagging structures, policies, quotas, and shared services.
• Implement and govern controls for identity integration, privileged access, key and secret management, cloud connectivity, monitoring, logging, vulnerability remediation, backup, and patch management.
• Monitor cloud service health, capacity, availability, utilization, and performance metrics.
• Drive cloud governance, operational excellence, and FinOps initiatives to optimize infrastructure costs.

Identity & Access Infrastructure Management

• Administer and support Microsoft Active Directory, Hybrid Active Directory, Microsoft Entra ID, and enterprise identity management platforms.
• Manage domain controllers, Active Directory forests, trusts, replication, DNS integration, Sites and Services, and Group Policy administration.
• Maintain hybrid identity services including Microsoft Entra Connect, Cloud Sync, federation services, and directory synchronization.
• Govern Single Sign-On (SSO), Multi-Factor Authentication (MFA), passwordless authentication, and Conditional Access policies.
• Manage identity lifecycle processes including user provisioning, deprovisioning, RBAC, service accounts, delegated administration, and privileged access controls.
• Support Privileged Identity Management (PIM), identity governance, access reviews, tiered administration, and privileged account protection.
• Ensure identity platform resilience through backup, disaster recovery, platform hardening, recovery testing, and replication monitoring.
• Support application integrations using LDAP, Kerberos, SAML, OAuth, OpenID Connect, SCIM, and modern authentication protocols.
• Integrate identity logs, audit trails, authentication events, and threat intelligence with enterprise SIEM and SOC platforms.
• Drive identity modernization and Zero Trust initiatives in collaboration with Cybersecurity, HR, application, and business stakeholders.
• Manage physical and virtual server infrastructure, operating systems, hypervisors, clusters, storage systems, converged infrastructure, and management platforms.
• Oversee provisioning, hardening, patching, performance tuning, capacity management, lifecycle refresh, decommissioning, and compliance management.
• Support business-critical infrastructure for SAP, manufacturing systems, databases, middleware, analytics platforms, and enterprise applications.

Automation, Observability & Resilience

• Drive automation initiatives using scripting, Infrastructure as Code (IaC), configuration management tools, orchestration platforms, and reusable templates.
• Implement automated governance, compliance checks, and operational workflows.
• Establish centralized monitoring, observability, log management, dashboarding, event correlation, alerting, and service health reporting.
• Own enterprise backup, replication, recovery infrastructure, immutable repositories, cyber recovery, and disaster recovery readiness.
• Conduct restoration testing, disaster recovery drills, and business continuity exercises aligned with defined recovery objectives.

Security & Service Management

• Implement secure infrastructure baselines, encryption standards, privileged access controls, vulnerability management, endpoint protection, and Zero Trust security practices.
• Ensure infrastructure and identity telemetry is integrated with enterprise monitoring and security operations platforms.
• Own ITSM processes including Incident, Problem, Change, Request, Configuration, Capacity, and Availability Management.
• Lead major incident management, root cause analysis, preventive action planning, knowledge management, and runbook development.
• Manage infrastructure service providers and vendors against contractual obligations, SLAs, security requirements, and performance metrics.

Educational Qualifications:

• Bachelor's Degree in Engineering, Computer Science, Information Technology, Electronics & Telecommunications, or a related discipline.
• Relevant cloud, infrastructure, or identity certifications will be an added advantage.

Experience:

• 6 to 8 years of progressive experience in enterprise infrastructure management.
• Minimum 5 years of experience in cloud, hybrid infrastructure, or identity platform architecture and operations.
• Experience in managing Azure and/or AWS cloud environments, Active Directory, Hybrid AD, Microsoft Entra ID, virtualization, storage, backup, and disaster recovery platforms.
• Experience supporting highly available enterprise applications and geographically distributed operations.
• Experience in pharmaceutical, life sciences, chemical, manufacturing, or other regulated industries will be preferred.

Technical Skills:

Strong expertise in Azure Cloud Services and AWS Cloud Services, with deep knowledge of Microsoft Active Directory, Hybrid Active Directory, and Microsoft Entra ID (Azure AD). Proficient in managing Entra Connect, Cloud Sync, Group Policy Administration, Conditional Access, Multi-Factor Authentication (MFA), Single Sign-On (SSO), Passwordless Authentication, Privileged Identity Management (PIM), and Identity Governance & Access Management. Hands‑on experience with Windows and Linux Server Administration, Virtualization Platforms, Storage Management, Backup and Disaster Recovery Solutions, and enterprise infrastructure operations. Strong capabilities in Infrastructure as Code (IaC), Scripting and Automation, FinOps and Cloud Cost Optimization, and Observability & Monitoring Tools. Sound understanding of identity and authentication protocols including LDAP, Kerberos, SAML, OAuth, OpenID Connect, and SCIM, along with practical knowledge of ITIL Service Management Practices for delivering reliable, secure, and scalable IT services.