Cloud and Server Engineer

AIA (Web); Makati; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

MediCard Phils., Inc. seeks an experienced IT professional to join our Azure and hybrid infrastructure team in Makati. You will deploy and manage Azure services, administer Windows Server and Active Directory, implement Identity governance, and drive DevOps automation with CI/CD pipelines.

The role also covers M365 administration, Intune endpoint management, security baselines, and collaboration with networking and security teams to ensure reliable, compliant services.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 3+ years in server/cloud engineering across Azure and on-prem environments.
• Strong expertise in Active Directory, Azure AD, Windows Server, and hybrid identity (AD Connect).
• Hands-on with Microsoft Intune/Endpoint Manager for Windows and mobile platforms.
• Solid PowerShell skills and CI/CD (Azure DevOps or GitHub Actions).
• Working knowledge of networking fundamentals (TCP/IP, DNS, DHCP, VPN) and security best practices.
• Strong knowledge of server operating systems (Windows, Linux).
• Familiarity with security best practices and tools.
• Excellent problem-solving and analytical skills.
• Strong communication and teamwork abilities.

Responsibilities

• Azure Cloud Engineering: Deploy, configure, and manage Azure services (VMs, VNets, Storage, Key Vault, Load Balancer, Backup/ASR, Monitor, Defender for Cloud).
• Implement hybrid connectivity (site-to-site VPN/ExpressRoute), Azure AD Connect, Conditional Access, and identity governance.
• Optimize cost, performance, and reliability using tagging, budgets, autoscale, availability sets/zones, and policy guardrails.
• On-Premise Server & Virtualization: Administer Windows Server roles, patching, upgrades, baseline configuration, capacity plans, runbooks.
• Active Directory & Identity: Design and maintain AD and Azure AD, Conditional Access, MFA, SSO, identity lifecycle, least-privilege controls.
• Microsoft 365 Administration: Manage Exchange Online, SharePoint Online, OneDrive for Business, Teams, 365 Groups, licensing, retention, DLP.
• Endpoint Management with Intune: Device enrollment, compliance policies, configuration profiles, app lifecycle, update rings, posture management.
• DevOps & Automation: PowerShell/Azure CLI, CI/CD with Azure DevOps or GitHub Actions, DSC/Ansible.
• Security, Monitoring & Compliance: Security baselines, Defender integration, vulnerability remediation, audits documentation.
• Operational Support: Tier 2/3 escalation for cloud/server/identity/endpoint, problem management, RCA.
• Qualifications: Bachelor’s degree etc.

Skills

Strong communication

Teamwork

Problem solving

Analytical thinking

Education

Bachelor's degree in Computer Science or IT

Tools

PowerShell

Azure CLI

Azure DevOps

GitHub Actions

DSC/Ansible

Docker

Kubernetes

Job description

MediCard Phils., Inc.is one of the country's leading HMOand the only HMOfounded and run by Doctors. Since its inception, the concept of service-oriented total health care has been the molding ideal of MediCard. The competition is vast, and the benefits being offered by the competitors are tempting. However, MEDICard has taken the lead in providing innovative and productive ideas that cut down the cost of health maintenance without compromising its quality.

MediCardnow boasts of more than half a million members and over 54,000 accredited doctors in over 1,000 hospitals and clinics nationwide. It also operates 16 MediCard free-standing clinics that provide services at par with those offered by hospitals minus the confinement.

MediCardis currentlylooking for assertive, dynamic and energetic individuals to fill up the following vacancy:

Responsibilities

• Azure Cloud EngineeringDeploy, configure, and manage Azure services (VMs, VNets, Storage, Key Vault, Load Balancer, Backup/ASR, Monitor, Defender for Cloud).
• Implement hybrid connectivity (site‑to‑site VPN/ExpressRoute), Azure AD Connect, Conditional Access, and identity governance.
• Optimize cost, performance, and reliability using tagging, budgets, autoscale, availability sets/zones, and policy guardrails.

On‑Premise Server & Virtualization

• Administer Windows Server (2016/2019/2022) roles—AD DS, DNS, DHCP, GPO, file/print, and PKI/Certificate Services.
• Perform patching, upgrades, and vulnerability remediation.
• Maintain configuration baselines, capacity plans, and runbooks.

Active Directory & Identity

• Design and maintain Active Directory: domain/forest topology, OU structure, GPOs, replication, and FSMO roles.
• Manage Azure Active Directory: Conditional Access, MFA, SSO (SAML/OAuth/OIDC), application registrations, and identity lifecycle.
• Enforce least‑privilege access, PAM/PIM controls, and secure join/enrollment processes.

Microsoft 365 Administration

• Manage M365 services including Exchange Online, SharePoint Online, OneDrive for Business, Teams, and Microsoft 365 Groups.
• Oversee M365 licensing, user provisioning, compliance configurations, retention policies, and DLP/security settings.
• Coordinate tenant health, service adoption, productivity improvements, and feature rollouts.
• Support integration between M365, Azure AD, Intune, and security tools (Defender suite).

Endpoint Management with Microsoft Intune

• Own Microsoft Intune/Endpoint Manager: device enrollment (Autopilot/ABM), compliance policies, configuration profiles, app lifecycle, and update rings.
• Standardize Windows, iOS/iPadOS, and Android posture (encryption, firewall, Defender, BitLocker/FileVault policies) and integrate with Azure AD.
• Build zero‑touch provisioning flows, remediation scripts, and hardware lifecycle (procurement to secure decommission).

DevOps & Automation

• Use PowerShell/Azure CLI for administrative automation and remediations at scale.
• Build and maintain CI/CD using Azure DevOps or GitHub Actions for infrastructure and server configuration (e.g., DSC/Ansible).
• Integrate testing, approvals, and change controls aligned to ITIL/DevOps best practices.

Security, Monitoring & Compliance

• Apply security baselines, patching cadence, Defender for Endpoint/Server integration, and vulnerability remediation.
• Support audits with accurate documentation (as‑built, diagrams, SOPs, CMDB/asset references).

Operational Support

• Provide Tier 2/3 escalation for cloud, server, identity, and endpoint issues; own problem management and root‑cause analysis.
• Collaborate with networking, security, and application teams to ensure end‑to‑end service reliability and performance.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 3+ years in server/cloud engineering across Azure and onprem environments.
• Strong expertise in Active Directory, Azure AD, Windows Server, and hybrid identity (AD Connect).
• Hands‑on with Microsoft Intune/Endpoint Manager for Windows and mobile platforms.
• Solid PowerShell skills and CI/CD (Azure DevOps or GitHub Actions).
• Working knowledge of networking fundamentals (TCP/IP, DNS, DHCP, VPN) and security best practices.
• Strong knowledge of server operating systems (Windows, Linux).
• Familiarity with security best practices and tools.
• Excellent problem-solving and analytical skills.
• Strong communication and teamwork abilities.

Preferred Qualifications

• Relevant certifications (e.g., Microsoft Certified: Azure Administrator).
• Experience with containerization technologies (Docker, Kubernetes).
• Familiarity with Linux servers, containerization, or configuration management tools (DSC/Ansible).
• Knowledge of DevOps practices and CI/CD pipelines.