Cloud Architect

Protective Industrial Products; Town of Colonie (NY); On-site; USD 128,000 - 172,000; Full time

Job summary

PIP Global Safety invites a Hybrid Identity and Cloud Architect to lead enterprise identity and cloud initiatives across on-prem and cloud environments. You will govern AD, Entra ID, Azure, and Microsoft 365, shaping scalable, secure infrastructure and automation strategies in a collaborative, cross-functional setting.

The role emphasizes governance,Zero Trust, and hybrid modernization in a large enterprise, with a strong focus on SAP workloads and SAP environments integration.

Qualifications

• Azure certifications are highly desirable.

Responsibilities

• Implement, and maintain enterprise identity solutions using Active Directory and Azure Entra ID.
• Lead hybrid identity modernization initiatives.
• Design scalable, secure Azure cloud solutions.
• Develop automation using PowerShell, Azure Automation, and Graph.

Skills

Azure certifications

Azure infrastructure

Networking (Azure)

IaC (Terraform, ARM, Bicep)

Cloud security

Automation scripting (PowerShell/PY/BP

Azure monitoring

Tools

Terraform

ARM templates

Bicep

Azure Monitor

Azure Sentinel

Job description

#4321

Latham, New York, United States

Position Type

Full-time

Salary Range

128,000-172,000

Working Arrangement

In Office

Job Summary

The Hybrid Identity and Cloud Architect is responsible for the implementation, governance, and optimization of enterprise infrastructure across on-premises and cloud environments. The role provides technical leadership for Microsoft Active Directory, Microsoft Entra ID, Microsoft Azure, Microsoft 365, Windows Server, identity management, and hybrid cloud technologies.
This position develops scalable, secure, and resilient infrastructure solutions that support enterprise business applications, end-user services, cybersecurity requirements, and digital transformation initiatives. The Hybrid Identity and Cloud Architect serves as the technical authority for identity, authentication, cloud architecture, hybrid infrastructure, and enterprise directory services while partnering with infrastructure, security, application, and business teams.

JOB RESPONSIBILITIES

Hybrid Identity Architecture

• Implement, and maintain enterprise identity solutions utilizing Active Directory, Microsoft Entra ID, and hybrid identity services.
• Maintain identity synchronization, federation, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Conditional Access solutions.
• Develop strategies for identity lifecycle management, role-based access control, and privileged access management.
• Lead enterprise identity modernization initiatives.

Cloud Architecture and Engineering

• Design and maintain scalable, secure, and cost-effective Azure cloud solutions.
• Develop cloud adoption strategies and architectural standards.
• Create reference architectures, technical standards, and implementation roadmaps.
• Support enterprise application hosting and cloud-native modernization efforts.

Active Directory Services

• Maintain Active Directory forests, domains, trusts, organizational units, Group Policy, DNS, DHCP, and certificate services.
• Establish governance and standards for directory services.
• Design high-availability and disaster recovery solutions for identity infrastructure.
• Lead directory consolidation, migrations, and modernization projects.

Microsoft 365 and Collaboration Services

• Architect Microsoft 365 solutions including Exchange Online, Teams, SharePoint Online, OneDrive, and related services.
• Design and support hybrid Exchange and mail-flow architecture.
• Develop collaboration and productivity platform standards.
• Ensure integration between Microsoft 365 and enterprise identity services.

Infrastructure and Platform Engineering

• Design infrastructure solutions across Azure, VMware, Hyper-V, storage, networking, and datacenter technologies.
• Deploy and optimize virtual machine, storage, backup, and disaster recovery solutions.
• Establish automation and infrastructure-as-code standards.
• Support hybrid infrastructure integration between cloud and on-premises systems.

Security and Compliance

• Implement Zero Trust principles across cloud and on-premises environments.
• Partner with cybersecurity teams to ensure compliance with organizational security requirements.
• Support security audits, vulnerability remediation, and governance initiatives.

Automation and Operational Excellence

• Develop automation using PowerShell, Azure Automation, Microsoft Graph, and related technologies.
• Drive infrastructure operational maturity through monitoring, reporting, and automation.
• Establish enterprise standards for configuration management and infrastructure deployment.
• Promote continuous service improvement initiatives.

Leadership and Collaboration

• Act as a technical lead for identity and cloud architecture initiatives.
• Partner with infrastructure, application, cybersecurity, and business teams.
• Mentor engineers and administrators on Microsoft cloud and identity technologies.
• Provide architectural guidance for strategic technology initiatives and acquisitions.

SKILLS/COMPETENCY REQUIREMENTS

• Azure certifications such as Microsoft Certified: Azure Solutions Architect Expert, Azure Administrator Associate, or Azure for SAP Workloads Specialty are highly desirable.
• Extensive experience (4+ years) with Azure infrastructure, including Azure Virtual Machines, Azure NetApp Files, Azure Load Balancer, Azure Storage (Blob, Files, and Managed Disks), and Azure Backup & Recovery solutions.
• Strong networking knowledge, including Azure VNETs, VPN Gateway, ExpressRoute, NSGs, Application Gateway, and DNS configurations for SAP.
• Proficiency in infrastructure-as-code (IaC) tools, such as Terraform, ARM templates, and Bicep, for deploying Azure infrastructure for SAP workloads.
• Understanding of cloud security best practices, including Azure Active Directory (Entra ID), role-based access control (RBAC), managed identities, Key Vault, and Azure Security Center for SAP environments.\
• Strong skills in automation and scripting, using PowerShell, Python, or Bash to manage Azure infrastructure and SAP configurations.
• Experience with Azure monitoring tools, such as Azure Monitor, Log Analytics, Application Insights, and Azure Sentinel, for tracking SAP system health and performance.

Area of Interest

Information Technology

At PIP Global Safety, we are committed to fostering a diverse and inclusive workplace where all individuals are respected and valued. We do not tolerate discrimination or harassment of any kind, and we strive to ensure that employment decisions are based on qualifications, merit, and business needs. Employment practices and policies may be subject to variation based on applicable laws and regulations in different countries and jurisdictions.

This commitment applies to all aspects of employment, including hiring, recruiting, promotion, termination, compensation, benefits, training, and development opportunities. We believe that a diverse team strengthens our global success and enriches our culture.

EEO is the Law

ADP Privacy Statement Artificial Intelligence Google Privacy Policy Google Terms of Service