Cloud and Server Engineer

AIA Shared Services; Makati; Hybrid; PHP 900,000 - 1,300,000; Full time

Job summary

MediCard Phils., Inc. is looking for a Cloud and Server Engineer to design, implement, and manage cloud infrastructure and server environments.

You will work with Azure services, hybrid connectivity, AD, Intune, and M365, ensuring security and cost-effective operations across on‑prem and cloud platforms. The ideal candidate has 3+ years in cloud/server engineering, strong PowerShell skills, and solid networking knowledge.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 3+ years in server/cloud engineering across Azure and on-prem environments.
• Strong expertise in Active Directory, Azure AD, Windows Server, and hybrid identity (AD Connect).
• Hands-on with Microsoft Intune/Endpoint Manager for Windows and mobile platforms.
• Solid PowerShell skills and CI/CD (Azure DevOps or GitHub Actions).
• Working knowledge of networking fundamentals (TCP/IP, DNS, DHCP, VPN) and security best practices.
• Strong knowledge of server operating systems (Windows, Linux).
• Familiarity with security best practices and tools.
• Excellent problem-solving and analytical skills.
• Strong communication and teamwork abilities.

Responsibilities

• Azure Cloud Engineering: Deploy, configure, and manage Azure services; implement hybrid connectivity; optimize cost and reliability.
• On-Premise Server & Virtualization: Administer Windows Server roles; patching; capacity planning; runbooks.
• Active Directory & Identity: Design/manage AD; MFA/SSO; identity lifecycle; least-privilege access.
• Microsoft 365 Administration: Manage Exchange Online, SharePoint, OneDrive, Teams, and licensing.
• Endpoint Management with Microsoft Intune: Device enrollment, compliance policies, posture, zero-touch provisioning.
• DevOps & Automation: PowerShell/Azure CLI; CI/CD pipelines; infrastructure as code.
• Security, Monitoring & Compliance: Apply baselines; Defender; vulnerability remediation; audit support.
• Operational Support: Tier 2/3 escalation; collaborate with networking, security, and apps teams.

Skills

Azure cloud

Active Directory

Windows Server

PowerShell

Intune/Endpoint Manager

Networking basics

CI/CD

Azure DevOps / GitHub Actions

Security best practices

Education

Bachelor's degree in Computer Science/IT

Tools

Azure

Azure DevOps

GitHub Actions

DSC/Ansible

VMs/Virtualization

Networking (VPN, ExpressRoute)

Azure AD/Conditional Access

Intune

Job description

MediCard Phils., Inc. is one of the country's leading HMO and the only HMO founded and run by Doctors. Since its inception, the concept of service-oriented total health care has been the molding ideal of MediCard. The competition is vast, and the benefits being offered by the competitors are tempting. However, MEDICard has taken the lead in providing innovative and productive ideas that cut down the cost of health maintenance without compromising its quality. MediCard now boasts of more than half a million members and over 54,000 accredited doctors in over 1,000 hospitals and clinics nationwide. It also operates 16 MediCard free-standing clinics that provide services at par with those offered by hospitals minus the confinement. MediCard is currently looking for assertive, dynamic and energetic individuals to fill up the following vacancy: The Cloud and Server Engineer will design, implement, and manage the company’s cloud infrastructure and server environments. The ideal candidate will have extensive experience with cloud platforms, server management, and a strong understanding of networking and security principles.

Responsibilities

• Azure Cloud EngineeringDeploy, configure, and manage Azure services (VMs, VNets, Storage, Key Vault, Load Balancer, Backup/ASR, Monitor, Defender for Cloud). Implement hybrid connectivity (site‑to‑site VPN/ExpressRoute), Azure AD Connect, Conditional Access, and identity governance. Optimize cost, performance, and reliability using tagging, budgets, autoscale, availability sets/zones, and policy guardrails.
• On‑Premise Server & VirtualizationAdminister Windows Server (2016/2019/2022) roles—AD DS, DNS, DHCP, GPO, file/print, and PKI/Certificate Services. Perform patching, upgrades, and vulnerability remediation. Maintain configuration baselines, capacity plans, and runbooks.
• Active Directory & IdentityDesign and maintain Active Directory: domain/forest topology, OU structure, GPOs, replication, and FSMO roles. Manage Azure Active Directory: Conditional Access, MFA, SSO (SAML/OAuth/OIDC), application registrations, and identity lifecycle. Enforce least‑privilege access, PAM/PIM controls, and secure join/enrollment processes.
• Microsoft 365 AdministrationManage M365 services including Exchange Online, SharePoint Online, OneDrive for Business, Teams, and Microsoft 365 Groups. Oversee M365 licensing, user provisioning, compliance configurations, retention policies, and DLP/security settings. Coordinate tenant health, service adoption, productivity improvements, and feature rollouts. Support integration between M365, Azure AD, Intune, and security tools (Defender suite).
• Endpoint Management with Microsoft IntuneOwn Microsoft Intune/Endpoint Manager: device enrollment (Autopilot/ABM), compliance policies, configuration profiles, app lifecycle, and update rings. Standardize Windows, iOS/iPadOS, and Android posture (encryption, firewall, Defender, BitLocker/FileVault policies) and integrate with Azure AD. Build zero‑touch provisioning flows, remediation scripts, and hardware lifecycle (procurement to secure decommission).
• DevOps & AutomationUse PowerShell/Azure CLI for administrative automation and remediations at scale. Build and maintain CI/CD using Azure DevOps or GitHub Actions for infrastructure and server configuration (e.g., DSC/Ansible). Integrate testing, approvals, and change controls aligned to ITIL/DevOps best practices.
• Security, Monitoring & ComplianceApply security baselines, patching cadence, Defender for Endpoint/Server integration, and vulnerability remediation. Support audits with accurate documentation (as‑built, diagrams, SOPs, CMDB/asset references).
• Operational SupportProvide Tier 2/3 escalation for cloud, server, identity, and endpoint issues; own problem management and root‑cause analysis. Collaborate with networking, security, and application teams to ensure end‑to‑end service reliability and performance.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• 3+ years in server/cloud engineering across Azure and onprem environments.
• Strong expertise in Active Directory, Azure AD, Windows Server, and hybrid identity (AD Connect).
• Hands‑on with Microsoft Intune/Endpoint Manager for Windows and mobile platforms.
• Solid PowerShell skills and CI/CD (Azure DevOps or GitHub Actions).
• Working knowledge of networking fundamentals (TCP/IP, DNS, DHCP, VPN) and security best practices.
• Strong knowledge of server operating systems (Windows, Linux).
• Familiarity with security best practices and tools.
• Excellent problem-solving and analytical skills.
• Strong communication and teamwork abilities.

Preferred Qualifications

• Relevant certifications (e.g., Microsoft Certified: Azure Administrator).
• Experience with containerization technologies (Docker, Kubernetes).
• Familiarity with Linux servers, containerization, or configuration management tools (DSC/Ansible).
• Knowledge of DevOps practices and CI/CD pipelines.

Better starts with people who reimagine what is possible and turn ideas into meaningful action. At AIA, you will contribute in your own way, help shape outcomes that matter and collaborate with colleagues across disciplines, teams, markets and levels. We will support you to broaden your perspective, strengthen your capabilities and grow your impact. Together, we challenge assumptions, learn from one another and find better ways forward. Bring your ambition, experience and ideas to AIA, and help shape what “better” looks like.

View our AIA LinkedIn page Bring your difference to AIA