Microsoft Cloud & Infrastructure Manager

Albawani | البواني; Riyadh; On-site; SAR 350,000 - 550,000; Full time

Job summary

Albawani | البواني is seeking a senior IT Infrastructure & Cloud leader to design, deploy, and govern our Microsoft cloud ecosystem across headquarters and field sites in Saudi Arabia.

The role requires 8+ years in IT infrastructure with 3+ years in leadership, hands-on experience with Azure, M365, Entra ID, and security tooling. You will drive cost efficiency, risk management, and vendor relations in a large enterprise setting.

Qualifications

• Bachelor's degree in Computer Science, IT, or related field.
• Master's degree in IT Management or MBA preferred.
• Minimum 8+ years of experience in IT infrastructure and cloud services.
• Minimum 3+ years in a leadership/management role with direct reports.
• Proven experience managing enterprise Microsoft 365 and Azure environments (1000+ users).
• Experience in construction, engineering, or holding company environments preferred.
• Experience with Saudi regulatory requirements (NCA, PDPL) advantageous.
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305) is required.

Responsibilities

• Architect and manage Azure infrastructure including virtual machines, networking, storage, and security components.
• Design and implement Azure Landing Zones following CAF best practices.
• Manage hybrid connectivity between Azure and on-premises infrastructure via ExpressRoute and Site-to-Site VPN.
• Implement and maintain Azure governance including Management Groups, Subscriptions, Resource Groups, and RBAC.
• Oversee Azure Backup, Site Recovery, and disaster recovery solutions ensuring business continuity.
• Monitor and optimize Azure resource utilization, implementing cost management and FinOps practices.
• Lead Microsoft 365 tenant administration including Exchange Online, SharePoint, Teams, and OneDrive.
• Manage Microsoft Entra ID (Azure AD) including user lifecycle, groups, conditional access policies, and MFA.
• Implement Microsoft Intune for endpoint management covering Windows, iOS, and Android devices.
• Configure and manage Microsoft Defender for Endpoint, Office 365, and Cloud Apps security solutions.
• Oversee Microsoft Teams voice services including calling plans, auto attendants, and call queues.
• Manage Microsoft 365 licensing optimization and compliance using License Management tools.

Skills

Cloud architecture

Microsoft 365 administration

Leadership / team management

Azure security & compliance

Budgeting & FinOps

Education

Bachelor's degree

Master's degree (preferred)

Tools

Azure

Microsoft 365

Azure AD / Entra ID

Intune

Defender / Defender for Cloud

PIM / Azure Privileged Identity Management

Job description

Albawani is one of the leading construction and contracting companies in Saudi Arabia. Established in 1991, the company has grown from a small civil works contractor into a major diversified group with operations across construction, infrastructure, engineering, water and power, and industrial services. Headquartered in Riyadh, Albawani is recognized for delivering large-scale commercial, healthcare, educational, and government projects throughout the Kingdom. Albawani is known for its strong commitment to quality, safety, and innovation, holding several international ISO certifications and a Class-1 contractor ranking in Saudi Arabia.

Department: IT - Operations & Infrastructure

Job Purpose

Lead the design, implementation, and operational management of Albawani's Microsoft cloud ecosystem, including Azure infrastructure, Microsoft 365 services, and hybrid connectivity. This role is responsible for ensuring secure, scalable, and cost-effective cloud services that support business operations across headquarters and distributed construction sites throughout Saudi Arabia.

Key Responsibilities

• Architect and manage Azure infrastructure including virtual machines, networking, storage, and security components
• Design and implement Azure Landing Zones following Microsoft Cloud Adoption Framework (CAF) best practices
• Manage hybrid connectivity between Azure and on-premises infrastructure via ExpressRoute and Site-to-Site VPN
• Implement and maintain Azure governance including Management Groups, Subscriptions, Resource Groups, and RBAC
• Oversee Azure Backup, Site Recovery, and disaster recovery solutions ensuring business continuity
• Monitor and optimize Azure resource utilization, implementing cost management and FinOps practices.

Microsoft 365 Administration

• Lead Microsoft 365 tenant administration including Exchange Online, SharePoint, Teams, and OneDrive
• Manage Microsoft Entra ID (Azure AD) including user lifecycle, groups, conditional access policies, and MFA
• Implement Microsoft Intune for endpoint management covering Windows, iOS, and Android devices
• Configure and manage Microsoft Defender for Endpoint, Office 365, and Cloud Apps security solutions
• Oversee Microsoft Teams voice services including calling plans, auto attendants, and call queues
• Manage Microsoft 365 licensing optimization and compliance using License Management tools.

Security & Compliance

• Implement Azure Security Center and Microsoft Defender for Cloud security recommendations
• Design and enforce Data Loss Prevention (DLP) policies across Microsoft 365 workloads
• Configure Microsoft Purview for information protection, sensitivity labels, and data governance
• Ensure compliance with NCA Essential Cybersecurity Controls and PDPL requirements
• Manage privileged access using Azure Privileged Identity Management (PIM) and Just-In-Time access.

Infrastructure Operations

• Manage Windows Server infrastructure including Active Directory, DNS, DHCP, and Group Policy
• Oversee virtualization platforms (Hyper-V, VMware) and physical server infrastructure
• Coordinate with network team on SD-WAN integration for construction site connectivity
• Implement and manage monitoring solutions using Azure Monitor, Log Analytics, and Application Insights
• Ensure infrastructure patching, updates, and hardening following security baselines.
• Lead, mentor, and develop a team of cloud engineers and infrastructure specialists
• Establish and maintain operational runbooks, documentation, and knowledge base articles
• Define and track KPIs including availability, performance, security posture, and cost efficiency
• Manage vendor relationships with Microsoft, cloud partners, and managed service providers
• Participate in IT governance forums, CAB meetings, and strategic planning initiatives
• Prepare and manage annual cloud infrastructure budget, forecasting, and capacity planning.

Qualifications & Experience

Education

• Bachelor's degree in Computer Science, Information Technology, or related field (required)
• Master's degree in IT Management or MBA (preferred)

Experience

• Minimum 8+ years of experience in IT infrastructure and cloud services
• Minimum 3+ years in a leadership/management role with direct reports
• Proven experience managing enterprise Microsoft 365 and Azure environments (1000+ users).
• Experience in construction, engineering, or holding company environments (preferred).
• Experience with Saudi regulatory requirements (NCA, PDPL) advantageous.

Certifications (Required)

• Microsoft Certified: Azure Solutions Architect Expert (AZ-305)